CVE-2025-61128

creationtimestamp| type| source ---|---|--- 2025-10-28 15:43:37+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115452557190111700 2025-10-28 17:53:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4bisqxppc2b...

EUVD-2025-36416

Malicious code in shopify-ruby npm...

Secure Control of Connected and Autonomous Electrified Vehicles under Adversarial Cyber-Attacks

Connected and Autonomous Electrified Vehicles CAEV is the solution to the future smart mobility having benefits of efficient traffic flow and cleaner environmental impact. Although CAEV has advantages they are still susceptible to adversarial cyber attacks due to their autonomous electric operati...

Siemens SIMATIC Devices Improper Input Validation (CVE-2024-34027)

f2fs: compress: filesystem metadata including blkaddr in dnode, inode fields and .totalvalidblockcount may be corrupted after SPO case. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc...

MAL-2025-48726 Malicious code in ldhpgemrdhs92007 (npm)

The package ldhpgemrdhs92007 was found to contain malicious code. --- -= Per source details. Do not edit below this line.=-...

WordPress DoFollow Case by Case plugin <= 3.5.1 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Nabil Irawan in WordPress Plugin DoFollow Case by Case versions = 3.5.1...

CVE-2025-46597

creationtimestamp| type| source ---|---|--- 2025-10-25 22:57:52+00:00| seen| https://bsky.app/profile/earlybirdsinvest.bsky.social/post/3m42igc6k2b2t 2026-03-23 15:00:27+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhqd7rymcj2h...

CVE-2025-12005

creationtimestamp| type| source ---|---|--- 2025-10-25 07:01:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m3ysxiuhwu2h...

CVE-2025-12194

creationtimestamp| type| source ---|---|--- 2025-10-25 02:50:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m3yexyohrv2i...

Security Bulletin: IBM Content Navigator consumes vulnerable spring framework library

Summary Spring Framework versions 5.3.0 - 5.3.18, 5.2.0 - 5.2.20, and older unsupported versions. A vulnerability where the fix for CVE-2022-22968 made disallowedFields patterns in DataBinder case insensitive, but String.toLowerCase has Locale-dependent exceptions that could potentially result in...

Security Bulletin: IBM Content Navigator consumes vulnerable spring framework library

Summary Spring Framework versions 5.3.0 - 5.3.18, 5.2.0 - 5.2.20, and older unsupported versions. The vulnerability involves case-sensitive patterns for disallowedFields on a DataBinder, meaning a field is not effectively protected unless it is listed with both upper and lower case for the first...

CVE-2023-53729

In the Linux kernel, the following vulnerability has been resolved: soc: qcom: qmiencdec: Restrict string length in decode The QMI TLV value for strings in a lot of qmi element info structures account for null terminated strings with MAXLEN + 1. If a string is actually MAXLEN + 1 length, this wil...

EUVD-2025-35580

Hono Improper Authorization vulnerability...

CVE-2025-53043

...

CVE-2025-40006

In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: fix folio is still mapped when deleted Migration may be raced with fallocating hole. removeinodesinglefolio will unmap the folio if the folio is still mapped. However, it's called without folio lock. If the folio is...

`unic-ucd-case` is unmaintained

All Unicode crates that are part of https://github.com/open-i18n/rust-unic are unmaintained. Recommended alternatives - icuproperties...

RUSTSEC-2025-0092 `unic-ucd-case` is unmaintained

All Unicode crates that are part of https://github.com/open-i18n/rust-unic are unmaintained. Recommended alternatives - icuproperties...

Malicious Package

Overview case-sensitive-paths is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

CVE-2025-47148

creationtimestamp| type| source ---|---|--- 2025-10-16 04:20:50+00:00| seen| Telegram/ujHEnwf9Bcm7jw8fGJcPOgCR6Fj4TQPmKtnIGHPJb8YWmXk...

Improving Cybercrime Detection and Digital Forensics Investigations with Artificial Intelligence

According to a recent EUROPOL report, cybercrime is still recurrent in Europe, and different activities and countermeasures must be taken to limit, prevent, detect, analyze, and fight it. Cybercrime must be prevented with specific measures, tools, and techniques, for example through automated...