180 matches found
IBM Concert Output Neutralization Malpractice Vulnerability
IBM Concert is a generative artificial intelligence-driven automated application management and monitoring tool based on the watsonx platform released in May 2024 by IBM. IBM Concert suffers from an improper output neutralization vulnerability that can be exploited by an attacker to cause a forge...
Tsundere Botnet Expands Using Game Lures and Ethereum-Based C2 on Windows
Cybersecurity researchers have warned of an actively expanding botnet dubbed Tsundere that's targeting Windows users. Active since mid-2025, the threat is designed to execute arbitrary JavaScript code retrieved from a command-and-control C2 server, Kaspersky researcher Lisandro Ubiedo said in an...
Desktop Alert PingAlert Improper Access Control Vulnerability (CNVD-2025-29430)
Desktop Alert PingAlert is a network status monitoring tool developed by Desktop Alert, Inc. and is mainly used to monitor the status of network devices in real time and send alerts. Desktop Alert PingAlert suffers from an Improper Access Control vulnerability that stems from improper access...
Desktop Alert PingAlert Cross-Site Scripting Vulnerability
Desktop Alert PingAlert is a network status monitoring tool developed by Desktop Alert, Inc. and is mainly used to monitor the status of network devices in real time and send alerts. Desktop Alert PingAlert suffers from a cross-site scripting vulnerability for which no detailed vulnerability...
EUVD-2014-3305
Malware in sbrugna...
EUVD-2014-7857
Malware in sbrugna...
EUVD-2014-0763
Malware in sbrugna...
EUVD-2021-14130
Malware in sbrugna...
EUVD-2024-48969
Malicious code in bioql PyPI...
EUVD-2024-46391
Malicious code in bioql PyPI...
EUVD-2023-2738
Malicious code in bioql PyPI...
EUVD-2023-57460
Malicious code in bioql PyPI...
EUVD-2023-3036
Malicious code in bioql PyPI...
EUVD-2023-29703
Malicious code in bioql PyPI...
EUVD-2022-33855
Malicious code in bioql PyPI...
EUVD-2024-48970
Malicious code in bioql PyPI...
EUVD-2023-1909
Malicious code in bioql PyPI...
CVE-2025-55300 Komari Allows Cross-site WebSocket Hijacking
Komari is a lightweight, self-hosted server monitoring tool designed to provide a simple and efficient solution for monitoring server performance. Prior to 1.0.4-fix1, WebSocket upgrader has disabled origin checking, enabling Cross-Site WebSocket Hijacking CSWSH attacks against authenticated user...
Aide 安全漏洞
Aide is a tool for monitoring file system changes. It can be used to detect unauthorized monitored files and directories. A security vulnerability exists in versions prior to Aide 0.19.2, which stems from improper output neutralization and could lead to bypassing detection...
