88289 matches found
CVE-2025-5626
creationtimestamp| type| source ---|---|--- 2025-06-05 02:00:22+00:00| published-proof-of-concept| Telegram/euXhbHsGx015k54gDP7v4lysNN30IVq03uDJTCPpV2PP448...
Demystifying Myth Stealer: A Rust Based InfoStealer
Demystifying Myth Stealer: A Rust Based InfoStealer By Niranjan Hegde, Vasantha Lakshmanan Ambasankar and Adarsh S · June 5, 2025 Introduction During regular proactive threat hunting, the Trellix Advanced Research Center identified a fully undetected infostealer malware sample written in Rust. Up...
Malicious PyPI, npm, and Ruby Packages Exposed in Ongoing Open-Source Supply Chain Attacks
Several malicious packages have been uncovered across the npm, Python, and Ruby package repositories that drain funds from cryptocurrency wallets, erase entire codebases after installation, and exfiltrate Telegram API tokens, once again demonstrating the variety of supply chain threats lurking in...
Malicious PyPI, npm, and Ruby Packages Exposed in Ongoing Open-Source Supply Chain Attacks
Several malicious packages have been uncovered across the npm, Python, and Ruby package repositories that drain funds from cryptocurrency wallets, erase entire codebases after installation, and exfiltrate Telegram API tokens, once again demonstrating the variety of supply chain threats lurking in...
CVE-2025-5576
creationtimestamp| type| source ---|---|--- 2025-06-04 08:33:58+00:00| published-proof-of-concept| Telegram/JORd5OezDY3YsiR-DAhtuPFE5h5v2OCRMz2Z1Evvjd5Hz4...
CVE-2025-5560
creationtimestamp| type| source ---|---|--- 2025-06-04 04:30:25+00:00| published-proof-of-concept| Telegram/5MAouqYuwJRn-HWB5GQvxH0ZU-Ppluq5BBjqGoXd7N0SAe8...
GHSA-8CJ5-5RVV-WF4V
creationtimestamp| type| source ---|---|--- 2025-06-02 20:00:25+00:00| published-proof-of-concept| Telegram/M9ruxIqfssiRmufIiVDPBVG9309mAKgr9KyLQBBOZAkMKU...
CVE-2025-1246
creationtimestamp| type| source ---|---|--- 2025-06-02 15:01:46+00:00| seen| Telegram/7xIhyJO7ZWQeZYOmdLINMZ9FIiDPF6RfLVlvHuHgi-enE...
CVE-2025-0819
creationtimestamp| type| source ---|---|--- 2025-06-02 15:01:46+00:00| seen| Telegram/7xIhyJO7ZWQeZYOmdLINMZ9FIiDPF6RfLVlvHuHgi-enE...
GHSA-J972-J939-P2V3
creationtimestamp| type| source ---|---|--- 2025-06-02 12:01:30+00:00| published-proof-of-concept| Telegram/rXYL1lXWkEU6X4s-B12vmJDiUkp3J5RpkWN8Rf8Wlc0XZWI...
GHSA-JVVH-FP57-2P32
creationtimestamp| type| source ---|---|--- 2025-06-02 12:01:30+00:00| published-proof-of-concept| Telegram/rXYL1lXWkEU6X4s-B12vmJDiUkp3J5RpkWN8Rf8Wlc0XZWI...
CVE-2025-5434
creationtimestamp| type| source ---|---|--- 2025-06-02 08:01:07+00:00| published-proof-of-concept| Telegram/MNJNzGAF9bpm-8pO2mYbfB9j1qFTK3WJrzpGubMjm4ci4gI...
CVE-2025-5236
The CVE concerns the NinjaTeam Chat for Telegram WordPress plugin (≤1.1). The root cause is insufficient input sanitization and output escaping for the username parameter, leading to Stored Cross-Site Scripting. Exploitation requires an authenticated attacker with Contributor-level access or high...
WordPress plugin NinjaTeam Chat for Telegram has a cross-site scripting vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...
CVE-2025-5236: Improper Neutralization of Input During Web Page Generation
The NinjaTeam Chat for Telegram plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘username’ parameter in all versions up to, and including, 1.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...
WordPress NinjaTeam Chat for Telegram plugin <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via username Parameter vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting via username Parameter vulnerability discovered by Peter Thaleikis in WordPress Plugin NinjaTeam Chat for Telegram versions = 1.1...
CVE-2025-46204
creationtimestamp| type| source ---|---|--- 2025-05-29 19:36:32+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/38577...
From Infection to Access: A 24-Hour Timeline of a Modern Stealer Campaign
Stealer malware no longer just steals passwords. In 2025, it steals live sessions—and attackers are moving faster and more efficiently than ever. While many associate account takeovers with personal services, the real threat is unfolding in the enterprise. Flare's latest research, The Account and...
From Infection to Access: A 24-Hour Timeline of a Modern Stealer Campaign
Stealer malware no longer just steals passwords. In 2025, it steals live sessions—and attackers are moving faster and more efficiently than ever. While many associate account takeovers with personal services, the real threat is unfolding in the enterprise. Flare’s latest research, The Account and...