Malicious code in web-app-activities (npm)

The package communicates with a domain associated with malicious activity...

CVE-2022-50220

creationtimestamp| type| source ---|---|--- 2025-06-18 11:38:34+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18730 2025-06-18 16:28:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrvgima3eb2k...

CVE-2022-50227

creationtimestamp| type| source ---|---|--- 2025-06-18 11:38:25+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18723 2025-06-18 15:53:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrveky3n2x2m...

CVE-2025-38067

creationtimestamp| type| source ---|---|--- 2025-06-18 10:40:17+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18714 2025-06-18 12:27:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lruz2zh3uc23 2025-12-03 14:14:49+00:00| seen|...

Malicious code in app-prd (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cb4dfa072fe28f45493885c483db8e17cfb04c8c56db854534cfb053b52ebfc6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5150 Malicious code in app-prd (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cb4dfa072fe28f45493885c483db8e17cfb04c8c56db854534cfb053b52ebfc6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-1562

creationtimestamp| type| source ---|---|--- 2025-06-18 07:42:51+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18693 2025-06-18 08:30:50+00:00| seen| Telegram/HqM6uK2LXU7SXVlPrFtYJtTUa7IPac-02SpDf6naVT-Dl2k 2025-06-18 11:03:16+00:00| seen|...

Beyond the Scope: Security Testing of Permission Management in Team Workspace

Nowadays team workspaces are widely adopted for multi-user collaboration and digital resource management. To further broaden real-world applications, mainstream team workspaces platforms, such as Google Workspace and Microsoft OneDrive, allow third-party applications referred to as add-ons to be...

CVE-2025-49878

creationtimestamp| type| source ---|---|--- 2025-06-17 18:48:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrt5u24okt23...

CVE-2025-49877

creationtimestamp| type| source ---|---|--- 2025-06-17 18:14:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrt3ys2xtz2s...

CVE-2025-49861

creationtimestamp| type| source ---|---|--- 2025-06-17 17:49:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrt2m2mtys23 2025-06-18 16:43:25+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18780...

CVE-2025-4879 Citrix Workspace App for Windows - Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges

Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges in Citrix Workspace app for Windows...

CVE-2025-4879

CVE-2025-4879 affects Citrix Workspace app for Windows. The issue is a local privilege escalation where a low-privileged user can gain SYSTEM privileges due to improper privilege management exposed by the Citrix advisory CTX694718. Affected versions are Citrix Workspace app for Windows before spe...

CVE-2025-4879 Citrix Workspace App for Windows - Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges

Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges in Citrix Workspace app for Windows...

Citrix Workspace app for Windows Security Bulletin CVE-2025-4879

Severity - High Description of Problem A vulnerability has been discovered that impacts the Citrix Workspace app for Windows. Affected Versions The vulnerability affects the following supported versions of the Citrix Workspace app for Windows Current Release CR Citrix Workspace app for Windows...

CVE-2025-3880

creationtimestamp| type| source ---|---|--- 2025-06-17 11:38:26+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18578 2025-06-17 15:36:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrst574fmt2k...

CVE-2025-6162

creationtimestamp| type| source ---|---|--- 2025-06-17 05:40:43+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18566 2025-06-17 06:02:00+00:00| published-proof-of-concept| Telegram/iU4ppXSD7ZvfAAYF9ke0MI2-YhaidmuvbOqcw99nNEFXY 2025-06-17 07:22:58+00:00| seen|...

CVE-2025-4775

creationtimestamp| type| source ---|---|--- 2025-06-17 03:38:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrrl27wv6725...

CVE-2025-6140

creationtimestamp| type| source ---|---|--- 2025-06-17 00:05:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrr753mazd2m...

PT-2025-25652 · Citrix · Citrix Workspace App For Windows

Name of the Vulnerable Software and Affected Versions: Citrix Workspace app for Windows affected versions not specified Description: The issue allows a low-privileged user to gain SYSTEM privileges. Recommendations: At the moment, there is no information about a newer version that contains a fix...