Threat Actor Claims to Sell 15.8 Million Plain-Text PayPal Credentials

A seller named ChuckyBF is offering 15.8M PayPal logins with emails, passwords, and URLs. The data may come…...

CVE-2025-49051

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in biscia7 Hide Text Shortcode hide-text-shortcode allows Stored XSS.This issue affects Hide Text Shortcode: from n/a through = 1.1...

CVE-2025-43983

KuWFi CPF908-CP5 WEB5.0LCD20210125 devices have multiple unauthenticated access control vulnerabilities within goform/goformsetcmdprocess and goform/goformgetcmdprocess. These allow an unauthenticated attacker to retrieve sensitive information including the device admin username and password,...

Design and Implementation of a Controlled Ransomware Framework for Educational Purposes Using Flutter Cryptographic APIs on Desktop PCs and Android Devices

This study focuses on the creation and implementation of ransomware for educational purposes that leverages Python's native cryptographic APIs in a controlled environment. Additionally, an Android version of the framework is implemented using Flutter and Dart. For both versions, open-source...

0day-buffer-overflow-in-exiv2

PoC and patch for heap-buffer-overflow in PngChunk::readRawProf...

Police Bust Crypto Scammers, Nab Smishing SMS Blaster Operator

Thai police arrest SMS Blaster operator in smishing scam and bust crypto laundering gang moving $30M monthly through…...

WordPress SMS Alert Order Notifications plugin <= 3.8.5 - SQL Injection vulnerability

SQL Injection vulnerability discovered by ChuongVN in WordPress Plugin SMS Alert Order Notifications versions = 3.8.5...

Linux Distros Unpatched Vulnerability : CVE-2023-6858

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Firefox was susceptible to a heap buffer overflow in nsTextFragment due to insufficient OOM handling. This vulnerability affects Firefox ESR 115.6, Thunderbird...

Linux Distros Unpatched Vulnerability : CVE-2020-35474

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In MediaWiki before 1.35.1, the combination of Html::rawElement and Message::text leads to XSS because the definition of...

Malicious code in ladder-text-js (npm)

The package ladder-text-js was found to contain malicious code...

Malicious code in planett-go-back-to-top-text (npm)

The package planett-go-back-to-top-text was found to contain malicious code...

Malicious code in format-text (npm)

The package format-text was found to contain malicious code...

MAL-2025-29368 Malicious code in planett-go-back-to-top-text (npm)

The package planett-go-back-to-top-text was found to contain malicious code...

MAL-2025-19647 Malicious code in endgame-ui-input-text (npm)

The package endgame-ui-input-text was found to contain malicious code...

MAL-2025-24892 Malicious code in ladder-text-js (npm)

The package ladder-text-js was found to contain malicious code...

MAL-2025-36761 Malicious code in text-helper (npm)

The package text-helper was found to contain malicious code...

Malicious code in browser-html-to-rtf (npm)

The package browser-html-to-rtf was found to contain malicious code...

MAL-2025-20789 Malicious code in format-text (npm)

The package format-text was found to contain malicious code...

Malicious code in text-helper (npm)

The package text-helper was found to contain malicious code...

Malicious code in endgame-ui-input-text (npm)

The package endgame-ui-input-text was found to contain malicious code...