MAL-2025-6521 Malicious code in hellotesthim (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 a7a4369b02deb0d2a9cf1340be0efe760e29f7979e3f7361ba029a282b70597f Series of packages mostly with an obfuscated infostealer attempting to collect Chrome data. While discord webhook is usually set to an example, there are other...

CVE-2025-6786

creationtimestamp| type| source ---|---|--- 2025-07-04 07:25:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lt4pn3cgjw2r...

CVE-2025-6959

creationtimestamp| type| source ---|---|--- 2025-07-01 15:27:48+00:00| seen| https://bsky.app/profile/potato.software/post/3lsvz6pn7b52s 2025-07-01 16:08:33+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/20062...

CVE-2025-34064

creationtimestamp| type| source ---|---|--- 2025-07-01 15:07:57+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/20043 2025-07-01 15:58:48+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114778801913249591 2025-08-06 13:54:20+00:00| seen|...

June Linux Patch Wednesday

JuneLinux Patch Wednesday. This time, there are 598 vulnerabilities, almost half as many as in May. Of these, 355 are in the Linux Kernel. There are signs of exploitation in the wild for 3 vulnerabilities CISA KEV. SFB - Chromium CVE-2025-2783 MemCor - Chromium CVE-2025-5419 CodeInj - Hibernate...

CVE-2025-49490

creationtimestamp| type| source ---|---|--- 2025-07-01 10:08:34+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/20011 2025-07-01 12:26:44+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114777968065544988 2025-07-01 13:32:45+00:00| seen|...

CVE-2025-41648

creationtimestamp| type| source ---|---|--- 2025-07-01 08:11:18+00:00| seen| https://infosec.exchange/users/certvde/statuses/114776963668841559 2025-07-01 08:11:37+00:00| seen| https://bsky.app/profile/certvde.infosec.exchange.ap.brid.gy/post/3lsvasby3epc2 2025-07-01 08:50:34+00:00| seen|...

CVE-2025-6934

creationtimestamp| type| source ---|---|--- 2025-07-01 07:09:27+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/20008 2025-07-01 09:00:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsvdkcymha2p 2025-07-01 21:00:16+00:00| published-proof-of-concept|...

CVE-2025-6936

creationtimestamp| type| source ---|---|--- 2025-07-01 00:07:10+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19991 2025-07-01 00:30:06+00:00| seen| https://bsky.app/profile/potato.software/post/3lsugzj6nce2c 2025-07-01 04:20:20+00:00| seen|...

CVE-2025-40734

creationtimestamp| type| source ---|---|--- 2025-06-30 09:05:29+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19914 2025-06-30 13:18:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lstbi7df4d2p...

CVE-2025-52834

creationtimestamp| type| source ---|---|--- 2025-06-27 13:50:35+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19704 2025-06-27 15:19:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lslwu7pdod2o...

CVE-2025-5093

creationtimestamp| type| source ---|---|--- 2025-06-27 06:53:19+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19672 2025-06-27 10:40:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lslhb46gzm2v...

CVE-2015-0849

creationtimestamp| type| source ---|---|--- 2025-06-27 01:07:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lskha3tfzx2v...

Wordfence Intelligence Weekly WordPress Vulnerability Report (June 16, 2025 to June 22, 2025)

Calling all Vulnerability Researchers and Bug Bounty Hunters! Spring into Summer with Wordfence! Now through August 4, 2025, earn 2X bounty rewards forall in-scope submissions from our 'High Threat' list in software with fewer than 5 million active installs. Bounties up to $31,200 per...

CVE-2025-41404

creationtimestamp| type| source ---|---|--- 2025-06-26 06:51:24+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19580 2025-06-26 10:55:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsixnvp54g2r...

CVE-2025-6621

creationtimestamp| type| source ---|---|--- 2025-06-25 18:52:08+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19521 2025-06-30 20:26:59+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114774193882630947...

CVE-2025-6433

If a user visited a webpage with an invalid TLS certificate, and granted an exception, the webpage was able to provide a WebAuthn challenge that the user would be prompted to complete. This is in violation of the WebAuthN spec which requires "a secure transport established without errors". This...

CVE-2025-0966

creationtimestamp| type| source ---|---|--- 2025-06-25 03:47:07+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19416 2025-06-25 06:24:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsfxyz6f3425...

CVE-2025-46416

creationtimestamp| type| source ---|---|--- 2025-06-24 16:04:16+00:00| seen| https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3lsehxijmf62s 2025-06-24 16:39:35+00:00| seen| https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3lsejwnahuu27 2025-06-27 16:57:35+00:00|...

CVE-2025-34039

creationtimestamp| type| source ---|---|--- 2025-06-24 01:46:59+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19282 2025-06-24 02:34:27+00:00| published-proof-of-concept| Telegram/nIXrd68JPRslpKJ78-Anip-Gt9UVTfpwRW1S7IBK0x2u7Jw 2025-06-25 21:02:24+00:00| seen|...