Malicious code in profile-page-app (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a5b881783112f2a7bdb2dbb9d4044a0127e3eecfa9c912d90cb85c22a80aa4fb Any computer that has this package installed or running should be considered...

MAL-2025-5273 Malicious code in profile-page-app (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a5b881783112f2a7bdb2dbb9d4044a0127e3eecfa9c912d90cb85c22a80aa4fb Any computer that has this package installed or running should be considered...

CVE-2025-6651

creationtimestamp| type| source ---|---|--- 2025-06-25 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-436/ 2025-06-25 21:50:24+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19538 2025-06-26 01:08:11+00:00| seen|...

[SECURITY] Fedora 42 Update: gotify-desktop-1.3.7-5.fc42

Small Gotify daemon to receive messages and forward them as desktop notificat ions. Read Gotify messages, and forward them as standard desktop notification . Forward message priority. Auto reconnect if server connection is lost and g et missed messages. Automatically download, cache, and show app...

PDF-XChange Editor App Object Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

Microsoft Azure App Services Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Microsoft Azure. Authentication is not required to exploit this vulnerability. The specific flaw exists within Azure App Services. The issue results from the exposure of sensitive information...

CVE-2025-52888

creationtimestamp| type| source ---|---|--- 2025-06-24 20:48:09+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19409 2025-06-24 22:34:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsf5qxgm7c2o...

CVE-2025-52471

creationtimestamp| type| source ---|---|--- 2025-06-24 20:48:01+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19404 2025-06-25 01:19:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsfgyxmup22a...

CVE-2025-52571

creationtimestamp| type| source ---|---|--- 2025-06-24 20:47:57+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19403 2025-06-24 21:24:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsezue3amb2k 2026-08-14 16:00:11+00:00| seen| https://t.me/purpsec/812...

CVE-2025-45880

creationtimestamp| type| source ---|---|--- 2025-06-24 20:47:56+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19402 2025-06-25 21:02:27+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lshj3dpyzc2s...

CVE-2025-6555

creationtimestamp| type| source ---|---|--- 2025-06-24 20:47:47+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19396 2025-06-24 22:22:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsf54lq3ew2i 2025-06-25 05:12:33+00:00| seen|...

SparkKitty Spyware on App Store and Play Store, Steals Photos for Crypto Data

Kaspersky uncovers SparkKitty, new spyware in Apple App Store & Google Play. Steals photos, targets crypto info, active since early 2024 via malicious apps...

Malicious code in web-experience-app (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2573a173de899b4418c487db0925ec6d4bc915254dbacc39c55f266604d652dd Any computer that has this package installed or running should be considered...

MAL-2025-5477 Malicious code in web-experience-app (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2573a173de899b4418c487db0925ec6d4bc915254dbacc39c55f266604d652dd Any computer that has this package installed or running should be considered...

CVE-2025-4378

Cleartext Transmission of Sensitive Information, Use of Hard-coded Credentials vulnerability in Ataturk University ATA-AOF Mobile Application allows Authentication Abuse, Authentication Bypass. This issue affects ATA-AOF Mobile Application: before 20.06.2025...

CVE-2025-6436

creationtimestamp| type| source ---|---|--- 2025-06-24 17:05:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lself5yoyd2u 2025-06-25 04:47:31+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19418 2026-04-13 17:56:26+00:00| seen|...

CVE-2025-50699

creationtimestamp| type| source ---|---|--- 2025-06-24 16:47:37+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19380 2025-06-24 20:09:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsevo5e3n72r...

Malicious code in homey-web-app (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-5415 Malicious code in homey-web-app (npm)

The package communicates with a domain associated with malicious activity...

CVE-2025-46416

creationtimestamp| type| source ---|---|--- 2025-06-24 16:04:16+00:00| seen| https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3lsehxijmf62s 2025-06-24 16:39:35+00:00| seen| https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3lsejwnahuu27 2025-06-27 16:57:35+00:00|...