CVE-2025-61417

CVE-2025-61417 is a Cross-Site Scripting (XSS) vulnerability in TastyIgniter 3.7.7, affecting the /admin/media_manager component. An attacker can upload a malicious SVG containing JavaScript; when an administrator previews the file, the code runs in the admin’s browser context, potentially allowi...

CVE-2025-61999

CVE-2025-61999 affects OPEXUS FOIAXpress before 11.13.3.0. An administrative user can upload an SVG image (logo) containing JavaScript or other content, causing stored XSS when other users view affected pages. This can enable the admin to perform actions on behalf of target users, including steal...

CVE-2025-61996 OPEXUS FOIAXpress stored XSS via annual report template

OPEXUS FOIAXpress before 11.13.3.0 allows an administrative user to inject JavaScript or other content within the Annual Report Template. Injected content is executed in the context of other users when they generate an Annual Report. Successful exploitation allows the administrative user to perfo...

EUVD-2020-6378

Malware in sbrugna...

EUVD-2018-10022

Malware in sbrugna...

EUVD-2018-11832

Malware in sbrugna...

EUVD-2018-9656

Malware in sbrugna...

EUVD-2021-19718

Malware in sbrugna...

Chinese Cybercrime Group Runs Global SEO Fraud Ring Using Compromised IIS Servers

Cybersecurity researchers have shed light on a Chinese-speaking cybercrime group codenamed UAT-8099 that has been attributed to search engine optimization SEO fraud and theft of high-value credentials, configuration files, and certificate data. The attacks are designed to target Microsoft Interne...

EUVD-2025-8840

Malicious code in bioql PyPI...

EUVD-2025-7086

Malicious code in bioql PyPI...

EUVD-2021-8277

Malicious code in bioql PyPI...

EUVD-2024-48781

Malicious code in bioql PyPI...

EUVD-2024-2827

Malicious code in bioql PyPI...

EUVD-2024-24397

Malicious code in bioql PyPI...

EUVD-2022-33624

Malicious code in bioql PyPI...

EUVD-2023-31842

Malicious code in bioql PyPI...

EUVD-2025-30930

Malicious code in bioql PyPI...

UAT-8099: Chinese-speaking cybercrime group targets high-value IIS for SEO fraud

Cisco Talos is disclosing details on UAT-8099, a Chinese-speaking cybercrime group mainly involved in search engine optimization SEO fraud and theft of high-value credentials, configuration files, and certificate data. Cisco's file census and DNS analysis show affected Internet Information Servic...

DarkCloud Infostealer Relaunched to Grab Credentials, Crypto and Contacts

eSentire TRU analyses the new DarkCloud V4.2 infostealer, rewritten in VB6. Find out how the malware steals browser data, crypto, and contacts via targeted phishing...