87822 matches found
Scam Alert: Impersonation of Akamai on Telegram
Learn about a persisting scam on Telegram that involves scammers who are pretending to be from Akamai and requesting money...
WordPress plugin Telegram Bot & Channel 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting...
PT-2025-47982
Name of the Vulnerable Software and Affected Versions Telegram Bot & Channel plugin for WordPress versions prior to 4.2 Description The Telegram Bot & Channel plugin for WordPress is susceptible to Stored Cross-Site Scripting through the Telegram username. Insufficient input sanitization and outp...
CVE-2025-13068: Improper Neutralization of Input During Web Page Generation
The Telegram Bot & Channel plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Telegram username in all versions up to, and including, 4.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web...
CVE-2025-65669
creationtimestamp| type| source ---|---|--- 2025-11-24 21:00:05+00:00| published-proof-of-concept| Telegram/Du0MdwVxk-ma0lPRgOSkwKDcmvhNbHj6kmNSaYCuL7u0A...
CVE-2025-65672
creationtimestamp| type| source ---|---|--- 2025-11-24 21:00:05+00:00| published-proof-of-concept| Telegram/Du0MdwVxk-ma0lPRgOSkwKDcmvhNbHj6kmNSaYCuL7u0A...
CVE-2025-38678
creationtimestamp| type| source ---|---|--- 2025-11-24 15:00:07+00:00| published-proof-of-concept| Telegram/5Go4y9Sp59a8HRsoMaTj0X-e6nFTkvRgJdqk6vUB2AgWKv0 2025-11-27 07:58:22+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/60913...
Malicious code in speed-testing-vps (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 227b3ee25e084b57a160b7287f80a8ab8da0559184c81b5e9cae1d03941ca51b The package, distinguished as a speed testing or typosquatted Telegram library, contains a Telegram bot to perform remote control of the computer --- Category:...
MAL-2025-191875 Malicious code in speed-testing-vps (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 227b3ee25e084b57a160b7287f80a8ab8da0559184c81b5e9cae1d03941ca51b The package, distinguished as a speed testing or typosquatted Telegram library, contains a Telegram bot to perform remote control of the computer --- Category:...
Malicious code in aiogram-msgeffect (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 edd5a99e6d1cebb47e713991f08b50dee4b5bf93ae487f6adc446318ccdba6e7 Importing the module starts obfuscated code which then look for data related to some Telegram clients and attempt to exfiltrate them --- Category: MALICIOUS -...
MAL-2025-191674 Malicious code in aiogram-msgeffect (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 edd5a99e6d1cebb47e713991f08b50dee4b5bf93ae487f6adc446318ccdba6e7 Importing the module starts obfuscated code which then look for data related to some Telegram clients and attempt to exfiltrate them --- Category: MALICIOUS -...
Malicious code in tgeffect (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 e254217ac113edcc1914bdfcda06509137ceed6a7441b3c846653d769335bcaa Importing the module starts obfuscated code which then look for data related to some Telegram clients and attempt to exfiltrate them --- Category: MALICIOUS -...
MAL-2025-191897 Malicious code in tgeffect (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 e254217ac113edcc1914bdfcda06509137ceed6a7441b3c846653d769335bcaa Importing the module starts obfuscated code which then look for data related to some Telegram clients and attempt to exfiltrate them --- Category: MALICIOUS -...
New Sturnus Android Malware Reads WhatsApp, Telegram, Signal Chats via Accessibility Abuse
Sturnus, an advanced Android banking trojan, has been discovered by ThreatFabric. Learn how this malware bypasses end-to-end encryption on Signal and WhatsApp, steals bank credentials using fake screens, and executes fraudulent transactions...
Malicious code in kdewebhelper (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 da8701a407522875f63d2aaa28d27194fe8e2faa4d7782fd66639f224ae62dcd Importing the module connects to a Telegram bot and provides its operator with abilities to execute commands, exfiltrate and encrypt data. The target group see...
MAL-2025-191772 Malicious code in kdewebhelper (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 da8701a407522875f63d2aaa28d27194fe8e2faa4d7782fd66639f224ae62dcd Importing the module connects to a Telegram bot and provides its operator with abilities to execute commands, exfiltrate and encrypt data. The target group see...
CVE-2025-7892
creationtimestamp| type| source ---|---|--- 2025-11-20 16:16:22+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/60310 2025-11-20 21:00:05+00:00| published-proof-of-concept| Telegram/nY5-0lCVx8RKsRPrkDgSLkXo8AbHt3usOoKy9LAJ3yK8Xw...
CVE-2025-63914
creationtimestamp| type| source ---|---|--- 2025-11-20 02:11:35+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/60236 2025-11-20 09:00:14+00:00| published-proof-of-concept| Telegram/GmvoRp-ZTeQCHWxtyW7HXEFoLo07FBSobpKiaRjeTfDZGXg...
CVE-2025-60013
creationtimestamp| type| source ---|---|--- 2025-11-17 09:00:05+00:00| published-proof-of-concept| Telegram/UnjGk9rdU7KCG9XhKZvZ0oBS06sJOxv4T1D2OL6H5tBY5Y 2025-12-11 09:00:06+00:00| published-proof-of-concept| Telegram/17qqZOikrNpW0MjzZOaR1ib-S-9-y3AFNN436OHVf8p3hI...