2790 matches found
EUVD-2018-21604
VestaCP commit a3f0fa1 2018-05-31 up to commit ee03eff 2018-06-13 contain embedded malicious code that resulted in a supply-chain compromise. New installations created from the compromised installer since at least May 2018 were subject to installation of Linux/ChachaDDoS, a multi-stage DDoS bot...
CVE-2018-25117
The VestaCP (Vesta Control Panel) web hosting control panel is affected by a supply-chain compromise stemming from embedded malicious code in commits a3f0fa1 (2018-05-31) through ee03eff (2018-06-13). New installations created using the compromised installer since May 2018 were subject to the aut...
RoBCtrl: Attacking GNN-Based Social Bot Detectors Via Reinforced Manipulation of Bots Control Interaction
Social networks have become a crucial source of real-time information for individuals. The influence of social bots within these platforms has garnered considerable attention from researchers, leading to the development of numerous detection technologies. However, the vulnerability and robustness...
CVE-2025-58474: Allocation of Resources Without Limits or Throttling
When BIG-IP Advanced WAF is configured on a virtual server with Server-Side Request Forgery SSRF protection or when an NGINX server is configured with App Protect Bot Defense, undisclosed requests can disrupt new client requests. Note: Software versions which have reached End of Technical Support...
commandKit 安全漏洞
commandKit is an Under Ctrl open source development tool for building Discord bots. A security vulnerability exists in commandKit versions 1.2.0-rc.1 through 1.2.0-rc.11, which stems from a logic flaw in the message command handler that could lead to unauthorized command execution or inaccurate...
F5 Networks BIG-IP : BIG-IP Advanced WAF and ASM and NGINX App Protect DNS lookup vulnerability (K000148512)
The version of F5 Networks BIG-IP installed on the remote host is prior to 17.1.2 / 17.5.0. It is, therefore, affected by a vulnerability as referenced in the K000148512 advisory. When BIG-IP Advanced WAF is configured on a virtual server with Server-Side Request Forgery SSRF protection or when a...
Thwarting AI Bots with Edge Content Rewriting
...
WordPress AI ChatBot with ChatGPT and Content Generator by AYS plugin <= 2.6.6 - Sensitive Data Exposure vulnerability
Sensitive Data Exposure vulnerability discovered by n0arafatn0 in WordPress Plugin AI ChatBot with ChatGPT and Content Generator by AYS versions = 2.6.6...
CVE-2025-10284
BBOT's unarchive module could be abused by supplying malicious archives files and when extracted can then perform an arbitrary file write, resulting in remote code execution...
BatShadow Group Uses New Go-Based 'Vampire Bot' Malware to Hunt Job Seekers
A Vietnamese threat actor named BatShadow has been attributed to a new campaign that leverages social engineering tactics to deceive job seekers and digital marketing professionals to deliver a previously undocumented malware called Vampire Bot. "The attackers pose as recruiters, distributing...
EUVD-2021-16076
Malware in sbrugna...
EUVD-2021-10102
Malware in sbrugna...
EUVD-2021-16077
Malware in sbrugna...
EUVD-2004-0274
Malware in sbrugna...
EUVD-2020-26478
Malware in sbrugna...
EUVD-2021-24084
Malware in sbrugna...
EUVD-2021-0037
Malware in sbrugna...
EUVD-2021-21841
Malware in sbrugna...