20485 matches found
New Rust-Based Malware "ChaosBot" Uses Discord Channels to Control Victims' PCs
Cybersecurity researchers have disclosed details of a new Rust-based backdoor called ChaosBot that can allow operators to conduct reconnaissance and execute arbitrary commands on compromised hosts. "Threat actors leveraged compromised credentials that mapped to both Cisco VPN and an over-privileg...
Thwarting AI Bots with Edge Content Rewriting
...
Security Bulletin: Multiple Vulnerabilities in IBM Edge Application Manager
Summary Multiple vulnerabilities were addressed in IBM Edge Application Manager 5.0.1 Vulnerability Details CVEID:CVE-2023-0286 DESCRIPTION: There is a type confusion vulnerability relating to X.400 address processing inside an X.509 GeneralName. X.400 addresses were parsed as an ASN1STRING but t...
Wallarm: API Security Platform of the Year 2025
2025 has been one of Wallarm’s biggest years yet. In the last few months alone, we unveiled our industry-first API Revenue Protection capability, launched our next-gen Security Edge offering, were included in the 2025 Inc. 5000 list of fastest-growing private companies in America, and announced o...
SUSE-SU-2025:03521-1 Security update for squid
This update for squid fixes the following issues: - CVE-2025-59362: fixed buffer overflow bsc1250627 - CVE-2024-37894: fixed denial of service in ESI processing bsc1227086 - CVE-2024-33427: fixed possible buffer overread leading to denial of service bsc1225417...
Microsoft Edge (Chromium-Based) < 141.0.3537.71 Multiple Vulnerabilities (Oct 2025)
Microsoft Edge Chromium-Based is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
PT-2025-44676
Name of the Vulnerable Software and Affected Versions Chromium affected versions not specified Description An issue exists in Google Chrome due to an inappropriate implementation in V8, potentially allowing attackers to affect the system. Microsoft Edge Chromium-based is also impacted as it inges...
Yubico YubiKey Manager < 1.2.6 Privilege Escalation
The version of Yubico YubiKey Manager installed on the remote host is prior to 1.2.6. It is, therefore, affected by a vulnerability. Yubico ykman-gui aka YubiKey Manager GUI before 1.2.6 on Windows, when Edge is not used, allows privilege escalation because browser windows can open as...
Chromium: CVE-2025-11460 Use after free in Storage
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2025-11458 Heap buffer overflow in Sync
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Security Bulletin: IBM Maximo Application Suite - Monitor Component is vulnerable to Django-4.2.20-py3-none-any.whl CVE-2025-32873
Summary IBM Maximo Application Suite - Monitor Component is vulnerable to Django-4.2.20-py3-none-any.whl CVE-2025-32873. This bulletin identifies the steps to take to address the vulnerabilities. Vulnerability Details CVEID:CVE-2025-32873 DESCRIPTION: An issue was discovered in Django 4.2 before...
Microsoft Edge (Chromium) < 141.0.3537.71 Multiple Vulnerabilities
The version of Microsoft Edge installed on the remote Windows host is prior to 141.0.3537.71. It is, therefore, affected by multiple vulnerabilities as referenced in the October 9, 2025 advisory. - Use after free in Storage. CVE-2025-11460 - Heap buffer overflow in Sync. CVE-2025-11458 Note that...
KLA89198 Multiple vulnerabilities in Microsoft Browser
Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service. Below is a complete list of vulnerabilities: 1. Use after free vulnerability in Storage can be exploited to cause denial of service or...
EUVD-2025-32977
Malicious code in nextjs-edge npm...
Malicious code in nextjs-edge (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e760ae97f3946b05b183b7e2d558f757bb3bf66afe4199dc5e2d3b54aa0b5e3a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-48033 Malicious code in nextjs-edge (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e760ae97f3946b05b183b7e2d558f757bb3bf66afe4199dc5e2d3b54aa0b5e3a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious Package
Overview nextjs-edge is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorshi...
Microsoft Edge (Chromium-Based) < 141.0.3537.57 Multiple Vulnerabilities (Oct 2025)
Microsoft Edge Chromium-Based is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...