762 matches found
EUVD-2025-50227
Malicious code in exuberantspiderz3n npm...
EUVD-2025-49736
Malicious code in neighbouringspiderz3n npm...
Malicious code in neighbouring_spider_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17bd6dc5297d202ad98254e2591e108c02becdbb16f3dc543d1a080a7cc94faa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in multiple_spider_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1331290d789f3118f3dcfb02fc0d65ea32834daaa0ff50e315240ec00d4d4f84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in exuberant_spider_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e01486ad7ef747c86539a50d2a6ecdc152260f792640a47d0260290092e76de7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
A Cybercrime Merger Like No Other — Scattered Spider, LAPSUS$, and ShinyHunters Join Forces
The nascent collective that combines three prominent cybercrime groups, Scattered Spider, LAPSUS$, and ShinyHunters, has created no less than 16 Telegram channels since August 8, 2025. "Since its debut, the group's Telegram channels have been removed and recreated at least 16 times under varying...
CVE-2025-11708
Use-after-free in MediaTrackGraphImpl::GetInstance. This vulnerability was fixed in Firefox 144, Firefox ESR 140.4, Thunderbird 144, and Thunderbird 140.4...
CVE-2025-11716
Links in a sandboxed iframe could open an external app on Android without the required "allow-" permission. This vulnerability was fixed in Firefox 144 and Thunderbird 144...
CVE-2025-11714
Memory safety bugs present in Firefox ESR 115.28, Firefox ESR 140.3, Thunderbird ESR 140.3, Firefox 143 and Thunderbird 143. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This...
CVE-2025-11709
A compromised web process was able to trigger out of bounds reads and writes in a more privileged process using manipulated WebGL textures. This vulnerability was fixed in Firefox 144, Firefox ESR 115.29, Firefox ESR 140.4, Thunderbird 144, and Thunderbird 140.4...
Oracle EBS Under Fire as Cl0p Exploits CVE-2025-61882 in Real-World Attacks
CrowdStrike on Monday said it's attributing the exploitation of a recently disclosed security flaw in Oracle E-Business Suite with moderate confidence to a threat actor it tracks as Graceful Spider aka Cl0p, and that the first known exploitation occurred on August 9, 2025. The malicious activity...
EUVD-2018-2456
Malware in sbrugna...
EUVD-2017-3358
Malware in sbrugna...
EUVD-2015-4372
Malware in sbrugna...
EUVD-2015-2303
Malware in sbrugna...
EUVD-2014-8421
Malware in sbrugna...
EUVD-2015-1714
Malware in sbrugna...
EUVD-2014-5551
Malware in sbrugna...