MAL-2025-36319 Malicious code in test-mlw2-spray-merks (npm)

The package test-mlw2-spray-merks was found to contain malicious code...

Malicious code in test-mlw2-spray-sized (npm)

The package test-mlw2-spray-sized was found to contain malicious code...

MAL-2025-36320 Malicious code in test-mlw2-spray-sized (npm)

The package test-mlw2-spray-sized was found to contain malicious code...

Malicious code in test-mlw2-spray-merks (npm)

The package test-mlw2-spray-merks was found to contain malicious code...

com.github.kikuomax:spray-jwt-shapeless2_2.10 (>=0.0.1, <=0.0.3), com.github.kikuomax:spray-jwt-shapeless2_2.11 (>=0.0.1, <=0.0.3) +3 more potentially affected by CVE-2025-53864 via com.nimbusds:nimbus-jose-jwt (3.5)

com.nimbusds:nimbus-jose-jwt MAVEN version 3.5 is affected by a known vulnerability. The following packages have a transitive dependency on com.nimbusds:nimbus-jose-jwt and may be impacted: - com.github.kikuomax:spray-jwt-shapeless22.10 =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.3 -...

CVE-2023-41885

Piccolo is an ORM and query builder which supports asyncio. In versions 0.120.0 and prior, the implementation of BaseUser.login leaks enough information to a malicious user such that they would be able to successfully generate a list of valid users on the platform. As Piccolo on its own does not...

CVE-2020-5799

The Eat Spray Love mobile app for both iOS and Android contains a backdoor account that, when modified, allowed privileged access to restricted functionality and to other users' data...

📄 Ivanti Connect Secure 22.7R2.5 Remote Code Execution

This Metasploit module exploits a stack-based buffer overflow vulnerability in Ivanti Connect Secure to achieve remote code execution CVE-2025-22457. Versions 22.7R2.5 and earlier are vulnerable. Note that Ivanti Pulse Connect Secure, Ivanti Policy Secure and ZTA gateways are also vulnerable but...

Password Spray Attacks Taking Advantage of Lax MFA

In the first quarter of 2025, Rapid7’s Managed Threat Hunting team observed a significant volume of brute-force password attempts leveraging FastHTTP, a high-performance HTTP server and client library for Go, to automate unauthorized logins via HTTP requests. This rapid volume of credential...

Password Spray Attacks Taking Advantage of Lax MFA

In the first quarter of 2025, Rapid7’s Managed Threat Hunting team observed a significant volume of brute-force password attempts leveraging FastHTTP, a high-performance HTTP server and client library for Go, to automate unauthorized logins via HTTP requests. This rapid volume of credential...

Ivanti Connect Secure Unauthenticated Remote Code Execution via Stack-based Buffer Overflow

This module exploits a Stack-based Buffer Overflow vulnerability in Ivanti Connect Secure to achieve remote code execution CVE-2025-22457. Versions 22.7R2.5 and earlier are vulnerable. Note that Ivanti Pulse Connect Secure, Ivanti Policy Secure and ZTA gateways are also vulnerable but this module...

Microsoft Warns of Chinese Botnet Exploiting Router Flaws for Credential Theft

Microsoft has revealed that a Chinese threat actor it tracks as Storm-0940 is leveraging a botnet called Quad7 to orchestrate highly evasive password spray attacks. The tech giant has given the botnet the name CovertNetwork-1658, stating the password spray operations are used to steal credentials...

Malicious code in graffiti-alley-spray-cans (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-2435 Malicious code in graffiti-alley-spray-cans (npm)

--- -= Per source details. Do not edit below this line.=-...

How are attackers trying to bypass MFA?

In the latest Cisco Talos Incident Response Quarterly Trends report, instances related to multi-factor authentication MFA were involved in nearly half of all security incidents that our team responded to in the first quarter of 2024. In 25% of engagements, the underlying cause was users accepting...

Midnight Blizzard Attack Detection in Trellix Helix

Midnight Blizzard Attack Detection in Trellix Helix By Ian Shefferman · March 18, 2024 On January 25, 2024, Microsoft reported a breach of their systems by the Russian APT group Midnight Blizzard, also known as APT29 and Cozy Bear. The attackers performed a password spray, compromised a Microsoft...

Microsoft Confirms Russian Hackers Stole Source Code, Some Customer Secrets

Microsoft on Friday revealed that the Kremlin-backed threat actor known as Midnight Blizzard aka APT29 or Cozy Bear managed to gain access to some of its source code repositories and internal systems following a hack that came to light in January 2024. "In recent weeks, we have seen evidence that...

Midnight Blizzard and Cloudflare-Atlassian Cybersecurity Incidents: What to Know

The Midnight Blizzard and Cloudflare-Atlassian cybersecurity incidents raised alarms about the vulnerabilities inherent in major SaaS platforms. These incidents illustrate the stakes involved in SaaS breaches — safeguarding the integrity of SaaS apps and their sensitive data is critical but is no...

com.github.kikuomax:spray-jwt-shapeless2_2.10 (>=0.0.1, <=0.0.3), com.github.kikuomax:spray-jwt-shapeless2_2.11 (>=0.0.1, <=0.0.3) +3 more potentially affected by CVE-2023-52428 via com.nimbusds:nimbus-jose-jwt (3.5)

com.nimbusds:nimbus-jose-jwt MAVEN version 3.5 is affected by a known vulnerability. The following packages have a transitive dependency on com.nimbusds:nimbus-jose-jwt and may be impacted: - com.github.kikuomax:spray-jwt-shapeless22.10 =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.3 -...

Microsoft Executives Hacked

Microsoft is reporting that a Russian intelligence agency--the same one responsible for SolarWinds--accessed the email system of the companys executives. Beginning in late November 2023, the threat actor used a password spray attack to compromise a legacy non-production test tenant account and ga...