35628 matches found
CVE-2025-27442
creationtimestamp| type| source ---|---|--- 2025-04-08 11:28:40+00:00| seen| https://bsky.app/profile/ripjyr.bsky.social/post/3lmcenrnrjk2f 2025-04-08 16:46:41+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10949 2025-04-08 19:51:28+00:00| seen| https://t.me/cvedetector/22480 2025-04-12...
CVE-2025-26654
creationtimestamp| type| source ---|---|--- 2025-04-08 07:46:37+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10871 2025-04-08 09:17:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmc5cjxzha2g 2025-04-08 11:29:21+00:00| seen| https://t.me/cvedetector/22432...
Windows Hello Spoofing Vulnerability
Automated recognition mechanism with inadequate detection or handling of adversarial input perturbations in Windows Hello allows an unauthorized attacker to perform spoofing locally...
CVE-2025-20946
creationtimestamp| type| source ---|---|--- 2025-04-08 05:47:28+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10853 2025-04-08 07:48:21+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114301239272400759 2025-04-08 08:06:58+00:00| seen|...
PT-2025-15499
Name of the Vulnerable Software and Affected Versions: Windows Hello affected versions not specified Description: The issue concerns an automated recognition mechanism in Windows Hello that fails to adequately detect or handle adversarial input perturbations, allowing an unauthorized attacker to...
Microsoft PC Manager (Windows SMB Login)
SMB login-based detection of Microsoft PC Manager SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu: Security Advisory (USN-7410-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu: Security Advisory (USN-7402-4)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora: Security Advisory (FEDORA-2025-52d7857536)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Windows App Client (Windows SMB Login)
SMB login-based detection of Windows App Client SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Shopware 安全漏洞
Shopware is a suite of open source e-commerce software from the German company Shopware. A security vulnerability exists in Shopware, which stems from a store-api that detects the existence of an e-mail account, which could lead to information disclosure...
CVE-2023-22403
creationtimestamp| type| source ---|---|--- 2025-04-07 20:46:22+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10791...
DEBIAN-CVE-2025-29769
libvips is a demand-driven, horizontally threaded image processing library. The heifsave operation could incorrectly determine the presence of an alpha channel in an input when it was not possible to determine the colour interpretation, known internally within libvips as "multiband". There aren't...
Picklescan missing detection when calling built-in python library function timeit.timeit()
Summary Using timeit.timeit function, which is a built-in python library function to execute remote pickle file. Details Pickle’s deserialization process is known to allow execution of function via reduce method. While Picklescan is meant to detect such exploits, this attack evades detection by...
GHSA-FJ43-3QMQ-673F Picklescan failed to detect to some unsafe global function in Numpy library
Summary An unsafe deserialization vulnerability in Python’s pickle module allows an attacker to bypass static analysis tools like Picklescan and execute arbitrary code during deserialization. This can be exploited by import some built-in function in Numpy library that indrectly call some dangerou...
Picklescan failed to detect to some unsafe global function in Numpy library
Summary An unsafe deserialization vulnerability in Python’s pickle module allows an attacker to bypass static analysis tools like Picklescan and execute arbitrary code during deserialization. This can be exploited by import some built-in function in Numpy library that indrectly call some dangerou...
Steps to TruRisk™ – 2: Measuring the Likelihood of Vulnerability Exploitation
Cybersecurity programs rely on various methods to measure the risk associated with vulnerabilities for prioritization, such as CVSS, EPSS, CISA KEV, or even internally developed systems that combine multiple approaches. While these methods help assess whether a specific vulnerability exists on an...
CISA and FBI Warn Fast Flux is Powering Resilient Malware, C2, and Phishing Networks
Cybersecurity agencies from Australia, Canada, New Zealand, and the United States have published a joint advisory about the risks associated with a technique called fast flux that has been adopted by threat actors to obscure a command-and-control C2 channel. "'Fast flux' is a technique used to...
SpyCloud Research Shows that Endpoint Detection and Antivirus Solutions Miss Two-Thirds (66%) of Malware Infections
Austin, TX, USA, 7th April 2025, CyberNewsWire...
How ToddyCat tried to hide behind AV software
To hide their activity in infected systems, APT groups resort to various techniques to bypass defenses. Most of these techniques are well known and detectable by both EPP solutions and EDR threat-monitoring and response tools. For example, to hide their activity in Windows systems, cybercriminals...