127 matches found
Projectworlds Online Art Gallery Shop SQL注入漏洞
Projectworlds Online Art Gallery Shop is an online art gallery store open source by Projectworlds. Version 1.0 of Projectworlds Online Art Gallery Shop has a SQL injection vulnerability. This vulnerability arises from incorrect handling of parameters in the file/admin/adminHome.php, specifically...
Improper Directory Validation
@anthropic-ai/claude-code is vulnerable to improper directory validation. The vulnerability is due to insufficient validation of directory changes when using the cd command with write operations, which allows an attacker to navigate into protected folders e.g., .claude and create or modify files...
CVE-2019-20456
Goverlan Reach Console before 9.50, Goverlan Reach Server before 3.50, and Goverlan Client Agent before 9.20.50 have an Untrusted Search Path that leads to Command Injection and Local Privilege Escalation via DLL hijacking...
SUSE CVE-2025-66490
Traefik is an HTTP reverse proxy and load balancer. For versions prior to 2.11.32 and 2.11.31 through 3.6.2, requests using PathPrefix, Path or PathRegex matchers can bypass path normalization. When Traefik uses path-based routing, requests containing URL-encoded restricted characters /, , Null,...
1 million victims, 17,500 fake sites: Google takes on toll-fee scammers
A Phishing-as-a-Service PhaaS platform based in China, known as “Lighthouse,” is the subject of a new Google lawsuit. Lighthouse enables smishing SMS phishing campaigns, and if you’re in the US there is a good chance you've seen their texts about a small amount you supposedly owe in toll fees...
AFLGopher: Accelerating Directed Fuzzing Via Feasibility-Aware Guidance
Directed fuzzing is a useful testing technique that aims to efficiently reach target code sites in a program. The core of directed fuzzing is the guiding mechanism that directs the fuzzing to the specified target. A general guiding mechanism adopted in existing directed fuzzers is to calculate th...
LiveOverflowMod
LiveOverflowMod A Minecraft hacked-client for the LiveOverflo...
EUVD-2019-11001
Malware in sbrugna...
EUVD-2024-45107
Malicious code in bioql PyPI...
EUVD-2025-31579
Malicious code in bioql PyPI...
17,500 Phishing Domains Target 316 Brands Across 74 Countries in Global PhaaS Surge
The phishing-as-a-service PhaaS offerings known as Lighthouse and Lucid has been linked to more than 17,500 phishing domains targeting 316 brands from 74 countries. "Phishing-as-a-Service PhaaS deployments have risen significantly recently," Netcraft said in a new report. "The PhaaS operators...
MAL-2025-46301 Malicious code in test-mlw2-scaud-reach-sored-quipo (npm)
The package test-mlw2-scaud-reach-sored-quipo was found to contain malicious code...
MAL-2025-46273 Malicious code in test-mlw1-scaud-reach-sored-quipo (npm)
The package test-mlw1-scaud-reach-sored-quipo was found to contain malicious code...
Malicious code in test-mlw2-scaud-reach-sored-quipo (npm)
The package test-mlw2-scaud-reach-sored-quipo was found to contain malicious code...
Noodlophile Malware Campaign Expands Global Reach with Copyright Phishing Lures
The threat actors behind the Noodlophile malware are leveraging spear-phishing emails and updated delivery mechanisms to deploy the information stealer in attacks aimed at enterprises located in the U.S., Europe, Baltic countries, and the Asia-Pacific APAC region. "The Noodlophile campaign, activ...
Linux Distros Unpatched Vulnerability : CVE-2024-3653
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was found in Undertow. This issue requires enabling the learning-push handler in the server's config, which is disabled by default, leaving the...
Malicious code in test-mlw2-spore-which-reach-crepe (npm)
The package test-mlw2-spore-which-reach-crepe was found to contain malicious code...
MAL-2025-36314 Malicious code in test-mlw2-spore-which-reach-crepe (npm)
The package test-mlw2-spore-which-reach-crepe was found to contain malicious code...