CVE-2025-33202

NVIDIA Triton Inference Server (Linux/Windows) is affected by CVE-2025-33202, a stack overflow triggered by extra-large payloads that can lead to denial of service. Public docs detail a network-exploitable flaw (CVSS v3.1: AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) with base score 6.5. NVIDIA’s advisor...

CVE-2025-33202

NVIDIA Triton Inference Server for Linux and Windows contains a vulnerability where an attacker could cause a stack overflow by sending extra-large payloads. A successful exploit of this vulnerability might lead to denial of service...

Android Trojan 'Fantasy Hub' Malware Service Turns Telegram Into a Hub for Hackers

Cybersecurity researchers have disclosed details of a new Android remote access trojan RAT called Fantasy Hub that's sold on Russian-speaking Telegram channels under a Malware-as-a-Service MaaS model. According to its seller, the malware enables device control and espionage, allowing threat actor...

EUVD-2025-74048

The WP Go Maps formerly WP Google Maps WordPress plugin before 9.0.48 does not sanitize user input provided via an AJAX action, allowing unauthenticated users to store XSS payloads which are later retrieved from another AJAX call and output unescaped...

MAL-2025-85756 Malicious code in galih-lumpur2-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3dffd18a9671feb3fa0cd12c0e135d91a0d6745c7059a59ce86fc04c4f2709dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-nasi6-kyuki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 394fe42d2ccb2dd6bc1eb4d01703e71b0a001bb724768146f8ab399288dd219b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tiara-sasag72-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d62a19217ff83497280a3d8017b20dcbef31aea31ba6b306d9b6b907f655df1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gilang-sambel11-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2c761d9685de45d33475e54aab63775c0167089732c34f0c4a80eff79a9f200 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dian-gandul70-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector adb24b5ac409cadcc5353d25e8921d87f3408f6bf5328b43dcd013c269173116 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in everyday_centipede_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1afdfdbfde15f5dbfd99db3941532b5586b5a7a293d3650aad9730b040af39f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

NVIDIA Triton Inference Server 安全漏洞

NVIDIA Triton Inference Server is an open source software from NVIDIA that helps standardize model deployment and deliver fast and scalable AI in production. A security vulnerability exists in NVIDIA Triton Inference Server that stems from an attacker sending an oversized payload could lead to a...

PT-2025-46377

Name of the Vulnerable Software and Affected Versions NVIDIA Triton Inference Server for Linux and Windows affected versions not specified Description The NVIDIA Triton Inference Server is susceptible to a stack overflow condition triggered by the reception of excessively large payloads...

UBUNTU-CVE-2025-61261

A reflected cross-site scripting XSS vulnerability in CKeditor v46.1.0 & Angular v18.0.0 allows attackers to execute arbitrary code in the context of a user's browser via injecting a crafted payload...

Malicious Package

Overview Sharp7Extend is a malicious package. This package contains malicious code that injects time-delayed destructive payloads into database operations and target industrial control systems. Published under the NuGet alias shanhai666 together with 8 other malicious packages between 2023 and...

Malicious Package

Overview SqlLiteRepository is a malicious package. This package contains malicious code that injects time-delayed destructive payloads into database operations and target industrial control systems. Published under the NuGet alias shanhai666 together with 8 other malicious packages between 2023 a...

Malicious Package

Overview SqlUnicornCoreTest is a malicious package. This package contains malicious code that injects time-delayed destructive payloads into database operations and target industrial control systems. Published under the NuGet alias shanhai666 together with 8 other malicious packages between 2023...

Malicious Package

Overview MyDbRepository is a malicious package. This package contains malicious code that injects time-delayed destructive payloads into database operations and target industrial control systems. Published under the NuGet alias shanhai666 together with 8 other malicious packages between 2023 and...

Malicious Package

Overview SqlUnicorn.Core is a malicious package. This package contains malicious code that injects time-delayed destructive payloads into database operations and target industrial control systems. Published under the NuGet alias shanhai666 together with 8 other malicious packages between 2023 and...

Malicious Package

Overview SqlUnicornCore is a malicious package. This package contains malicious code that injects time-delayed destructive payloads into database operations and target industrial control systems. Published under the NuGet alias shanhai666 together with 8 other malicious packages between 2023 and...

Malicious Package

Overview SqlRepository is a malicious package. This package contains malicious code that injects time-delayed destructive payloads into database operations and target industrial control systems. Published under the NuGet alias shanhai666 together with 8 other malicious packages between 2023 and...