Microsoft FrontPage Server Extensions (FPSE) Detection (HTTP)

HTTP based detection of Microsoft FrontPage Server Extensions FPSE. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

SUSE: Security Advisory (SUSE-SU-2025:02159-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-7601-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DLA-4234-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

OneClik: A ClickOnce-Based APT Campaign Targeting Energy, Oil and Gas Infrastructure

OneClik: A ClickOnce-Based Red Team Campaign Simulating APT Tactics in Energy Infrastructure By Nico Paulo Yturriaga and Pham Duy Phuc · Updated : June 30, 2025 The Trellix Advanced Research Center previously uncovered what appeared to be a sophisticated APT malware campaign, which we dubbed...

Nuclei 3.4.5

Nuclei is a modern, high-performance vulnerability scanner that leverages simple YAML-based templates. It empowers you to design custom vulnerability detection scenarios that mimic real-world conditions, leading to zero false positives...

Huawei EulerOS: Security Advisory for libxkbfile (EulerOS-SA-2025-1693)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Exploit for SQL Injection in Mayurik Best_Salon_Management_System

CVE-2025-6860 Exploit Tool A proof‑of‑concept command‑line to...

MAL-2025-5319 Malicious code in workflows-templates (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d9c885607af191f5acc692b6c3050cc0bbdf52d98ab543e79cef7d32387e247d Any computer that has this package installed or running should be considered...

CVE-2025-47819

Flock Safety Gunshot Detection devices before 1.3 have an on-chip debug interface with improper access control...

CVE-2025-47820

Flock Safety Gunshot Detection devices before 1.3 have cleartext storage of code...

CVE-2025-47818

Flock Safety Gunshot Detection devices before 1.3 have a hard-coded password for a connection...

CVE-2025-47821

Flock Safety Gunshot Detection devices before 1.3 have a hardcoded password for a system...

CVE-2025-6820

creationtimestamp| type| source ---|---|--- 2025-06-28 17:53:37+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19825 2025-06-28 22:15:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsp6kt5w622a...

GHSA-FV92-FJC5-JJ9H vulnerabilities

Vulnerabilities for packages: tflint, cosign, opa-envoy, timestamp-authority, hcloud, grafana-alloy, kubecolor, kor, atlantis, filebrowser, nri-prometheus, trivy, kyverno-policy-reporter, nri-kubernetes, seaweedfs, podinfo, glab, gh, zarf, syft, steampipe, falcoctl, flux-source-controller,...

CVE-2025-53384

creationtimestamp| type| source ---|---|--- 2025-06-28 05:06:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsnf2yvt6v2a...

Exploit for Command Injection in Microsoft

CVE-2025-32711 EchoLeak Detection Tool 🔐 !PowerShellhtt...

CVE-2025-53325

creationtimestamp| type| source ---|---|--- 2025-06-27 17:56:26+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19769 2025-06-27 18:47:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsmcipvemw2r...

MAL-2025-5291 Malicious code in defectdojosw (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 93d614c0d808786b112774fdec4eb2b8afecef6ec8de82e4945bdc644e5023c4 The OpenSSF Package Analysis project identified 'defectdojosw' @ 10.1.0 npm as malicious. It is considered malicious because: - The package...

CVE-2025-47821

Flock Safety Gunshot Detection devices before 1.3 have a hardcoded password for a system...