21245 matches found
Taiwan Web Servers Breached by UAT-7237 Using Customized Open-Source Hacking Tools
A Chinese-speaking advanced persistent threat APT actor has been observed targeting web infrastructure entities in Taiwan using customized versions of open-sourced tools with an aim to establish long-term access within high-value victim environments. The activity has been attributed by Cisco Talo...
Security update for go1.23-openssl
This update for go1.23-openssl fixes the following issues: Updated to go1.23.12 released 2025-08-06 bsc1229122: - CVE-2025-4674: Fixed unexpected command execution in untrusted VCS repositories in cmd/go bsc1246118 - CVE-2025-47906: Fixed incorrect expansion of "", "." and ".." in some PATH...
UAT-7237 targets Taiwanese web hosting infrastructure
Cisco Talos discovered UAT-7237, a Chinese-speaking advanced persistent threat APT group active since at least 2022, which has significant overlaps with UAT-5918. UAT-7237 conducted a recent intrusion targeting web infrastructure entities within Taiwan and relies heavily on the use of open-source...
MAL-2025-6885 Malicious code in solana-pump-test (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4f33aa024a9c864923429d861e28123d1aaba539b1e235683189ca285697b572 The OpenSSF Package Analysis project identified 'solana-pump-test' @ 2.5.3 npm as malicious. It is considered malicious because: - The package...
MAL-2025-6879 Malicious code in @yaqiguo/dnstest (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c3478ba78740bef836d1172c597de70dda1774f80ed7d9c3b8273dc9fbc9db71 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2025-50690
A Cross-Site Scripting XSS vulnerability exists in SpatialReference.org OSGeo/spatialreference.org versions prior to 2025-05-17 commit 2120adfa17ddd535bd0f539e6c4988fa3a2cb491. The vulnerability is caused by improper handling of user input in the search query parameter. An attacker can craft a...
OSV-2025-631 Null-dereference READ in [email protected]
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=438264629 Crash type: Null-dereference READ Crash state: [email protected]...
PT-2025-34581 · Git · Libwebp
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=438264629 Crash type: Null-dereference READ Crash state: advanced api [email protected]...
Code-Projects Simple Cafe Ordering System Injection Vulnerabilities
Simple Cafe Ordering System is a simple coffee ordering system. Simple Cafe Ordering System suffers from a SQL injection vulnerability that originates from a lack of validation of externally-entered SQL statements in the parameter ID of the file /portal.php. An attacker can exploit this...
OpenBao has an unspecified vulnerability (CNVD-2025-18597)
OpenBao is OpenBao open source a sensitive data management software . A security vulnerability exists in OpenBao 2.3.1 and earlier versions that can be exploited by attackers to cause elevation of privilege...
OpenBao has an unspecified vulnerability (CNVD-2025-18598)
OpenBao is OpenBao open source a sensitive data management software . A security vulnerability exists in OpenBao 2.3.1 and earlier versions, which can be exploited by attackers to cause MFA requirements to be bypassed...
OpenBao has an unspecified vulnerability (CNVD-2025-18599)
OpenBao is OpenBao open source a sensitive data management software . OpenBao has a security vulnerability that can be exploited by attackers to cause a brute-force crack...
Chapter Code Injection Vulnerability
Kap is an open source screen recorder from Wulkano Open Source. A code injection vulnerability exists in Kap version 3.6.0, which stems from improper code generation control and could lead to a TCC bypass...
OpenBao Code Injection Vulnerability
OpenBao is OpenBao open source a sensitive data management software . A code injection vulnerability exists in OpenBao 2.3.1 and earlier versions that can be exploited by attackers to cause unauthorized code execution and network access...
Malicious code in @zalastax/nolb-o6 (npm)
The package @zalastax/nolb-o6 was found to contain malicious code...
MAL-2025-16633 Malicious code in castdemo (npm)
The package castdemo was found to contain malicious code...
MAL-2025-25556 Malicious code in logsoul (npm)
The package logsoul was found to contain malicious code...
MAL-2025-20944 Malicious code in freeaml (npm)
The package freeaml was found to contain malicious code...