MAL-2025-18558 Malicious code in do-wnload-available-silver-age-3ul9y-rzorsr (npm)

The package do-wnload-available-silver-age-3ul9y-rzorsr was found to contain malicious code...

MAL-2025-8366 Malicious code in @lbnqduy2180500/silver-octo-pancake (npm)

The package @lbnqduy2180500/silver-octo-pancake was found to contain malicious code...

MAL-2025-9136 Malicious code in @npmteanew/silver-dollop (npm)

The package @npmteanew/silver-dollop was found to contain malicious code...

MAL-2025-9327 Malicious code in @silver-team/sm2kata (npm)

The package @silver-team/sm2kata was found to contain malicious code...

Silver Fox APT Targets Taiwan with Complex Gh0stCringe and HoldingHands RAT Malware

Cybersecurity researchers are warning of a new phishing campaign that's targeting users in Taiwan with malware families such as HoldingHands RAT and Gh0stCringe. The activity is part of a broader campaign that delivered the Winos 4.0 malware framework earlier this January by sending phishing...

CVE-2020-12144

The certificate used to identify the Silver Peak Cloud Portal to EdgeConnect devices is not validated. This makes it possible for someone to establish a TLS connection from EdgeConnect to an untrusted portal...

CVE-2019-16103

Silver Peak EdgeConnect SD-WAN before 8.1.7.x allows privilege escalation by administrators from the menu to a root Bash OS shell via the spsshell feature...

CVE-2019-16104

Silver Peak EdgeConnect SD-WAN before 8.1.7.x has reflected XSS via the rest/json/configdb/download/ PATHINFO...

CVE-2013-3315

The server in TIBCO Silver Mobile 1.1.0 does not properly verify access to the administrator role before executing a command, which allows authenticated users to gain privileges via unspecified vectors...

Security update for ca-certificates-mozilla

This update for ca-certificates-mozilla fixes the following issues: Update to 2.74 state of Mozilla SSL root CAs: Removed: SwissSign Silver CA - G2 Added: D-TRUST BR Root CA 2 2023 D-TRUST EV Root CA 2 2023 Updated to 2.72 state of Mozilla SSL root CAs bsc1234798: Removed: SecureSign RootCA11...

SUSE-SU-2025:20307-1 Security update for ca-certificates-mozilla

This update for ca-certificates-mozilla fixes the following issues: Update to 2.74 state of Mozilla SSL root CAs: Removed: SwissSign Silver CA - G2 Added: D-TRUST BR Root CA 2 2023 D-TRUST EV Root CA 2 2023 Updated to 2.72 state of Mozilla SSL root CAs bsc1234798: Removed: SecureSign RootCA11...

CVE-2025-46521

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Silver Muru WS Force Login Page ws-force-login-page allows Stored XSS.This issue affects WS Force Login Page: from n/a through = 3.0.3...

SONNI: Secure Oblivious Neural Network Inference

In the standard privacy-preserving Machine learning as-a-service MLaaS model, the client encrypts data using homomorphic encryption and uploads it to a server for computation. The result is then sent back to the client for decryption. It has become more and more common for the computation to be...

CVE-2025-46521

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Silver Muru WS Force Login Page ws-force-login-page allows Stored XSS.This issue affects WS Force Login Page: from n/a through = 3.0.3...

CVE-2025-46521

CVE-2025-46521 concerns the WordPress plugin "WS Force Login Page". The vulnerability is a cross‑site scripting (stored XSS) flaw caused by improper input neutralization, affecting versions from n/a up to and including 3.0.3. Public references in the provided documents corroborate stored XSS as t...

PT-2025-17825 · Unknown · Silver Muru Ws Force Login Page

Name of the Vulnerable Software and Affected Versions: Silver Muru WS Force Login Page versions n/a through 3.0.3 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an...

antique-silver.com Cross Site Scripting vulnerability OBB-4037779

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

antique-silver.co.uk Cross Site Scripting vulnerability OBB-4037778

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CYREBRO’s AI-Native MDR Platform Earns Silver at the 2025 Globee Cybersecurity Awards

Tel Aviv, Israel, 12th March 2025, CyberNewsWire...

Silver Fox APT Uses Winos 4.0 Malware in Cyber Attacks Against Taiwanese Organizations

A new campaign is targeting companies in Taiwan with malware known as Winos 4.0 as part of phishing emails masquerading as the country's National Taxation Bureau. The campaign, detected last month by Fortinet FortiGuard Labs, marks a departure from previous attack chains that have leveraged...