Who’s Behind the Seized Forums ‘Cracked’ & ‘Nulled’?

The FBI joined authorities across Europe last week in seizing domain names for Cracked and Nulled , English-language cybercrime forums with millions of users that trafficked in stolen data, hacking tools and malware. An investigation into the history of these communities shows their apparent...

Malicious code in romanes-eunt-domus-jd-1337 (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1202a9a3614d98b7264d1a234429ca6a79c68ee4d57f620f402d831f7747b38a Any computer that has this package install...

WordPress Tutor LMS plugin <= 2.7.6 - User Registration Setting Bypass to Unauthorized User Registration vulnerability

User Registration Setting Bypass to Unauthorized User Registration vulnerability discovered by 1337Wannabe in WordPress Plugin Tutor LMS versions = 2.7.6...

Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Microsoft

CVE-2024-30090 - LPE PoC CVE-2024-30090https://msrc.mic...

WordPress ConvertKit plugin <= 2.4.9 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by 1337Wannabe in WordPress Plugin ConvertKit versions = 2.4.9...

WordPress GP Premium plugin <= 2.4.0 - Reflected Cross-Site Scripting vulnerability

Reflected Cross-Site Scripting vulnerability discovered by 1337Wannabe - home, M.Awad in WordPress Plugin GP Premium versions = 2.4.0...

WordPress ConvertPlug plugin <= 3.5.25 - Authenticated (Contributor+) PHP Object Injection vulnerability

Authenticated Contributor+ PHP Object Injection vulnerability discovered by 1337Wannabe in WordPress Plugin ConvertPlus versions = 3.5.25...

WordPress Header Footer Code Manager Pro plugin <= 1.0.16 - Reflected Cross-Site Scripting via message vulnerability

Reflected Cross-Site Scripting via message vulnerability discovered by 1337Wannabe in WordPress Plugin Header Footer Code Manager Pro versions = 1.0.16...

CVE-2024-1337

creationtimestamp| type| source ---|---|--- 2024-03-03 16:51:24+00:00| seen| https://t.me/ctinow/198826 2026-01-24 22:43:35+00:00| seen| https://gist.github.com/alon710/6eca4037be86e75855719d48f741002d...

CVE-2024-1337

The SKT Page Builder plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'saveSktbuilderPageData' function in all versions up to, and including, 4.1. This makes it possible for authenticated attackers, with subscriber access and above, ...

CVE-2024-1337

The CVE-2024-1337 advisory concerns the WordPress SKT Page Builder plugin. A missing capability check in saveSktbuilderPageData affects all versions up to and including 4.1, permitting authenticated users with subscriber access or higher to inject arbitrary content and modify data on pages. Pract...

WordPress SKT Page Builder Plugin <= 4.1 is vulnerable to Broken Access Control

Software SKT Page Builder Type Plugin Vulnerable versions = 4.1 Fixed in 4.2 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2024-1337 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 6884b98ffc2f Credits Francesco Carlucci Required...

CVE-2021-1337

creationtimestamp| type| source ---|---|--- 2024-01-08 16:47:50+00:00| seen| https://t.me/arpsyndicate/2659...

Oracle Linux 5 : gfs2-utils (ELSA-2009-1337)

The remote Oracle Linux 5 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2009-1337 advisory. 0.1.62-1 - Fix man page references to fsck.gfs2. - Resolves: rhbz477072 0.1.61-1 - fsck.gfs2 no longer segfaults when fixing 'EA leaf block type' problems. -...

Malicious code in confusion-1337 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9d5e0f5fa705444941a3db8182bfc9c7eacb35a3bda7f57cccae5e088eb93404 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-205 Malicious code in confusion-1337 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9d5e0f5fa705444941a3db8182bfc9c7eacb35a3bda7f57cccae5e088eb93404 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Rocky Linux 9 : firefox (RLSA-2023:1337)

The remote Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2023:1337 advisory. - Mozilla: Incorrect code generation during JIT compilation CVE-2023-25751 - Mozilla: Potential out-of-bounds when accessing throttled streams...

Oracle Linux 9 : firefox (ELSA-2023-1337)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-1337 advisory. 102.9.0-3.0.1 - Updated homepages to use https Orabug: 34648274 102.9.0-3 - Update to 102.9.0 build2 102.9.0-2 - removed disable-openh264-download...

RHEL 9 : firefox (RHSA-2023:1337)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:1337 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox...

CVE-2023-1337

creationtimestamp| type| source ---|---|--- 2023-03-10 22:51:18+00:00| seen| https://t.me/cibsecurity/59812 2023-12-21 17:48:38+00:00| seen| https://t.me/arpsyndicate/2055 2026-07-29 12:00:48+00:00| seen| https://t.me/CVEhub/8692 2026-07-30 00:01:18+00:00| seen| https://t.me/CVEhub/8692 2026-07-3...