1884 matches found
CVE-2025-66373
Akamai Ghost on Akamai CDN edge servers prior to 2025-11-17 is affected by a chunked request body processing error that can cause HTTP request smuggling when an invalid chunked body includes a chunk size that differs from the following data. The issue can forward the invalid request and superfluo...
Akamai Ghost 安全漏洞
Akamai Ghost is an HTTP service program from Akamai Corporation, USA. A security vulnerability exists in versions of Akamai Ghost prior to 2025-11-17, which stems from an error in the handling of chunked request bodies that could lead to HTTP request entrapment...
CVE-2025-66373
Akamai Ghost on Akamai CDN edge servers before 2025-11-17 has a chunked request body processing error that can result in HTTP request smuggling. When Akamai Ghost receives an invalid chunked body that includes a chunk size different from the actual size of the following chunk data, under certain...
CVE-2025-66373
Akamai Ghost on Akamai CDN edge servers before 2025-11-17 has a chunked request body processing error that can result in HTTP request smuggling. When Akamai Ghost receives an invalid chunked body that includes a chunk size different from the actual size of the following chunk data, under certain...
Dragon Breath Uses RONINGLOADER to Disable Security Tools and Deploy Gh0st RAT
The threat actor known as Dragon Breath has been observed making use of a multi-stage loader codenamed RONINGLOADER to deliver a modified variant of a remote access trojan called Gh0st RAT. The campaign, which is primarily aimed at Chinese-speaking users, employs trojanized NSIS installers...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989247)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989247 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/ttm: fix memleak in ttmtransfereddestroy We need to cleanup the fences for ghost objects as...
YouTube ‘Ghost Network’ Spreads Infostealer via 3,000 Fake Videos
Check Point Research exposed a sophisticated, role-based operation called the YouTube Ghost Network, distributing dangerous Lumma and Rhadamanthys Infostealer malware. Learn how cybercriminals use hijacked channels and bots to triple malicious video output and steal user credentials...
Malicious code in @dvargas135/gunpowder-ghost (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 400dea6d2b5bfe1ff00f2fe709cb1ef33f393894e93bff155b32021682d1e571 The package @dvargas135/gunpowder-ghost was found to contain malicious code...
Malicious code in @alexandrsarioglo/npm-ghost-htb (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ff0b87bff66ff36f0fe152f37cd1d7a0733b0a9ff2eecbd10e0b8ccc52e4437 The package @alexandrsarioglo/npm-ghost-htb was found to contain malicious code...
EUVD-2025-37300
Malicious code in @alexandrsarioglo/npm-ghost-htb npm...
EUVD-2025-37293
Malicious code in gunpowder-ghost-curse npm...
Malicious code in gunpowder-ghost-curse (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c321a65829e56f1b0a19c8674e57684adb978f6689b380037c41189d68cbfe2 The package gunpowder-ghost-curse was found to contain malicious code...
EUVD-2025-37299
Malicious code in @dvargas135/gunpowder-ghost npm...
MAL-2025-49293 Malicious code in @dvargas135/gunpowder-ghost (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 400dea6d2b5bfe1ff00f2fe709cb1ef33f393894e93bff155b32021682d1e571 The package @dvargas135/gunpowder-ghost was found to contain malicious code...
MAL-2025-49299 Malicious code in gunpowder-ghost-curse (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c321a65829e56f1b0a19c8674e57684adb978f6689b380037c41189d68cbfe2 The package gunpowder-ghost-curse was found to contain malicious code...
MAL-2025-49292 Malicious code in @alexandrsarioglo/npm-ghost-htb (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ff0b87bff66ff36f0fe152f37cd1d7a0733b0a9ff2eecbd10e0b8ccc52e4437 The package @alexandrsarioglo/npm-ghost-htb was found to contain malicious code...
MAL-2025-49278 Malicious code in @asarioglo/npm-ghost-htb (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc1c8d6072a17a3bb6fd2befebfe8285665212b8e06d61773b14bacd1e01132a The package @asarioglo/npm-ghost-htb was found to contain malicious code...
Malicious code in @asarioglo/npm-ghost-htb (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc1c8d6072a17a3bb6fd2befebfe8285665212b8e06d61773b14bacd1e01132a The package @asarioglo/npm-ghost-htb was found to contain malicious code...
Malicious code in gunpowder-ghost (npm)
Four pirate-themed npm packages blackbeards-navigator, beusy, sirens-lament, gunpowder-ghost were published by the npm account beusy with heavily inflated version numbers 209.0.0–210.0.0, a hallmark of dependency confusion attacks. Each package contains identical malicious lifecycle scripts...