CVE-2025-56527

creationtimestamp| type| source ---|---|--- 2025-11-14 15:00:07+00:00| published-proof-of-concept| Telegram/JTPMSiIeITdIAco4zqe7AJCP4y0ey6zBic2rAw1xqSNEfqQ...

CVE-2025-56526

creationtimestamp| type| source ---|---|--- 2025-11-14 15:00:07+00:00| published-proof-of-concept| Telegram/JTPMSiIeITdIAco4zqe7AJCP4y0ey6zBic2rAw1xqSNEfqQ...

CVE-2025-9816

creationtimestamp| type| source ---|---|--- 2025-11-13 07:28:43+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/59507 2025-11-13 15:00:08+00:00| published-proof-of-concept| Telegram/d8wD4nyiI6OV0OXzhOtZYCLbRAqpkWgPekubzfScCoXm1wI...

CVE-2025-13027

creationtimestamp| type| source ---|---|--- 2025-11-12 21:26:07+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/59453 2025-11-13 03:00:07+00:00| published-proof-of-concept| Telegram/X2X-Jjql1PrVxLlHxfaFmPla7HtOFqy0YqTW9jtSVfdBk8 2026-04-13 17:59:50+00:00| seen|...

CVE-2025-63830

creationtimestamp| type| source ---|---|--- 2025-11-12 15:00:09+00:00| published-proof-of-concept| Telegram/TnTlInxxzNpt0OgbsDLOj6rIodSNCMGeXkGWTk3FIFq8dbI...

CVE-2024-4890

creationtimestamp| type| source ---|---|--- 2025-11-12 15:00:09+00:00| published-proof-of-concept| Telegram/TnTlInxxzNpt0OgbsDLOj6rIodSNCMGeXkGWTk3FIFq8dbI...

CVE-2025-31931

creationtimestamp| type| source ---|---|--- 2025-11-11 23:12:13+00:00| published-proof-of-concept| Telegram/qk0xbo4HJ4SgyIuAy9GGDmkgHDhpw2mchBX-MgrEMQAw...

How credentials get stolen in seconds, even with a script-kiddie-level phish

This attempt to phish credentials caught our attention, mostly because of its front-end simplicity. Even though this is a script-kiddie-level type of attack, we figured it was worth writing up—precisely because it’s so easy to follow what they're up to. The email is direct and to the point. Not a...

CVE-2025-55449

creationtimestamp| type| source ---|---|--- 2025-11-11 13:12:22+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/59265 2025-11-11 21:00:05+00:00| published-proof-of-concept| Telegram/shWj4yVZfYZ8SMMOaybmV9yApMn3mNDIaTU298AMpVdB8 2025-12-10 05:34:39+00:00| published-proof-of-concept|...

Android Trojan 'Fantasy Hub' Malware Service Turns Telegram Into a Hub for Hackers

Cybersecurity researchers have disclosed details of a new Android remote access trojan RAT called Fantasy Hub that's sold on Russian-speaking Telegram channels under a Malware-as-a-Service MaaS model. According to its seller, the malware enables device control and espionage, allowing threat actor...

CVE-2025-62047

creationtimestamp| type| source ---|---|--- 2025-11-11 00:03:53+00:00| seen| https://t.me/z4haxtool/100 2026-08-28 01:00:04+00:00| published-proof-of-concept| Telegram/mFsdMG97adYKYDJopKSR1bN5r2Cn9EMFX6R11Xnr98kew30 2026-08-29 00:00:32+00:00| published-proof-of-concept|...

Malicious Package

Overview telegram-travis-api is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

EUVD-2025-41742

Malicious code in telegram-travis-api npm...

MAL-2025-50731 Malicious code in telegram-travis-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f21c0fea0fd00ecd7a983e99a6525746ac36f46a54288cb02a5c9aa852f2d4ac The package telegram-travis-api was found to contain malicious code. Source: ghsa-malware...

Malicious code in telegram-travis-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f21c0fea0fd00ecd7a983e99a6525746ac36f46a54288cb02a5c9aa852f2d4ac The package telegram-travis-api was found to contain malicious code. Source: ghsa-malware...

CVE-2025-46387

creationtimestamp| type| source ---|---|--- 2025-11-07 13:00:56+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/58706...

CVE-2025-61299

creationtimestamp| type| source ---|---|--- 2025-11-07 05:43:37+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/58649 2025-11-07 09:00:04+00:00| published-proof-of-concept| Telegram/rxBXc7mJGGU5sBhvwkQkmojEU4Xu3I8--yJupvnllAH1D4...

CVE-2025-56643

creationtimestamp| type| source ---|---|--- 2025-11-06 18:54:18+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/58593 2025-11-07 03:00:06+00:00| published-proof-of-concept| Telegram/Z22ddpILY-yeUUVWiXwyxi9IfQjGUAfHXsS4qd56wYck-To...

Cavalry Werewolf Hit Russian Government with New ShellNET Backdoor

Doctor Web uncovers a targeted cyberattack on a Russian government body by the Cavalry Werewolf group using a new ShellNET backdoor and Telegram-based control...

CVE-2020-35667

creationtimestamp| type| source ---|---|--- 2025-11-05 21:00:04+00:00| exploited| Telegram/QVvFPeHcOZrMwVaFo1uhjDTZRvYrKaEOPoiNmt5Stzg9hE 2026-06-19 12:45:48+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/e616575a-e23f-4bb0-857b-55265aff27c5...