52317 matches found
EUVD-2017-15264
Malware in sbrugna...
EUVD-2017-8994
Malware in sbrugna...
EUVD-2021-17915
Malware in sbrugna...
EUVD-2021-12272
Malware in sbrugna...
EUVD-2021-13711
Malware in sbrugna...
Unity Linux 20.1070e Security Update: nss (UTSA-2025-680649)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-680649 advisory. NSS Network Security Services versions prior to 3.73 or 3.68.1 ESR are vulnerable to a heap overflow when handling DER-encoded DSA or RSA-PSS signatures. Application...
PT-2025-47000
Name of the Vulnerable Software and Affected Versions Email Parsing Library affected versions not specified Description A flaw exists in the email parsing library related to how recipient email addresses are processed. Specifically, the library improperly handles specially formatted addresses,...
PT-2025-40994
Name of the Vulnerable Software and Affected Versions SourceCodester Hotel and Lodge Management System version 1.0 Description A security flaw exists in SourceCodester Hotel and Lodge Management System 1.0. The issue involves SQL injection, potentially initiated remotely, through manipulation of...
Phishers target 1Password users with convincing fake breach alert
In a very recent and well-targeted phishing attempt, scammers tried to get hold of the 1Password credentials belonging to a Malwarebytes’ employee. Stealing someone’s 1Password login would be like hitting the jackpot for cybercriminals, because they potentially export all the saved logins the...
Exploit for Exposure of Private Personal Information to an Unauthorized Actor in Prestashop
CVE-2025-51586 - PrestaShop AdminLogin Email Enumeration PoC...
📄 GaatiTrack 1.0 SQL Injection
GaatiTrack version 1.0 suffers from multiple remote SQL injection vulnerabilities. Metasploit module included. Titles: GaatiTrack-1.0 Copyright©2025-Multiple-SQLi - Metasploit module Author: nu11secur1ty Date: 10/06/2025 Vendor: https://www.mayurik.com/ Software:...
Agentic Misalignment: How LLMs Could Be Insider Threats
We stress-tested 16 leading models from multiple developers in hypothetical corporate environments to identify potentially risky agentic behaviors before they cause real harm. In the scenarios, we allowed models to autonomously send emails and access sensitive information. They were assigned only...
CometJacking: One Click Can Turn Perplexity's Comet AI Browser Into a Data Thief
Cybersecurity researchers have disclosed details of a new attack called CometJacking targeting Perplexity's agentic AI browser Comet by embedding malicious prompts within a seemingly innocuous link to siphon sensitive data, including from connected services, like email and calendar. The sneaky...
CVE-2025-9213
The TextBuilder plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions 1.0.0 to 1.1.1. This is due to missing or incorrect nonce validation on the 'handleToken' function. This makes it possible for unauthenticated attackers to update a user's authorization token via a forged...
AZL-68127 CVE-2025-61962 affecting package fetchmail 6.4.39-2
In fetchmail before 6.5.6, the SMTP client can crash when authenticating upon receiving a 334 status code in a malformed context...
CVE-2025-60447
A stored Cross-Site Scripting XSS vulnerability has been discovered in Emlog Pro 2.5.19. The vulnerability exists in the email template configuration component located at /admin/setting.php?action=mail, which allows administrators to input HTML code that is not properly sanitized, leading to...
Improper Authentication
Overview Affected versions of this package are vulnerable to Improper Authentication via the http server port. An attacker can retrieve sensitive integration data, such as email addresses, by sending unauthenticated requests to the listening port on localhost. Note: This is only exploitable if th...
Improper Authentication
Overview Affected versions of this package are vulnerable to Improper Authentication via the http server port. An attacker can retrieve sensitive integration data, such as email addresses, by sending unauthenticated requests to the listening port on localhost. Note: This is only exploitable if th...