625 matches found
Malicious code in puan4 (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 6be2e7028440f68ad3621664d195d72288e6a1d8658f16a421f3ec52d63d6f7a During import, package automatically starts a connection to a C2 server, exfiltrates information about the host and data like sensitive files and browsers' dat...
Malicious code in as89ufnaisufn (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 e21c9860ca710010b7059d9284d8e2665c8163a8f1f351782e1a30f2037ce647 During import, the package automatically downloads and executes code that first acts as an infostealer and then starts code acting as a RAT. It connects with a...
MAL-2026-3197 Malicious code in sdoihgio9sudghsiudbg (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 61f008a0a874bc97bef2f5d2c59d64b4ae73b7cdb66970e5f82a5abb8186372d During import, the package automatically downloads and executes code that first acts as an infostealer and then starts code acting as a RAT. It connects with a...
[SECURITY] Fedora 43 Update: headscale-0.28.0-1.fc43
An open source, self-hosted implementation of the Tailscale control server...
[SECURITY] Fedora 44 Update: headscale-0.28.0-1.fc44
An open source, self-hosted implementation of the Tailscale control server...
Malicious code in transform-regexp-constructors (npm)
The package 'transform-regexp-constructors' is part of the PhantomRaven supply chain attack campaign Wave 3. It uses a Remote Dynamic Dependency RDD technique: the published package appears benign but includes a URL-based dependency in package.json pointing to an attacker-controlled C2 server...
Internet Control Server Authentication Bypass Unauthorized Access
The vulnerability of the Internet Control Server’s network firewall is related to the ability to bypass authentication due to a fundamental flaw. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...
Internet Control Server Authentication Bypass Privilege Escalation
The vulnerability of the Internet Control Server’s network firewall is related to the ability to bypass authentication due to a fundamental flaw. Exploiting this vulnerability allows a remote attacker to gain increased privileges...
Internet Control Server Firewall Code Execution
The vulnerability of the Internet Control Server’s network firewall is related to the failure to implement data cleaning at the management level. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
PT-2026-35564
Уязвимость межсетевого экрана Интернет Контроль Сервер связана с непринятием мер по очистке данных на управляющем уровне. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, выполнить произвольный код...
PT-2026-48795
Уязвимость межсетевого экрана Интернет Контроль Сервер связана с обходом аутентификации в силу исходной ошибки. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, получить несанкционированный доступ к защищаемой информации...
PT-2026-35563
Уязвимость межсетевого экрана Интернет Контроль Сервер связана с непринятием мер по очистке данных на управляющем уровне. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, выполнить произвольный код...
PT-2026-35562
Уязвимость межсетевого экрана Интернет Контроль Сервер связана с обходом аутентификации в силу исходной ошибки. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, повысить свои привилегии...
CVE-2026-26201
emp3r0r is a C2 designed by Linux users for Linux environments. Prior to version 3.21.2, multiple shared maps are accessed without consistent synchronization across goroutines. Under concurrent activity, Go runtime can trigger fatal error: concurrent map read and map write, causing C2 process cra...
CVE-1999-0734
A default configuration of CiscoSecure Access Control Server ACS allows remote users to modify the server database without authentication...
Tomiris wreaks Havoc: New tools and techniques of the APT group
While tracking the activities of the Tomiris threat actor, we identified new malicious operations that began in early 2025. These attacks targeted foreign ministries, intergovernmental organizations, and government entities, demonstrating a focus on high-value political and diplomatic...
PolarEdge Targets Cisco, ASUS, QNAP, Synology Routers in Expanding Botnet Campaign
Cybersecurity researchers have shed light on the inner workings of a botnet malware called PolarEdge. PolarEdge was first documented by Sekoia in February 2025, attributing it to a campaign targeting routers from Cisco, ASUS, QNAP, and Synology with the goal of corralling them into a network for ...
EUVD-2015-6242
Malware in sbrugna...