📄 Backdoor.Win32.Netbus.170 MVID-2025-0703 Insecure Credential Storage

Backdoor.Win32.Netbus.170 malware listens on TCP ports 12632 and 12631. The backdoor server password "ecoli" is stored in cleartext in an .INI textfile, stored under "C:\Windows" having the same name as the malware. Third party attackers who have knowledge of the password can login and issue...

CVE-2025-12631

creationtimestamp| type| source ---|---|--- 2025-11-11 05:35:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5dg3ejhhq2a...

CVE-2018-12631

CVE-2018-12631 affects Redatam7 (formerly Redatam WebServer). A path-traversal in the /redbin/rpwebutilities.exe/text?LFN=../ endpoint allows remote attackers to read arbitrary files. The vulnerability is reported across multiple feeds (including Red Hat and CNVD/NVD entries) with the core issue ...

CVE-2017-12631

CVE-2017-12631 affects Apache CXF Fediz WS-Federation plugins (Spring 2, 3, 4). The root cause is a CSRF vulnerability that can cause a security context to be established using a malicious client’s roles for the end user. Affected components are the Fediz Spring plugins in versions before 1.4.3 a...