EdgeStepper Implant Reroutes DNS Queries to Deploy Malware via Hijacked Software Updates

The threat actor known as PlushDaemon has been observed using a previously undocumented Go-based network backdoor codenamed EdgeStepper to facilitate adversary-in-the-middle AitM attacks. EdgeStepper "redirects all DNS queries to an external, malicious hijacking node, effectively rerouting the...

Malicious code in alicenpmpackage13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4183158dd9ab68784bc126821795cf166b7f2c828d67f46efc533d3859a4342 The package alicenpmpackage13 was found to contain malicious code. Source: ossf-package-analysis...

MAL-2025-190577 Malicious code in alicenpmpackage13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4183158dd9ab68784bc126821795cf166b7f2c828d67f46efc533d3859a4342 The package alicenpmpackage13 was found to contain malicious code. Source: ossf-package-analysis...

CVE-2025-11446

Insertion of Sensitive Information into Log File vulnerability in upKeeper Solutions upKeeper Manager allows Use of Known Domain Credentials.This issue affects upKeeper Manager: from 5.2.0 before 5.2.12...

CVE-2025-11446

Insertion of Sensitive Information into Log File vulnerability in upKeeper Solutions upKeeper Manager allows Use of Known Domain Credentials.This issue affects upKeeper Manager: from 5.2.0 before 5.2.12...

Malicious code in alicenpmpackage1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc6f807461a8da92854705819f1e63af5d1951c52d255a565e6d70c4b5a21fd3 The package alicenpmpackage1 was found to contain malicious code. Source: ossf-package-analysis...

MAL-2025-190576 Malicious code in alicenpmpackage1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc6f807461a8da92854705819f1e63af5d1951c52d255a565e6d70c4b5a21fd3 The package alicenpmpackage1 was found to contain malicious code. Source: ossf-package-analysis...

CVE-2025-11446

Insertion of Sensitive Information into Log File vulnerability in upKeeper Solutions upKeeper Manager allows Use of Known Domain Credentials.This issue affects upKeeper Manager: from 5.2.0 before 5.2.12...

CVE-2025-11446

Insertion of Sensitive Information into Log File vulnerability in upKeeper Solutions upKeeper Manager allows Use of Known Domain Credentials.This issue affects upKeeper Manager: from 5.2.0 before 5.2.12...

CVE-2025-11446

CVE-2025-11446 affects upKeeper Manager 5.2.0–5.2.11 (pre-5.2.12). The issue is Insertion of Sensitive Information into Log File, enabling use of Known Domain Credentials. Impact is Confidentiality HIGH; Exploit details are not provided in the documents. Remediation: upgrade to 5.2.12 or later (p...

EUVD-2025-198145

Insertion of Sensitive Information into Log File vulnerability in upKeeper Solutions upKeeper Manager allows Use of Known Domain Credentials.This issue affects upKeeper Manager: from 5.2.0 before 5.2.12...

python-kdcproxy: Unauthenticated SSRF via Realm‑Controlled DNS SRV

If kdcproxy receives a request for a realm which does not have server addresses defined in its configuration, by default, it will query SRV records in the DNS zone matching the requested realm name. This creates a server-side request forgery vulnerability, since an attacker could send a request f...

bind: Cache poisoning attacks with unsolicited RRs

A vulnerability exists in BIND’s DNS resolver logic that makes it overly permissive when accepting resource records RRs in responses. Under certain conditions, this flaw allows attackers to inject unsolicited or forged DNS records into the cache. This can be exploited to poison the resolver cache...

bind: DNS forwarders - cache poisoning vulnerability

A cache poisoning vulnerability was found in BIND when using forwarders. Bogus NS records supplied by the forwarders may be cached and used by name if it needs to recurse for any reason. This issue causes it to obtain and pass on potentially incorrect answers. This flaw allows a remote high...

bind: Cache poisoning attacks with unsolicited RRs

A vulnerability exists in BIND’s DNS resolver logic that makes it overly permissive when accepting resource records RRs in responses. Under certain conditions, this flaw allows attackers to inject unsolicited or forged DNS records into the cache. This can be exploited to poison the resolver cache...

bind: Cache poisoning attacks with unsolicited RRs

A vulnerability exists in BIND’s DNS resolver logic that makes it overly permissive when accepting resource records RRs in responses. Under certain conditions, this flaw allows attackers to inject unsolicited or forged DNS records into the cache. This can be exploited to poison the resolver cache...

Malicious code in node-calculator-8bf9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10b1f195cda1193bb7e83d1da57c34d1a22ca912d27dbb065199754dcc8c47f8 The package node-calculator-8bf9 was found to contain malicious code. Source: ossf-package-analysis...

MAL-2025-190570 Malicious code in node-calculator-8bf9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10b1f195cda1193bb7e83d1da57c34d1a22ca912d27dbb065199754dcc8c47f8 The package node-calculator-8bf9 was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in node-calculator-b0e4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 751e25d2464b2da9bfb7e629441757f1d413f8e1cf4a38522f2316ef84755e59 The package node-calculator-b0e4 was found to contain malicious code. Source: ossf-package-analysis...

MAL-2025-190569 Malicious code in node-calculator-b0e4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 751e25d2464b2da9bfb7e629441757f1d413f8e1cf4a38522f2316ef84755e59 The package node-calculator-b0e4 was found to contain malicious code. Source: ossf-package-analysis...