Inside Tycoon2FA: How a leading AiTM phishing kit operated at scale

In this article 1. Operational overview of Tycoon2FA 2. Mitigation and protection guidance 3. Microsoft Defender detections Following its emergence in August 2023, Tycoon2FA rapidly became one of the most widespread phishing-as-a-service PhaaS platforms, enabling campaigns responsible for tens of...

GitLab 17.11 < 18.7.5 / 18.8 < 18.8.5 / 18.9 < 18.9.1 (CVE-2026-1747)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - GitLab has remediated an issue in GitLab EE affecting all versions from 17.11 before 18.7.5, 18.8 before 18.8.5, and 18.9 before 18.9.1 that, under certain conditions, could have allowed Developer-rol...

CVE-2026-1747

creationtimestamp| type| source ---|---|--- 2026-02-25 13:10:18+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mfoqwufv6l2q...

MiracleLinux 7 : graphite2-1.3.10-1.el7 (AXSA:2017-1747:01)

The remote MiracleLinux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2017-1747:01 advisory. Graphite2 is a project within SILs Non-Roman Script Initiative and Language Software Development groups to provide rendering capabilities for comple...

EUVD-2026-1747

Vivotek IP7137 camera with firmware version 0200a by default dos not require to provide any password when logging in as an administrator. While it is possible to set up such a password, a user is not informed about such a need. The vendor has not replied to the CNA. Possibly all firmware versions...

EUVD-2007-4587

Malware in sbrugna...

EUVD-2022-1747

Malicious code in bioql PyPI...

[Important] [Security] Vulnerability Fixes in urllib3, PyYAML, and Pillow (CVE-2018-20060, CVE-2020-1747, CVE-2020-14343, CVE-2023-50447, and CVE-2023-44271) for VzLinux 7.9

This update fixes the vulnerabilities in urllib3, PyYAML, and Pillow, which are registered as CVE-2018-20060, CVE-2020-1747, CVE-2020-14343, CVE-2023-50447, and CVE-2023-44271...

Alibaba Cloud Linux 3 : 0269: PyYAML (ALINUX3-SA-2024:0269)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2024:0269 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2017-18342: In PyYAML before 5.1, the...

CVE-2022-1747

creationtimestamp| type| source ---|---|--- 2025-04-17 18:58:02+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/12319...

CVE-2025-1747

creationtimestamp| type| source ---|---|--- 2025-02-28 17:51:55+00:00| seen| https://t.me/cvedetector/19158 2025-03-02 11:44:23+00:00| seen| Telegram/-TikUtwqoacLhSssnw7loeKwJDKvG2s1h7mFf27GtOZ8Hy8 2025-08-22 14:52:23+00:00| seen| MISP/24306fae-b16b-4478-9297-d2973cdb583c...

CVE-2024-1747

creationtimestamp| type| source ---|---|--- 2024-08-01 08:44:10+00:00| seen| https://t.me/cvedetector/2218...

WordPress WooCommerce Customers Manager Plugin < 30.2 is vulnerable to Cross Site Scripting (XSS)

Software WooCommerce Customers Manager Type Plugin Vulnerable versions 30.2 Fixed in 30.2 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-1747 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID e74aefc31812 Credits Erwan LR...

Important: Red Hat Security Advisory: kernel security update

An update for kernel is now available for Red Hat Enterprise Linux 7.6 Advanced Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

RHEL 7 : kernel (RHSA-2024:1747)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:1747 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: net/sched: fix use-after-free in HFSC...

PyYAML: Arbitrary Code Execution

Background PyYAML is a YAML parser and emitter for Python. Description A vulnerability has been discovered in PyYAML. Please review the CVE identifier referenced below for details. Impact A vulnerability was discovered in the PyYAML library, where it is susceptible to arbitrary code execution whe...

CBL Mariner 2.0 Security Update: PyYAML (CVE-2020-1747)

The version of PyYAML installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2020-1747 advisory. - A vulnerability was discovered in the PyYAML library in versions before 5.3.1, where it is susceptible to...

CVE-2020-1747 affecting package PyYAML for versions less than 5.4.1-1

CVE-2020-1747 affecting package PyYAML for versions less than 5.4.1-1. An upgraded version of the package is available that resolves this issue...

Rocky Linux 8 : python38:3.8 (RLSA-2020:4641)

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2020:4641 advisory. - PyYAML 5.1 through 5.1.2 has insufficient restrictions on the load and loadall functions because of a class deserialization issue, e.g., Popen is a...

BELL-CVE-2020-1747 CVE-2020-1747 does not affect BellSoft software

Bulletin has no description...