CVE-2026-44595

creationtimestamp| type| source ---|---|--- 2026-05-29 15:00:15+00:00| seen| Telegram/a86W4JR7O--z7UEFDSjPGooPu8cJg6Qw5misZZ2a8xOkaUM 2026-05-29 21:00:04+00:00| seen| Telegram/7EeES1995AuZh7L7sqmaK3TqJ83qHuwNNd4oo-aSS2rD4M...

Malicious code in morin (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37c27d25a4c203cbb89156281fbacc7feb424a09eaa296f7c3dedff860891f1f morin/common.py hardcodes an HTTP proxy at 191.102.147.15:8000 with embedded credentials proxies = 'https': 'http://5TUMV6:[email protected]:8000...

CVE-2026-25262

creationtimestamp| type| source ---|---|--- 2026-04-24 14:30:06+00:00| seen| https://t.me/truesecator/8141 2026-04-24 15:35:55+00:00| seen| https://t.me/xakepru/19303 2026-05-06 00:21:12+00:00| seen| https://notnow.dev/objects/cb0f51ab-513a-484f-8edd-624c60fcf616...

CVE-2025-24266

creationtimestamp| type| source ---|---|--- 2026-04-02 22:15:18+00:00| seen| Telegram/P5-d6aZOqF55QElx3cS6BOd0aPe5lgIDzzkyeelTZVJswY 2026-04-02 22:15:27+00:00| seen| Telegram/zRO4yDgOkqitQ-0uPFlpuBUiTVJii3PBjh2HUkR1y964uzw...

CVE-2025-68903

creationtimestamp| type| source ---|---|--- 2026-01-27 23:29:39+00:00| seen| Telegram/zJvFOg6c3xK9qMq2DX4vkBVjAi9k0P0w4NQCJGGQFKnl2g8 2026-01-27 23:30:00+00:00| seen| Telegram/E0bhthVfrpmA11cyG36Ow0RO3qNkd27iuYqgqtZi1htOuQ...

CVE-2025-66116

creationtimestamp| type| source ---|---|--- 2026-01-20 20:14:10+00:00| seen| Telegram/ZHK9Ax7pz7g83q2gubkfj9qF1U1WNdVQW2eXMG7gaIS8Ew 2026-01-20 20:28:32+00:00| seen| Telegram/jAKBh9rG5uUBdJqmDLLuw9WMdRwqmZINckpXdYl26M0yPRw...

CVE-2025-60199

creationtimestamp| type| source ---|---|--- 2026-01-20 20:13:56+00:00| seen| Telegram/H3CnBfK7PYddEv-M1ZTryUsCc1Bn9GTSxVyKpS3KhQYxX70 2026-01-20 20:14:12+00:00| seen| Telegram/S7LU1KYoexzUkQbYGegiPNoF7EU-htKWL8zCqfkFbNHFsA...

CVE-2025-58995

creationtimestamp| type| source ---|---|--- 2026-01-20 20:12:30+00:00| seen| Telegram/sWyHUnrbIHX-Kbgt2WnfloqXmwwtZwbq4XH8MFv2PgEZKIo 2026-01-20 20:12:55+00:00| seen| Telegram/QnrH5g5OwGBUAy6ScRFD4MTujgrWMEa1D4kehJKdWHvpG4...

CVE-2025-49372

creationtimestamp| type| source ---|---|--- 2026-01-20 20:10:39+00:00| seen| Telegram/wcxfxhIjQZfGrpmoi9YVl8EqIpyUUAzOkMzbhBvCapKIP8 2026-01-20 20:10:44+00:00| seen| Telegram/xvvbL5Om5SDy9fQ-TK8aTlHNeA5-FbP6-yWc-4dkev7kv8...

CVE-2025-53238

creationtimestamp| type| source ---|---|--- 2026-01-20 20:03:37+00:00| seen| Telegram/vDPjge6K1tF404WPf9Q1hmt1q7CFqM-WlHcCHFTuMGtlY9k 2026-01-20 20:03:42+00:00| seen| Telegram/iqXHuMDsRQAGn3zdqA8hR0jm1F7aKD9CXHXY4CRfZNP0Hs...

