MAL-2025-133 Malicious code in tagmyphotosblog (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 68718b8c6a0e78b22dbddaeb5a6be69dac34b17d2e20d9a2fdf08d6bbbf95a00 The OpenSSF Package Analysis project identified 'tagmyphotosblog' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in keystone-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d1e499fbcaddce6bdea8ab5e0bf4a301d23b6db8e65cb2647376df41c9850cb2 The OpenSSF Package Analysis project identified 'keystone-app' @ 2.0.0 npm as malicious. It is considered malicious because: - The package...

CVE-2024-45341

creationtimestamp| type| source ---|---|--- 2025-01-16 22:15:09+00:00| seen| https://bsky.app/profile/golang.org/post/3lfvckap2p22o 2025-01-16 23:16:09+00:00| seen| https://bsky.app/profile/golang.org/post/3lfvfxdxeis2y 2025-01-17 12:34:52+00:00| seen|...

CVE-2024-45336

creationtimestamp| type| source ---|---|--- 2025-01-16 22:15:09+00:00| seen| https://bsky.app/profile/golang.org/post/3lfvckap2p22o 2025-01-16 23:16:09+00:00| seen| https://bsky.app/profile/golang.org/post/3lfvfxdxeis2y 2025-01-17 12:34:52+00:00| seen|...

CVE-2025-23530

creationtimestamp| type| source ---|---|--- 2025-01-16 20:17:38+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfv3y66ylk2r 2025-01-16 20:48:55+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/113839999202514556 2025-01-16 20:49:18+00:00| seen|...

CVE-2024-57162

creationtimestamp| type| source ---|---|--- 2025-01-16 16:15:44+00:00| seen| https://infosec.exchange/users/cve/statuses/113838924965901071 2025-01-16 16:16:01+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfuoi4p5q22s 2025-01-16 16:19:24+00:00| seen|...

CVE-2025-0456

creationtimestamp| type| source ---|---|--- 2025-01-16 02:02:40+00:00| seen| https://infosec.exchange/users/cve/statuses/113835570652577456 2025-01-16 02:15:54+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lft7jul2dm2h 2025-01-16 02:48:42+00:00| seen|...

CVE-2025-0487

creationtimestamp| type| source ---|---|--- 2025-01-15 20:34:19+00:00| seen| https://infosec.exchange/users/cve/statuses/113834279471674308 2025-01-15 20:54:58+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/1860 2025-01-15 21:15:49+00:00| seen|...

Tracking cloud-fluent threat actors - Part two: Behavioral cloud IOCs

Discover how behavioral cloud IOCs can expose malicious activity as we break down real-world examples to reveal actionable detection techniques...

CVE-2024-12403

creationtimestamp| type| source ---|---|--- 2025-01-15 09:28:29+00:00| seen| https://infosec.exchange/users/cve/statuses/113831661336637777 2025-01-15 10:11:57+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/1716 2025-01-15 10:15:49+00:00| seen|...

CVE-2024-39799

creationtimestamp| type| source ---|---|--- 2025-01-14 15:19:01+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfpkedrrhc2t 2025-01-14 15:48:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lfplyqfxkw2q 2025-01-14 15:50:07+00:00| seen|...

Belledonne Communications Linphone-Desktop

RISK EVALUATION Successful exploitation of this vulnerability could could result in a remote attacker causing a denial-of-service condition on the affected devices. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability,...

CVE-2024-27397

creationtimestamp| type| source ---|---|--- 2025-01-14 04:20:53+00:00| seen| https://bsky.app/profile/dinosn.bsky.social/post/3lfofldj2b22d 2025-01-14 06:20:12+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3lfomaubh2k2x 2025-01-14 08:51:49+00:00| seen|...

PT-2025-6278

Name of the Vulnerable Software and Affected Versions FortiOS versions 7.0.0 through 7.0.16 FortiProxy versions 7.0.0 through 7.0.19 FortiProxy versions 7.2.0 through 7.2.12 Description A critical authentication bypass issue exists in FortiOS and FortiProxy, potentially allowing a remote,...

Schneider Electric Modicon M340 and BMXNOE0100/0110, BMXNOR0200H (Update B)

RISK EVALUATION Successful exploitation of this vulnerability could cause information disclosure of a restricted web page, modification of a web page and a denial of service when specific web pages are modified and restricted functions are invoked. 2. RECOMMENDED PRACTICES CISA reminds...

CVE-2023-42247

creationtimestamp| type| source ---|---|--- 2025-01-13 22:11:00+00:00| seen| https://infosec.exchange/users/cve/statuses/113823335053783592 2025-01-13 22:17:01+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfnrauqxjf2j 2025-01-13 22:38:17+00:00| seen|...

CVE-2024-11636

creationtimestamp| type| source ---|---|--- 2025-01-13 06:05:08+00:00| seen| https://infosec.exchange/users/cve/statuses/113819537102998283 2025-01-13 06:06:06+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/1355 2025-01-13 06:10:25+00:00| seen|...

CVE-2025-0407

creationtimestamp| type| source ---|---|--- 2025-01-13 01:36:35+00:00| seen| https://infosec.exchange/users/cve/statuses/113818481099839135 2025-01-13 02:06:24+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/1347 2025-01-13 02:15:59+00:00| seen|...

CVE-2025-23109

creationtimestamp| type| source ---|---|--- 2025-01-11 03:43:12+00:00| seen| https://infosec.exchange/users/cve/statuses/113807654396857326 2025-01-11 04:15:28+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfgtv3mhqx2d 2025-01-11 04:43:46+00:00| seen|...

Cross-site Scripting (XSS)

Overview mediawiki/article-feedbackv5 is a MediaWiki extension designed to engage readers in the assessment of article quality Affected versions of this package are vulnerable to Cross-site Scripting XSS via messages passed in as articlefeedbackv5-activity-pane-header, which is not escaped. Detai...