New Python-Based Snake Info Stealer Spreading Through Facebook Messages

Facebook messages are being used by threat actors to distribute a Python-based information stealer dubbed Snake that's designed to capture credentials and other sensitive data. "The credentials harvested from unsuspecting users are transmitted to different platforms such as Discord, GitHub, and...

CVE-2024-1720

creationtimestamp| type| source ---|---|--- 2024-03-07 07:26:10+00:00| seen| https://t.me/ctinow/202148 2024-03-07 07:26:14+00:00| seen| https://t.me/ctinow/202152...

CVE-2023-51395

creationtimestamp| type| source ---|---|--- 2024-03-07 06:26:55+00:00| seen| https://t.me/ctinow/202100 2024-03-07 06:27:06+00:00| seen| https://t.me/ctinow/202108...

CVE-2024-0817

creationtimestamp| type| source ---|---|--- 2024-03-07 03:32:10+00:00| seen| https://t.me/ctinow/202027 2025-04-16 15:55:54+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12073...

CVE-2023-51786

creationtimestamp| type| source ---|---|--- 2024-03-07 02:26:57+00:00| seen| https://t.me/ctinow/201997 2024-03-07 02:27:14+00:00| seen| https://t.me/ctinow/202009...

CVE-2023-51281

creationtimestamp| type| source ---|---|--- 2024-03-07 02:26:56+00:00| seen| https://t.me/ctinow/201996 2024-03-07 02:27:13+00:00| seen| https://t.me/ctinow/202008...

CVE-2023-49989

creationtimestamp| type| source ---|---|--- 2024-03-07 02:26:55+00:00| seen| https://t.me/ctinow/201995 2024-03-07 02:27:12+00:00| seen| https://t.me/ctinow/202007...

About the security content of watchOS 10.4

About the security content of watchOS 10.4 This document describes the security content of watchOS 10.4. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are availabl...

CVE-2024-28110

creationtimestamp| type| source ---|---|--- 2024-03-06 23:32:22+00:00| seen| https://t.me/ctinow/201888 2024-03-06 23:32:29+00:00| seen| https://t.me/ctinow/201894 2024-03-07 08:17:01+00:00| seen| https://t.me/ctinow/202179...

CVE-2024-27289

creationtimestamp| type| source ---|---|--- 2024-03-06 20:26:49+00:00| seen| https://t.me/ctinow/201760 2024-03-06 20:36:19+00:00| seen| https://t.me/ctinow/201781 2024-03-07 19:17:07+00:00| seen| https://t.me/ctinow/202686 2025-06-12 16:34:39+00:00| published-proof-of-concept|...

CVE-2024-24761

creationtimestamp| type| source ---|---|--- 2024-03-06 19:27:05+00:00| seen| https://t.me/ctinow/201692 2024-03-06 19:32:09+00:00| seen| https://t.me/ctinow/201698...

CVE-2024-20336

creationtimestamp| type| source ---|---|--- 2024-03-06 18:26:40+00:00| seen| https://t.me/ctinow/201615 2024-03-08 02:38:47+00:00| seen| https://t.me/arpsyndicate/4150...

ssh: Prefix truncation attack on Binary Packet Protocol (BPP)

A flaw was found in the SSH channel integrity. By manipulating sequence numbers during the handshake, an attacker can remove the initial messages on the secure channel without causing a MAC failure. For example, an attacker could disable the ping extension and thus disable the new countermeasure ...

ssh: Prefix truncation attack on Binary Packet Protocol (BPP)

A flaw was found in the SSH channel integrity. By manipulating sequence numbers during the handshake, an attacker can remove the initial messages on the secure channel without causing a MAC failure. For example, an attacker could disable the ping extension and thus disable the new countermeasure ...

ssh: Prefix truncation attack on Binary Packet Protocol (BPP)

A flaw was found in the SSH channel integrity. By manipulating sequence numbers during the handshake, an attacker can remove the initial messages on the secure channel without causing a MAC failure. For example, an attacker could disable the ping extension and thus disable the new countermeasure ...

ssh: Prefix truncation attack on Binary Packet Protocol (BPP)

A flaw was found in the SSH channel integrity. By manipulating sequence numbers during the handshake, an attacker can remove the initial messages on the secure channel without causing a MAC failure. For example, an attacker could disable the ping extension and thus disable the new countermeasure ...

GHSA-C967-2652-GFJM CasaOS Username Enumeration

Summary The Casa OS Login page has disclosed the username enumeration vulnerability in the login page. Details It is observed that the attacker can enumerate the CasaOS username using the application response. If the username is incorrect application gives the error "User does not exist", If the...

CVE-2024-25102

creationtimestamp| type| source ---|---|--- 2024-03-06 13:31:25+00:00| seen| https://t.me/ctinow/201319 2024-03-06 13:31:30+00:00| seen| https://t.me/ctinow/201324...

CVE-2024-2211

creationtimestamp| type| source ---|---|--- 2024-03-06 12:26:25+00:00| seen| https://t.me/ctinow/201274 2024-03-06 12:26:27+00:00| seen| https://t.me/ctinow/201276...

BIT-GITLAB-2020-13314

A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. GitLab Omniauth endpoint allowed a malicious user to submit content to be displayed back to the user within error messages...