CVE-2025-49963

creationtimestamp| type| source ---|---|--- 2026-01-20 20:02:28+00:00| seen| Telegram/fMYFu5KBFVLJT0mlLdRRIfBapDJ5HzsO-6rws7oTheN0tY 2026-01-20 20:02:32+00:00| seen| Telegram/fN3HRIXpamftNoJynabwgfF0PiG7n5MNorfl43ZW2B0h3M...

Path Traversal

Pyrofork is vulnerable to Path Traversal. The vulnerability is due to improper sanitization of filenames received from Telegram messages in the downloadmedia method, which allows an attacker to supply a malicious filename via DocumentAttributeFilename and perform path traversal during file path...

Directory Traversal

Overview pyrofork is a Fork of pyrogram. Elegant, modern and asynchronous Telegram MTProto API framework in Python for users and bots Affected versions of this package are vulnerable to Directory Traversal via the progress' function in the downloadmedia.py file. An attacker can overwrite or creat...

CVE-2025-49950

creationtimestamp| type| source ---|---|--- 2025-10-23 14:45:59+00:00| seen| Telegram/aJ4JGNadMl2TUbamW5VgmeORX1FW2ArG6VE2udAw8PxMl0 2026-01-20 20:01:52+00:00| seen| Telegram/nZAQyonvZRiaoeWjWlMy8xyv-q1g-J-3AQoTYpGZEZ6GGn0...

CVE-2025-55118

creationtimestamp| type| source ---|---|--- 2025-09-16 12:41:30+00:00| seen| Telegram/aM9nShAMWWo-Safr5T0nmanWhCWNIrKggqr2e7Gj0tQ4I 2025-09-16 12:41:34+00:00| seen| Telegram/bNHmux3Mp--yw9vgeXp5Wm2nO-CNHnyoV1hwu2bWE9ONYNc...

RHSA-2024:3580

creationtimestamp| type| source ---|---|--- 2025-08-30 08:22:52+00:00| seen| Telegram/mvZ8NgsrRYGJqSXeB5hg9rgVW-S0L1quSgwaG7p9hO2SM4Y 2025-10-24 12:48:06+00:00| seen| Telegram/BtAZttkW3tMUhy9LhULplNpp4G9yhOARIInV6G962lOs5w...

CVE-2025-26513

creationtimestamp| type| source ---|---|--- 2025-08-07 20:54:59+00:00| seen| Telegram/jLOmhfX5hM2YCnWVDpNR9GbnlfoTPcHo7kktIbQ74NKeKac 2026-01-16 21:09:42+00:00| seen| Telegram/b9TcSxQKNYtDoS6fnFUtnFIrR9r32BwOTSP10Q88hDudi2w...

RHSA-2024:6501

creationtimestamp| type| source ---|---|--- 2025-08-07 11:56:11+00:00| seen| Telegram/oa785xuuDZFvMIu4eOU-xkWgB1WnoFdtpxzOilVZ06UBfA 2025-08-30 23:21:50+00:00| seen| Telegram/WH5j90dKNk5HvcEcJzfmMlFnrp2jiQb2AkvSrcPCSVW1MDg 2025-09-02 23:23:55+00:00| seen|...

RHSA-2024:1306

creationtimestamp| type| source ---|---|--- 2025-08-03 05:48:54+00:00| seen| Telegram/a8pEGOkTgJJux7W8-kIm1u5Bq3y4Apx45NIApUGzfKuHh8 2025-08-03 05:48:56+00:00| seen| Telegram/z6u7m9GyhDt-ZJU5rROxeIXptUYqKnCJTeQRltA3B8664MU...

RHSA-2023:7379

creationtimestamp| type| source ---|---|--- 2025-08-01 16:44:58+00:00| seen| Telegram/bcIbeCc6uOaGrdM5LOW5-5tLNmTviix1Z-9QPl2cq16iU8c 2025-08-01 16:44:59+00:00| seen| Telegram/UvvK5lpUqP5-AKrc2HE3kUs7WF2Bdb-mYHzHriMNu4GQwA...