MAL-2026-696 Malicious code in pathfiles (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 a96d53709493a07432f8619b9ca322fef0fb4bf9080a02da7e8f6bc03353b3c0 Disguised as file system manipulation library, the package hides an obfuscated code to communicate with a Telegram channel. Though the usage is not known at th...

GHSA-9R3H-MPF8-25GJ

creationtimestamp| type| source ---|---|--- 2026-01-28 01:18:00+00:00| seen| Telegram/Tu9CT238H1kzZfO9zD15YxuxrF9j4C4TXXwQT4shyPhf2w...

CVE-2025-68906

creationtimestamp| type| source ---|---|--- 2026-01-27 23:30:00+00:00| seen| Telegram/E0bhthVfrpmA11cyG36Ow0RO3qNkd27iuYqgqtZi1htOuQ...

RHSA-2026:0705

creationtimestamp| type| source ---|---|--- 2026-01-15 14:02:12+00:00| seen| Telegram/R693LAplLRYRq5QcrP4R33XKFkly-VLLCvln7DPho5PnnI...

GHSA-4G6V-36FV-QCVW

creationtimestamp| type| source ---|---|--- 2026-01-10 02:04:07+00:00| published-proof-of-concept| Telegram/rdcJ-eVVBzDoFwL5TR2qJvsWI6XIYotV57lHh9Pxh3U8ZQE...

RHSA-2026:0360

creationtimestamp| type| source ---|---|--- 2026-01-08 15:03:50+00:00| published-proof-of-concept| Telegram/uxxdzZqKy2gVHqKwUzSTJZodHF1E0u6px0vr0T-scLHYls...

ThreatsDay Bulletin: RustFS Flaw, Iranian Ops, WebUI RCE, Cloud Leaks, and 12 More Stories

The internet never stays quiet. Every week, new hacks, scams, and security problems show up somewhere. This week's stories show how fast attackers change their tricks, how small mistakes turn into big risks, and how the same old tools keep finding new ways to break in. Read on to catch up before...

GHSA-9C23-RRG9-JC89

creationtimestamp| type| source ---|---|--- 2026-01-07 20:04:29+00:00| published-proof-of-concept| Telegram/dVBBzDLnAvxAWJ1LkZD-2V6hkrnURxr4dyAmSZABM3KGIM...

CVE-2025-20779

creationtimestamp| type| source ---|---|--- 2026-01-06 20:12:52+00:00| seen| Telegram/jBZlDbE9sXNOGZiNfLnczbuckfSwrbzvFqPwUO0qENjWP0...

GHSA-PR6M-Q4G7-342C

creationtimestamp| type| source ---|---|--- 2026-01-05 19:06:46+00:00| seen| Telegram/-WkPGYxQLne2Z5X7oW7Cjya-7O5zQTo5z5b79nEyipWZqE...

CVE-2025-58894

creationtimestamp| type| source ---|---|--- 2026-01-05 15:03:22+00:00| seen| Telegram/S4TV7QOTmuOpb26AehbULxjq7CSnwrpUZZpuNK5cFA1p04...

CVE-2025-49173

creationtimestamp| type| source ---|---|--- 2025-12-10 09:00:05+00:00| published-proof-of-concept| Telegram/b0MrL-7YyNVMwlRE8cQmf3aSFWZZuNk0ErN3GEJH-SnDaRk...

PT-2025-48188

Name of the Vulnerable Software and Affected Versions Revive Adserver affected versions not specified Description The software contains a flaw in username validation that allows anyone to register look-alike accounts and impersonate administrators. This issue persists after a previous fix for...

PT-2025-47982

Name of the Vulnerable Software and Affected Versions Telegram Bot & Channel plugin for WordPress versions prior to 4.2 Description The Telegram Bot & Channel plugin for WordPress is susceptible to Stored Cross-Site Scripting through the Telegram username. Insufficient input sanitization and outp...

CVE-2025-61299

creationtimestamp| type| source ---|---|--- 2025-11-07 05:43:37+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/58649 2025-11-07 09:00:04+00:00| published-proof-of-concept| Telegram/rxBXc7mJGGU5sBhvwkQkmojEU4Xu3I8--yJupvnllAH1D4...

CVE-2025-61753

creationtimestamp| type| source ---|---|--- 2025-10-22 18:43:34+00:00| seen| Telegram/cPt7sVzLyqrOVBMY8huTdCdqI4sWvv7RTwPTrtyHU4tU07M...

CVE-2025-32324

creationtimestamp| type| source ---|---|--- 2025-10-16 17:51:24+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/55749 2025-10-16 21:00:05+00:00| published-proof-of-concept| Telegram/k65Luaba8Fo3blOkMXIMaYfKgMppZ09hRCYJGbV4Az32CA...

CVE-2025-31998

creationtimestamp| type| source ---|---|--- 2025-10-12 03:14:22+00:00| seen| Telegram/X1QO3FdO83VgYJ8qfIPh8oFA5RfrYtTrMeoVmGpHRv17Ms...

GHSA-Q5R6-9QWQ-G2WJ

creationtimestamp| type| source ---|---|--- 2025-10-09 18:09:32+00:00| seen| Telegram/0TskeGl1Kq1GxE0vpG0QWfCVAN9lSZt51tWPhsVs0QSho...

XWorm V6: Exploring Pivotal Plugins

XWorm V6: Exploring Pivotal Plugins By Niranjan Hegde and Sijo Jacob · October 2, 2025 Introduction In the constantly evolving world of cyber threats, staying informed is not just an advantage; it's a necessity. First observed in 2022, XWorm quickly gained notoriety as a highly effective malware,...