87818 matches found
MAL-2025-191596 Malicious code in telegram-api-test (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9de851a49849595878a33272868046f71f86d67b3664a73c4357dd58b2640fc The package telegram-api-test was found to contain malicious code...
CVE-2025-13796
creationtimestamp| type| source ---|---|--- 2025-12-01 03:00:07+00:00| published-proof-of-concept| Telegram/q7VD5LFLz0DQI0He0CdIi8UKDEAJAk3zBKou56yKpQVq99g...
CVE-2025-9435
creationtimestamp| type| source ---|---|--- 2025-11-30 14:31:12+00:00| seen| Telegram/AYjypq9TrL8W2-jaBfft0eKcopILEbguaFc8wRkNOIsbN0...
WordPress Notification for Telegram plugin <= 3.4.7 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Ahmad in WordPress Plugin Notification for Telegram versions = 3.4.7...
CVE-2025-59534
creationtimestamp| type| source ---|---|--- 2025-11-28 15:27:35+00:00| published-proof-of-concept| https://t.me/cKure/15756...
CVE-2025-65881
creationtimestamp| type| source ---|---|--- 2025-11-28 15:00:07+00:00| published-proof-of-concept| Telegram/lq4m-JYIdMsfIAsI3lNQ7LcrQOYDBCp5BuoQk99xpsmGKag...
Tomiris wreaks Havoc: New tools and techniques of the APT group
While tracking the activities of the Tomiris threat actor, we identified new malicious operations that began in early 2025. These attacks targeted foreign ministries, intergovernmental organizations, and government entities, demonstrating a focus on high-value political and diplomatic...
CVE-2025-59372
creationtimestamp| type| source ---|---|--- 2025-11-27 18:57:29+00:00| seen| https://t.me/notlukatsky/7751...
CVE-2025-65862
creationtimestamp| type| source ---|---|--- 2025-11-27 02:04:26+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/60896...
CVE-2025-13068
The Telegram Bot & Channel plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Telegram username in all versions up to, and including, 4.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web...
PT-2025-48188
Name of the Vulnerable Software and Affected Versions Revive Adserver affected versions not specified Description The software contains a flaw in username validation that allows anyone to register look-alike accounts and impersonate administrators. This issue persists after a previous fix for...
CVE-2025-34322
creationtimestamp| type| source ---|---|--- 2025-11-25 21:27:03+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/60787 2025-11-26 03:00:07+00:00| published-proof-of-concept| Telegram/MnfDtTO7wJ3H0uNrhjZAmV8vXhG2hG4Vq-UJgHVKnfrpk...
CVE-2025-34323
creationtimestamp| type| source ---|---|--- 2025-11-25 21:27:03+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/60787 2025-11-26 03:00:07+00:00| published-proof-of-concept| Telegram/MnfDtTO7wJ3H0uNrhjZAmV8vXhG2hG4Vq-UJgHVKnfrpk...
WordPress Telegram Bot & Channel plugin <= 4.1 - Unauthenticated Stored Cross-Site Scripting via Telegram Username vulnerability
Unauthenticated Stored Cross-Site Scripting via Telegram Username vulnerability discovered by venom5iix in WordPress Plugin Telegram Bot & Channel versions = 4.1...
CVE-2025-13068
The Telegram Bot & Channel plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Telegram username in all versions up to, and including, 4.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web...
CVE-2025-13068 Telegram Bot & Channel <= 4.1 - Unauthenticated Stored Cross-Site Scripting via Telegram Username
The Telegram Bot & Channel plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Telegram username in all versions up to, and including, 4.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web...
EUVD-2025-199534
The Telegram Bot & Channel plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Telegram username in all versions up to, and including, 4.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web...
CVE-2025-13068
CVE-2025-13068 concerns the WordPress plugin Telegram Bot & Channel . The vulnerability is an unauthenticated Stored Cross-Site Scripting (XSS) via the Telegram username, affecting all versions up to and including 4.1 due to insufficient input sanitization and output escaping. Wordfence details t...
CVE-2025-13068 Telegram Bot & Channel <= 4.1 - Unauthenticated Stored Cross-Site Scripting via Telegram Username
The Telegram Bot & Channel plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Telegram username in all versions up to, and including, 4.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web...
