CVE-2025-48155 WordPress Residential Address Detection plugin <= 2.5.9 - Broken Access Control Vulnerability

Missing Authorization vulnerability in enituretechnology Residential Address Detection residential-address-detection allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Residential Address Detection: from n/a through = 2.5.9...

New Konfety Malware Variant Evades Detection by Manipulating APKs and Dynamic Code

Cybersecurity researchers have discovered a new, sophisticated variant of a known Android malware referred to as Konfety that leverages the evil twin technique to enable ad fraud. The sneaky approach essentially involves a scenario wherein two variants of an application share the same package nam...

GHSA-PFH2-HFMQ-PHG5

creationtimestamp| type| source ---|---|--- 2025-07-16 08:01:57+00:00| seen| https://gist.github.com/safer-bot/2af29f281eeb8d7a86455b607f77d23e 2025-07-16 13:21:10+00:00| seen| https://gist.github.com/safer-bot/309b2c3514c96b866281e3349bccea4d...

GHSA-HR8G-6V94-X4M9

creationtimestamp| type| source ---|---|--- 2025-07-16 05:01:52+00:00| seen| https://gist.github.com/safer-bot/462e0a3d9968559e1a005f457ab6feb0 2025-07-16 06:05:35+00:00| seen| https://gist.github.com/safer-bot/678e0ba18d8f78e6a69974ba13c63b56 2025-07-16 08:17:43+00:00| seen|...

GHSA-8MX3-GP3P-VGG7

creationtimestamp| type| source ---|---|--- 2025-07-16 05:00:07+00:00| seen| https://gist.github.com/safer-bot/3dcff2aa616dcde9ac2ac8aefaa3438b 2025-07-16 16:06:16+00:00| seen| https://gist.github.com/safer-bot/315612cf6371bc59c08bf1d8656dc747...

GHSA-3P86-9955-H393

creationtimestamp| type| source ---|---|--- 2025-07-16 04:52:26+00:00| seen| https://gist.github.com/safer-bot/de1d2f168ac8c68d04050981a1883ee7 2025-07-16 05:57:09+00:00| seen| https://gist.github.com/safer-bot/15d6661c566b3f7011158e747a52036b 2025-07-16 21:40:14+00:00| seen|...

WordPress plugin Residential Address Detection 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...

Ubuntu: Security Advisory (USN-7545-3)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2025-29723 · Enituretechnology · Residential Address Detection

Name of the Vulnerable Software and Affected Versions: enituretechnology Residential Address Detection versions through 2.5.9 Description: The Residential Address Detection software contains a missing authorization flaw. This allows unauthorized access to functionality not properly constrained by...

GPU-Accelerated Interpretable Generalization for Rapid Cyberattack Detection and Forensics

The Interpretable Generalization IG mechanism recently published in IEEE Transactions on Information Forensics and Security delivers state-of-the-art, evidence-based intrusion detection by discovering coherent normal and attack patterns through exhaustive intersect-and-subset operations-yet its...

openSUSE Security Advisory (SUSE-SU-2025:02302-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

de.the-library-code.dspace:addon-duplication-detection-service-api (>=6.2.0 <=6.3.1), de.the-library-code.dspace:addon-duplication-detection-service-jspui (>=6.2.0 <=6.3.1) +53 more potentially affected by CVE-2025-53621 via org.dspace:dspace-api (>=1.5-alpha <=7.0-preview-1)

org.dspace:dspace-api MAVEN version =1.5-alpha, =6.2.0, =6.2.0, =5.8.0, =5.8.0, =5.4.0, =5.4.0, =5.4.0, =3.0, =1.7.0, =1.7.0, =5.11 and more Source cves: CVE-2025-53621 Source advisory: OSV:GHSA-JJWR-5CFH-7XWH...

Attackers Hide JavaScript in SVG Images to Lure Users to Malicious Sites

Beware! SVG images are now being used with obfuscated JavaScript for stealthy redirect attacks via spoofed emails. Get insights from Ontinue's latest research on detection and defence...

CVE-2025-53959

In JetBrains YouTrack before 2025.2.86069, 2024.3.85077, 2025.1.86199 email spoofing via an administrative API was possible...

GHSA-6C5P-6WWW-PCMR

creationtimestamp| type| source ---|---|--- 2025-07-15 16:50:51+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114858278941700138...

ai.idylnlp:idylnlp-nlp-language-detection-tika (>=1.0.0 <=1.1.0), ai.stainless:grails-tika (=0.1.0) +2893 more potentially affected by CVE-2025-48795 via org.apache.cxf:cxf-core (>=3.0.0-milestone1 <=3.5.10)

org.apache.cxf:cxf-core MAVEN version =3.0.0-milestone1, =1.0.0, =11.4-37, =3.6.1, =3.11.0, =3.0.0.RELEASE, =3.0.0.RELEASE, =3.0.0.RELEASE, =3.0.0.RELEASE, =3.0.0.RELEASE, =3.0.0.RELEASE, =3.1.0.RELEASE - cloud.testload:jmeter-clickhouse-listener =2.00 and more Source cves: CVE-2025-48795 Source...

MAL-2025-6487 Malicious code in crto0 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 8bdcf6d997fa4676ca2da647171f21e944f9b7d0f34010e6ea8da42364a2d03d Importing the module starts downloading or decrypting, and then executing an executable being a wide recognized malware/Infostealer Redline family --- Category...

MAL-2025-5908 Malicious code in dt-retag-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2d21deb5c26c8d9b0043ce26b0fe5ec1625607ab1e1c37102589f92ab7187364 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5897 Malicious code in bk-card-cc-credit-limit-adjustment-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 839ee8572e063e7008de9939f5e66afdb87eb4083735168ee48b739ed54814d9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5932 Malicious code in laudekasarkarmulavakghantamuzi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 53ada8ae86f15e6d70241f7c416f8e6b06cc0a99945f927863aa7a134e4e1ed9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...