MAL-2025-5950 Malicious code in pxsceneui-example-03 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f7a2056080eb99ee23c3a6b2689ac55d696a6b788fb2030a60415a006ee3ab16 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-38142

creationtimestamp| type| source ---|---|--- 2025-07-03 20:22:33+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114791163687587398...

CVE-2025-0885

creationtimestamp| type| source ---|---|--- 2025-07-03 10:12:09+00:00| seen| Telegram/gIXzIoI81RofVrAqju96ZAr9DQp9dQ04Lh0Jw9bwEQQKaA...

CVE-2024-9017

creationtimestamp| type| source ---|---|--- 2025-07-03 07:12:32+00:00| seen| Telegram/O5JpOxaWyANKHWQvE4gB1-6YmLw1ynBYj9UzfD9ZnbqUXCI...

CVE-2025-37948

creationtimestamp| type| source ---|---|--- 2025-06-27 10:49:52+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19686 2025-12-03 14:14:49+00:00| seen| https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8...

CVE-2025-1718

creationtimestamp| type| source ---|---|--- 2025-06-24 11:50:54+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19327 2025-06-24 13:07:47+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/41716 2025-06-24 19:00:05+00:00| published-proof-of-concept|...

CVE-2022-49971

creationtimestamp| type| source ---|---|--- 2025-06-19 13:39:51+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18858 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/...

CVE-2022-49974

creationtimestamp| type| source ---|---|--- 2025-06-19 13:39:50+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18857 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/...

CVE-2022-50212

creationtimestamp| type| source ---|---|--- 2025-06-18 11:38:45+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18737 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/...

CVE-2022-50213

creationtimestamp| type| source ---|---|--- 2025-06-18 11:38:44+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18736 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/...

CVE-2025-38064

creationtimestamp| type| source ---|---|--- 2025-06-18 10:40:19+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18717 2025-12-03 14:14:49+00:00| seen| https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8 2026-03-19 00:00:00+00:00| seen|...

CVE-2025-6160

creationtimestamp| type| source ---|---|--- 2025-06-17 04:41:13+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18561 2025-06-17 05:03:25+00:00| published-proof-of-concept| Telegram/pYQ5CN5t9bb4-cxTyvmjmPi-QJHWeAchXbT1rfCyTmPGt4 2026-03-04 08:37:35+00:00| seen|...

CVE-2025-41365

Code injection vulnerability in IDF v0.10.0-0C03-03 and ZLF v0.10.0-0C03-04. This vulnerability allows an attacker to store malicious payload in software that will run in the victim's browser. Exploiting this vulnerability requires authenticating to the device and executing certain commands that...

Malicious code in atlasctf-21-prod-03 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 374fe69b5719748c5255c0665469e0e45e3064884ece003a7fbfc56c04d3a93b On installation or importing, the package attempts to exfiltrate some basic information, e.g. /etc/passwd --- Category: PROBABLYPENTEST - Packages looking like...

MAL-2025-6440 Malicious code in atlasctf-21-prod-03 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 374fe69b5719748c5255c0665469e0e45e3064884ece003a7fbfc56c04d3a93b On installation or importing, the package attempts to exfiltrate some basic information, e.g. /etc/passwd --- Category: PROBABLYPENTEST - Packages looking like...

CVE-2025-41363

The CVE-2025-41363 issue affects IDF v0.10.0-0C03-03 and ZLF v0.10.0-0C03-04. A cross-origin resource sharing (CORS) configuration error allows commands that require view permission to be executed after authenticating to the device. The documented exploitation path indicates authentication is nee...

CVE-2025-41362 Code injection vulnerability in IDF and ZLF

Code injection vulnerability in IDF v0.10.0-0C03-03 and ZLF v0.10.0-0C03-04. This vulnerability allows an attacker to store malicious payload in software that will run in the victim's browser. Exploiting this vulnerability requires authenticating to the device and executing certain commands that...

ZIV IDF和ZIV ZLF 安全漏洞

The ZIV IDF and ZIV ZLF are both transformer differential protection relays from ZIV Spain. A security vulnerability exists in ZIV IDF version v0.10.0-0C03-03 and ZLF version v0.10.0-0C03-04, which stems from a cross-resource sharing configuration error...

ZIV IDF和ZIV ZLF 代码注入漏洞

The ZIV IDF and ZIV ZLF are both transformer differential protection relays from ZIV Spain. A code injection vulnerability exists in ZIV IDF version v0.10.0-0C03-03 and ZLF version v0.10.0-0C03-04, which originates from a code injection that could lead to malicious code execution...

ZIV IDF 跨站脚本漏洞

The ZIV IDF is a transformer differential protection relay from ZIV Spain. A cross-site scripting vulnerability exists in ZIV IDF version v0.10.0-0C03-03 and ZLF v0.10.0-0C03-04, which originates from stored cross-site scripting and could lead to the execution of malicious scripts...