Lucene search
+L

7616 matches found

The Hacker News
The Hacker News
•added 2025/12/01 8:45 a.m.•9 views

New Albiriox MaaS Malware Targets 400+ Apps for On-Device Fraud and Screen Control

A new Android malware named Albiriox has been advertised under a malware-as-a-service MaaS model to offer a "full spectrum" of features to facilitate on-device fraud ODF, screen manipulation, and real-time interaction with infected devices. The malware embeds a hard-coded list comprising over 400...

6.7AI score
SaveExploits0
Snyk
Snyk
•added 2025/11/30 1:14 p.m.•10 views

Malicious Package

Overview chai-pack is a malicious package. This package contains malicious code associated with a social engineering campaign called "Contagious Interview." The attackers target developers through fake job interviews or coding test assignments that require the installation of this package. Once...

9.8CVSS7.2AI score
SaveExploits0References3
Snyk
Snyk
•added 2025/11/30 1:14 p.m.•7 views

Malicious Package

Overview tailwindcss-helpers is a malicious package. This package contains malicious code associated with a social engineering campaign called "Contagious Interview." The attackers target developers through fake job interviews or coding test assignments that require the installation of this...

9.8CVSS7.2AI score
SaveExploits0References3
Snyk
Snyk
•added 2025/11/30 1:14 p.m.•11 views

Malicious Package

Overview stringify-coder is a malicious package. This package contains malicious code associated with a social engineering campaign called "Contagious Interview." The attackers target developers through fake job interviews or coding test assignments that require the installation of this package...

9.8CVSS7.2AI score
SaveExploits0References3
Snyk
Snyk
•added 2025/11/30 1:14 p.m.•14 views

Malicious Package

Overview jsonauto is a malicious package. This package contains malicious code associated with a social engineering campaign called "Contagious Interview." The attackers target developers through fake job interviews or coding test assignments that require the installation of this package. Once...

9.8CVSS7.2AI score
SaveExploits0References3
Snyk
Snyk
•added 2025/11/30 1:14 p.m.•17 views

Malicious Package

Overview cwanner is a malicious package. This package contains malicious code associated with a social engineering campaign called "Contagious Interview." The attackers target developers through fake job interviews or coding test assignments that require the installation of this package. Once...

9.8CVSS7.2AI score
SaveExploits0References3
Snyk
Snyk
•added 2025/11/30 1:14 p.m.•18 views

Malicious Package

Overview session-expire is a malicious package. This package contains malicious code associated with a social engineering campaign called "Contagious Interview." The attackers target developers through fake job interviews or coding test assignments that require the installation of this package...

9.8CVSS7.2AI score
SaveExploits0References3
Snyk
Snyk
•added 2025/11/30 1:14 p.m.•10 views

Malicious Package

Overview jsonify-settings is a malicious package. This package contains malicious code associated with a social engineering campaign called "Contagious Interview." The attackers target developers through fake job interviews or coding test assignments that require the installation of this package...

9.8CVSS7.2AI score
SaveExploits0References3
Snyk
Snyk
•added 2025/11/30 1:14 p.m.•10 views

Malicious Package

Overview pgforce is a malicious package. This package contains malicious code associated with a social engineering campaign called "Contagious Interview." The attackers target developers through fake job interviews or coding test assignments that require the installation of this package. Once...

9.8CVSS7.2AI score
SaveExploits0References3
Snyk
Snyk
•added 2025/11/30 1:14 p.m.•14 views

Malicious Package

Overview node-tailwind is a malicious package. This package contains malicious code associated with a social engineering campaign called "Contagious Interview." The attackers target developers through fake job interviews or coding test assignments that require the installation of this package. On...

9.8CVSS7.2AI score
SaveExploits0References3
Snyk
Snyk
•added 2025/11/30 1:14 p.m.•12 views

Malicious Package

Overview tailwindcss-animation-helper is a malicious package. This package contains malicious code associated with a social engineering campaign called "Contagious Interview." The attackers target developers through fake job interviews or coding test assignments that require the installation of...

9.8CVSS7.2AI score
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2025/11/29 3:00 p.m.•20 views

CVE-2025-11156

Netskope was notified about a potential gap in its agent NS Client on Windows systems. If this gap is successfully exploited, a local, authenticated user with Administrator privileges can improperly load the driver as a generic kernel service. This triggers the flaw, causing a system crash...

5.9CVSS6.6AI score0.00126EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/11/29 3:04 a.m.•23 views

CVE-2025-58303

UAF vulnerability in the screen recording framework module. Impact: Successful exploitation of this vulnerability may affect availability...

8.4CVSS6.9AI score0.00076EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/11/29 3:04 a.m.•26 views

CVE-2025-58307

UAF vulnerability in the screen recording framework module. Impact: Successful exploitation of this vulnerability may affect availability...

6.4CVSS6.9AI score0.00081EPSS
SaveExploits0References1
NVD
NVD
•added 2025/11/28 3:15 p.m.•16 views

CVE-2025-11156

Netskope was notified about a potential gap in its agent NS Client on Windows systems. If this gap is successfully exploited, a local, authenticated user with Administrator privileges can improperly load the driver as a generic kernel service. This triggers the flaw, causing a system crash...

5.9CVSS0.00126EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/11/28 2:26 p.m.•16 views

EUVD-2025-199877

Netskope was notified about a potential gap in its agent NS Client on Windows systems. If this gap is successfully exploited, a local, authenticated user with Administrator privileges can improperly load the driver as a generic kernel service. This triggers the flaw, causing a system crash...

5.9CVSS6.1AI score0.00126EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2025/11/28 2:26 p.m.•7 views

CVE-2025-11156 Improper Service Loading Vulnerability in Netskope Endpoint DLP Driver

Netskope was notified about a potential gap in its agent NS Client on Windows systems. If this gap is successfully exploited, a local, authenticated user with Administrator privileges can improperly load the driver as a generic kernel service. This triggers the flaw, causing a system crash...

5.9CVSS6.3AI score0.00126EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/11/28 2:26 p.m.•21 views

CVE-2025-11156 Improper Service Loading Vulnerability in Netskope Endpoint DLP Driver

Netskope was notified about a potential gap in its agent NS Client on Windows systems. If this gap is successfully exploited, a local, authenticated user with Administrator privileges can improperly load the driver as a generic kernel service. This triggers the flaw, causing a system crash...

5.9CVSS0.00126EPSS
SaveExploits0References1
NVD
NVD
•added 2025/11/28 3:15 a.m.•10 views

CVE-2025-58303

UAF vulnerability in the screen recording framework module. Impact: Successful exploitation of this vulnerability may affect availability...

8.4CVSS0.00076EPSS
SaveExploits0References1
OSV
OSV
•added 2025/11/28 3:15 a.m.•8 views

CVE-2025-58307

UAF vulnerability in the screen recording framework module. Impact: Successful exploitation of this vulnerability may affect availability...

5.5CVSS5.8AI score0.00081EPSS
SaveExploits0References1
Rows per page
Query Builder