Notepad++ Hosting Breach Attributed to China-Linked Lotus Blossom Hacking Group

A China-linked threat actor known as Lotus Blossom has been attributed with medium confidence to the recently discovered compromise of the infrastructure hosting Notepad++. The attack enabled the state-sponsored hacking group to deliver a previously undocumented backdoor codenamed Chrysalis to...

CVE-2025-67848: Improper Handling of Insufficient Permissions or Privileges

A flaw was found in Moodle. This authentication bypass vulnerability allows suspended users to authenticate through the Learning Tools Interoperability LTI Provider. The issue arises from the LTI authentication handlers failing to enforce the user's suspension status, enabling unauthorized access...

GHSA-GWCH-7M8V-7544 terraform-provider-proxmox has insecure sudo recommendation in the documentation

Note: It is uncertain whether this constitutes a vulnerability or should be filed as an issue instead. Summary In the SSH configuration documentation, the sudoer line that was suggested can be escalated to edit any files in the system. Details The following line were suggested for addition in the...

Notepad++ Updates Delivered Malware After Hosting Provider Breach

A months-long breach allowed Chinese State-sponsored hackers to hijack Notepad++ updates in 2025, exposing users to malware via a compromised hosting provider...

Notepad++ Official Update Mechanism Hijacked to Deliver Malware to Select Users

The maintainer of Notepad++ has revealed that state-sponsored attackers hijacked the utility's update mechanism to redirect update traffic to malicious servers instead. "The attack involved an infrastructure-level compromise that allowed malicious actors to intercept and redirect update traffic...

de.adorsys.sts:keycloak-storage-provider (>=1.1.23, <=1.1.28), io.phasetwo.keycloak:keycloak-events (0.20) +17 more potentially affected by CVE-2025-13881 via org.keycloak:keycloak-services (22.0.4)

org.keycloak:keycloak-services MAVEN version 22.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - de.adorsys.sts:keycloak-storage-provider =1.1.23, =0.20, =0.12, =0.14 -...

de.adorsys.keycloak:user-secret-adapter-embedded (1.0.7), de.adorsys.keycloak:user-secret-auth-provider (1.0.7) +12 more potentially affected by CVE-2025-13881 via org.keycloak:keycloak-services (7.0.0)

org.keycloak:keycloak-services MAVEN version 7.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - de.adorsys.keycloak:user-secret-adapter-embedded 1.0.7 -...

de.adorsys.multibanking:keycloak-custom-secret-provider (>=1.3.0, <=1.20), org.keycloak:keycloak-authz-policy-drools (3.1.0.final) +5 more potentially affected by CVE-2025-13881 via org.keycloak:keycloak-services (3.1.0.final)

org.keycloak:keycloak-services MAVEN version 3.1.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - de.adorsys.multibanking:keycloak-custom-secret-provider =1.3.0, =1.20 -...

PT-2026-6295

Name of the Vulnerable Software and Affected Versions Terraform / OpenTofu Provider versions prior to 0.93.1 Description The Terraform / OpenTofu Provider for Proxmox Virtual Environment, prior to version 0.93.1, contains an insecure sudoer line in its SSH configuration documentation. This...

CVE-2026-25499

creationtimestamp| type| source ---|---|--- 2026-01-31 17:32:06+00:00| published-proof-of-concept| https://github.com/bpg/terraform-provider-proxmox/security/advisories/GHSA-gwch-7m8v-7544...

CVE-2025-61726 vulnerabilities

Vulnerabilities for packages: kyverno-policy-reporter-ui, newrelic-nri-statsd, azcopy, crossplane-provider-aws-dynamodb, croc, cilium-cli, mc, nri-postgresql, dockerize, aws-flb-cloudwatch, cri-tools, kubelet-csr-approver, boring-registry, apache-exporter, flux-image-automation-controller,...

CVE-2025-68119 vulnerabilities

Vulnerabilities for packages: cilium-cli, nri-postgresql, dockerize, azure-ipam, nri-memcached, wave, gatekeeper, step, xcaddy, metallb, spegel, gostatsd, scorecard, terraform-mcp-server, dask-gateway, nri-cassandra, undock, crossplane-provider-aws-rds, kubernetes-release,...

GHSA-CM6P-QC7V-M3JW vulnerabilities

Vulnerabilities for packages: cilium-cli, nri-postgresql, dockerize, azure-ipam, nri-memcached, wave, gatekeeper, step, xcaddy, metallb, spegel, gostatsd, scorecard, terraform-mcp-server, dask-gateway, nri-cassandra, undock, crossplane-provider-aws-rds, kubernetes-release,...

GHSA-GM9R-Q53W-2GH4 vulnerabilities

Vulnerabilities for packages: kyverno-policy-reporter-ui, newrelic-nri-statsd, azcopy, crossplane-provider-aws-dynamodb, croc, cilium-cli, mc, nri-postgresql, dockerize, aws-flb-cloudwatch, cri-tools, kubelet-csr-approver, boring-registry, apache-exporter, flux-image-automation-controller,...

GHSA-GR56-3GP6-6GMJ vulnerabilities

Vulnerabilities for packages: kyverno-policy-reporter-ui, newrelic-nri-statsd, azcopy, crossplane-provider-aws-dynamodb, croc, cilium-cli, mc, nri-postgresql, dockerize, aws-flb-cloudwatch, cri-tools, kubelet-csr-approver, boring-registry, apache-exporter, flux-image-automation-controller,...

GHSA-XVQR-69V8-F3GV vulnerabilities

Vulnerabilities for packages: cilium-cli, nri-postgresql, dockerize, azure-ipam, nri-memcached, wave, gatekeeper, step, xcaddy, metallb, spegel, gostatsd, scorecard, terraform-mcp-server, dask-gateway, nri-cassandra, undock, crossplane-provider-aws-rds, kubernetes-release,...

GHSA-GR56-3GP6-6GMJ vulnerabilities

Vulnerabilities for packages: nri-redis, rancher-helm, karma-fips, minio-object-browser-fips, conjur-cli, kube-arangodb-fips, sops-fips, pvc-autoresizer, knative-serving-fips, tigera-operator, cloudbeat, cloudbeat-fips, ceph-csi-operator-fips, mc, chisel-fips, aws-privateca-issuer,...

CVE-2025-61730 vulnerabilities

Vulnerabilities for packages: nri-redis, rancher-helm, karma-fips, minio-object-browser-fips, conjur-cli, kube-arangodb-fips, sops-fips, pvc-autoresizer, knative-serving-fips, tigera-operator, cloudbeat, cloudbeat-fips, ceph-csi-operator-fips, mc, chisel-fips, aws-privateca-issuer,...

CVE-2025-61726 vulnerabilities

Vulnerabilities for packages: rancher-helm, karma-fips, minio-object-browser-fips, nri-jmx, conjur-cli, kube-arangodb-fips, sops-fips, pvc-autoresizer, knative-serving-fips, tigera-operator, cloudbeat, cloudbeat-fips, ceph-csi-operator-fips, mc, chisel-fips, aws-privateca-issuer,...

CVE-2025-61731 vulnerabilities

Vulnerabilities for packages: nri-redis, rancher-helm, karma-fips, minio-object-browser-fips, nri-jmx, conjur-cli, kube-arangodb-fips, sops-fips, pvc-autoresizer, knative-serving-fips, tigera-operator, cloudbeat, cloudbeat-fips, ceph-csi-operator-fips, hcl2json, ini-file, mc,...