CVE-2025-4352 Brilliance Golden Link Secondary System tcEntrFlowSelect.htm sql injection

A vulnerability, which was classified as critical, has been found in Brilliance Golden Link Secondary System up to 20250424. This issue affects some unknown processing of the file /reprotframework/tcEntrFlowSelect.htm. The manipulation of the argument custTradeId leads to sql injection. The attac...

PT-2025-19942 · Unknown · Golden Link Secondary System

Name of the Vulnerable Software and Affected Versions: Golden Link Secondary System up to 20250424 Description: A critical issue was found in Golden Link Secondary System, affecting an unknown function of the file /paraframework/queryTsDictionaryType.htm. The manipulation of the dictCn1 argument...

Brilliance Golden Link Secondary System 安全漏洞

Brilliance Golden Link Secondary System is a management system from Brilliance, China. A security vulnerability exists in Brilliance Golden Link Secondary System version 20250424 and earlier, which is caused by a SQL injection due to incorrect manipulation of the parameter dictCn1 in the file...

Brilliance Golden Link Secondary System 注入漏洞

Brilliance Golden Link Secondary System is a management system from Brilliance, China. An injection vulnerability exists in Brilliance Golden Link Secondary System version 20250424 and earlier, which results from SQL injection due to incorrect manipulation of the parameter custTradeId in the file...

PT-2025-19941 · Unknown · Golden Link Secondary System

Name of the Vulnerable Software and Affected Versions: Golden Link Secondary System up to 20250424 Description: A critical issue has been found in the Golden Link Secondary System, affecting some unknown processing of the file /reprotframework/tcEntrFlowSelect.htm. The manipulation of the...

Golden Chickens Deploy TerraStealerV2 to Steal Browser Credentials and Crypto Wallet Data

The threat actors known as Golden Chickens have been attributed to two new malware families dubbed TerraStealerV2 and TerraLogger, suggesting continued development efforts to fine-tune and diversify their arsenal. "TerraStealerV2 is designed to collect browser credentials, cryptocurrency wallet...

The Voynich Codex Decoded: Statistical Symbolism and Scroll-Wide Logic

This paper introduces a structured decoding framework for the Voynich Manuscript, based on mathematical rhythm, symbolic transformation, and glyph-level recursion. Rather than interpret symbols phonetically, this method decodes them by structural roles and spatial pacing. Using scroll-wide...

ZTE GoldenDB 安全漏洞

ZTE GoldenDB is a financial-grade transactional distributed database from China's ZTE Corporation ZTE. It is used in finance, government and enterprise, telecom and other industries to provide highly available data services. An elevation of privilege vulnerability exists in ZTE GoldenDB, which...

Malicious code in web_automation_golden (npm)

--- -= Per source details. Do not edit below this line.=-...

Important: Red Hat Bug Fix Advisory: Red Hat Developer Hub 1.2.5 bugfix release

Red Hat Developer Hub 1.2.5 has been released. Red Hat Developer Hub RHDH is Red Hat's enterprise-grade, self-managed, customizable developer portal based on Backstage.io. RHDH is supported on OpenShift and other major Kubernetes clusters AKS, EKS, GKE. The core features of RHDH include a single...

Vulnerabilities fixed in Oracle Database products

Oracle has fixed vulnerabilities in several Database products and subsystems, including the Core database, Application Express, Autonomous Health Framework, Essbase, GoldenGate, SQL Developer and Secure Backup. A malicious party can exploit the vulnerabilities to launch attacks that can lead to t...

Fake Job Applications Deliver Dangerous More_eggs Malware to HR Professionals

A spear-phishing email campaign has been observed targeting recruiters with a JavaScript backdoor called Moreeggs, indicating persistent efforts to single out the sector under the guise of fake job applications. "A sophisticated spear-phishing lure tricked a recruitment officer into downloading a...

This Week in Spring - September 3rd, 2024

Hi, Spring fans! Welcome to another installment of This Week in Spring! It's September 3rd, and I'm still buzzing from the last week's SpringOne extravaganza! Also: I'm tired. Last week was nuts. I'm super glad it happened, but I'm tired. And also buzzing. You know? Surely you don't. I hope not...

Moderate: Red Hat Bug Fix Advisory: Red Hat Developer Hub 1.2.2 bugfix release

Red Hat Developer Hub 1.2.2 has been released. Red Hat Developer Hub RHDH is Red Hat's enterprise-grade, self-managed, customizable developer portal based on Backstage.io. RHDH is supported on OpenShift and other major Kubernetes clusters AKS, EKS, GKE. The core features of RHDH include a single...

MAL-2024-12345 Malicious code in soal (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 acbef83f8fce2a2944f16812b0a2f89f92b4b0e0902439a4224b7ddd2b516f9b --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2024-07-weaponized-golden Reasons based on the campaign: -...

MAL-2024-12186 Malicious code in a-oder (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 f7e835cce84c3bd2876cea21212f1d41b81ee568e92e90bb0ba1e2c2a1ba1370 --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2024-07-weaponized-golden Reasons based on the campaign: -...

Malicious code in ebe (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 7f86097ff84bdd8007ecb73c8e4a3d412500e503469684998f78fd39b14e51d5 --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2024-07-weaponized-golden Reasons based on the campaign: -...

MAL-2024-12346 Malicious code in soali (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 6c73ab625e57bbab36d706b35ebf4f344a01e77b5f6f53b71765e029a845ee12 --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2024-07-weaponized-golden Reasons based on the campaign: -...

MAL-2024-12262 Malicious code in ebe (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 7f86097ff84bdd8007ecb73c8e4a3d412500e503469684998f78fd39b14e51d5 --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2024-07-weaponized-golden Reasons based on the campaign: -...

MAL-2024-12263 Malicious code in ebell (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 e8e763e9a652876b90896b11102319e43569b39d2be23d4170446ded6a619b1f --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2024-07-weaponized-golden Reasons based on the campaign: -...