CVE-2025-6322

creationtimestamp| type| source ---|---|--- 2025-06-20 09:41:40+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18922 2025-06-20 10:01:43+00:00| published-proof-of-concept| Telegram/p4cwm2yjSN4ovrDbIKK0UGlBzlMUWXB5O0q8DxAqqucQZuA 2025-06-20 10:36:31+00:00| seen|...

Dotnetnuke < 10.0.1 Stored Cross-Site Scripting (XSS) in Activity Feed (CVE-2025-52485)

According to its self-reported version, the instance of Dotnetnuke running on the remote web server is prior to 10.0.1. It is, therefore, affected by a vulnerability. - DNN.PLATFORM Allows Stored Cross-Site Scripting XSS in Activity Feed CVE-2025-52485 Note that Nessus has not tested for this iss...

VReaves: Eavesdropping on Virtual Reality App Identity and Activity Via Electromagnetic Side Channels

Virtual reality VR has recently proliferated significantly, consisting of headsets or head-mounted displays HMDs and hand controllers for an embodied and immersive experience. The VR device is usually embedded with different kinds of IoT sensors, such as cameras, microphones, communication sensor...

Dotnetnuke < 10.0.1 Stored Cross-Site Scripting (XSS) in Activity Feed (GHSA-wwc9-wmm3-2pmf)

According to its self-reported version, the instance of Dotnetnuke running on the remote web server is prior to 10.0.1. It is, therefore, affected by a vulnerability. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number...

Malicious code in nifi-frontend (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-5483 Malicious code in wonderland-api-security-plugin (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in wonderland-api-security-plugin (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in web_for_ntu_flag2 (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in mr456 (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-5438 Malicious code in mr456 (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-5408 Malicious code in fooobar (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in ecs-api-reference (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in alexmssd (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-5352 Malicious code in @unkn0wnartist/h1-poc-test (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in sparemanager (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in content-silent-alarms (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-5009 Malicious code in o11y-ds-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4fca3e674d984eeb8be380f95b3033584360c55efdc438f8f43c521b0d7239f5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5005 Malicious code in vscode-azurecontainerapps (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e5ad54ec265645c2e7358384082a1b1f2385a1caa652b65c359b13681a211b30 Any computer that has this package installed or running should be considered...

Malicious code in idse (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 869cc34e50a9769a40adaa64071f9f2d1b86bd17671c26b2a790d2b72089dddf The OpenSSF Package Analysis project identified 'idse' @ 1.0.10 npm as malicious. It is considered malicious because: - The package communicates...

Falco 0.41.2

Sysdig Falco is a behavioral activity monitoring agent that is open source and comes with native support for containers. Falco lets you define highly granular rules to check for activities involving file and network activity, process execution, IPC, and much more, using a flexible syntax. Falco...