Lucene search
+L

193 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2025/08/14 6:52 p.m.3 views

Malicious code in test-mlw2-viper-hoppy (npm)

The package test-mlw2-viper-hoppy was found to contain malicious code...

7AI score
SaveExploits0
OSV
OSV
added 2025/08/14 6:52 p.m.2 views

MAL-2025-36577 Malicious code in test-mlw2-viper-hoppy (npm)

The package test-mlw2-viper-hoppy was found to contain malicious code...

7.2AI score
SaveExploits0
RedhatCVE
RedhatCVE
added 2025/05/22 5:36 p.m.11 views

CVE-2020-9756

Patriot Viper RGB Driver 1.1 and prior exposes IOCTL and allows insufficient access control. The IOCTL Codes 0x80102050 and 0x80102054 allows a local user with low privileges to read/write 1/2/4 bytes from or to an IO port. This could be leveraged in a number of ways to ultimately run code with...

7.8CVSS6.8AI score0.00506EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/05/22 9:16 a.m.15 views

CVE-2019-19452

A buffer overflow was found in Patriot Viper RGB through 1.1 when processing IoControlCode 0x80102040. Local attackers including low integrity processes can exploit this to gain NT AUTHORITY\SYSTEM privileges...

7.8CVSS7.5AI score0.00507EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2025/01/01 12:0 a.m.4 views

PT-2025-42407

Name of the Vulnerable Software and Affected Versions github.com/go-viper/mapstructure/v2 affected versions not specified Description A flaw exists in the field processing component that utilizes the mapstructure.WeakDecode function. The issue stems from improper neutralization of output data sen...

5.4CVSS6.1AI score0.00357EPSS
SaveExploits0References299
Securelist
Securelist
added 2024/11/28 10:0 a.m.24 views

APT trends report Q3 2024

Kaspersky's Global Research and Analysis Team GReAT has been releasing quarterly summaries of advanced persistent threat APT activity for over seven years now. Based on our threat intelligence research, these summaries offer a representative overview of what we've published and discussed in more...

7.8CVSS7.5AI score0.11977EPSS
SaveExploits2
Patchstack
Patchstack
added 2024/11/18 9:17 a.m.6 views

WordPress Ultimate Classified Listings plugin <= 1.7 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by theviper17 Patchstack Alliance in WordPress Plugin Ultimate Classified Listings versions = 1.7...

7.5CVSS7AI score0.00558EPSS
SaveExploits0Affected Software1
HackRead
HackRead
added 2024/07/22 4:59 p.m.9 views

Chinese Vigorish Viper Exploits DNS and Football Sponsorships for Illegal Gambling

Unmasking Vigorish Viper: The Elusive Cybercrime Network Behind Illegal Gambling. Learn how this sophisticated group uses clever DNS…...

7.3AI score
SaveExploits0
The Hacker News
The Hacker News
added 2024/07/22 1:5 p.m.21 views

Experts Uncover Chinese Cybercrime Network Behind Gambling and Human Trafficking

--- The relationship between various TDSs and DNS associated with Vigorish Viper and the final landing experience for the user A Chinese organized crime syndicate with links to money laundering and human trafficking across Southeast Asia has been using an advanced "technology suite" that runs the...

7.2AI score
SaveExploits0
Schneier on Security
Schneier on Security
added 2024/07/22 11:6 a.m.10 views

Snake Mimics a Spider

This is a fantastic video. Its an Iranian spider-tailed horned viper Pseudocerastes urarachnoides. Its tail looks like a spider, which the snake uses to fool passing birds looking for a meal...

7.3AI score
SaveExploits0
HackRead
HackRead
added 2024/06/15 5:10 p.m.20 views

Arid Viper’s AridSpy Trojan Hits Android Users in Palestine, Egypt

Android users in Egypt and Palestine beware! Arid Viper is distributing malicious third-party apps hiding the AridSpy trojan! Learn how this malware steals your data and how to protect yourself...

7.2AI score
SaveExploits0
The Hacker News
The Hacker News
added 2024/06/13 1:55 p.m.32 views

Arid Viper Launches Mobile Espionage Campaign with AridSpy Malware

The threat actor known as Arid Viper has been attributed to a mobile espionage campaign that leverages trojanized Android apps to deliver a spyware strain dubbed AridSpy. "The malware is distributed through dedicated websites impersonating various messaging apps, a job opportunity app, and a...

7.5AI score
SaveExploits0
The Hacker News
The Hacker News
added 2024/01/31 7:23 a.m.70 views

Hackers Exploiting Ivanti VPN Flaws to Deploy KrustyLoader Malware

A pair of recently disclosed zero-day flaws in Ivanti Connect Secure ICS virtual private network VPN devices have been exploited to deliver a Rust-based payload called KrustyLoader that's used to drop the open-source Sliver adversary simulation tool. The security vulnerabilities, tracked as...

9.1CVSS8.4AI score0.99999EPSS
SaveExploits23
The Hacker News
The Hacker News
added 2023/12/14 2:1 p.m.28 views

New Pierogi++ Malware by Gaza Cyber Gang Targeting Palestinian Entities

A pro-Hamas threat actor known as Gaza Cyber Gang is targeting Palestinian entities using an updated version of a backdoor dubbed Pierogi. The findings come from SentinelOne, which has given the malware the name Pierogi++ owing to the fact that it's implemented in the C++ programming language...

7.4AI score
SaveExploits0
The Hacker News
The Hacker News
added 2023/10/31 2:16 p.m.55 views

Arid Viper Targeting Arabic Android Users with Spyware Disguised as Dating App

The threat actor known as Arid Viper aka APT-C-23, Desert Falcon, or TAG-63 has been attributed as behind an Android spyware campaign targeting Arabic-speaking users with a counterfeit dating app designed to harvest data from infected handsets. "Arid Viper's Android malware has a number of featur...

6.9AI score
SaveExploits0
Talos Blog
Talos Blog
added 2023/10/31 11:0 a.m.33 views

Arid Viper disguising mobile spyware as updates for non-malicious Android applications

Since April 2022, Cisco Talos has been tracking a malicious campaign operated by the espionage-motivated Arid Viper advanced persistent threat APT group targeting Arabic-speaking Android users. In this campaign, the actors leverage custom mobile malware, also known as Android Package files APKs, ...

7AI score
SaveExploits0
The Hacker News
The Hacker News
added 2023/10/30 4:25 p.m.62 views

Pro-Hamas Hacktivists Targeting Israeli Entities with Wiper Malware

A pro-Hamas hacktivist group has been observed using a new Linux-based wiper malware dubbed BiBi-Linux Wiper, targeting Israeli entities amidst the ongoing Israeli-Hamas war. "This malware is an x64 ELF executable, lacking obfuscation or protective measures," Security Joes said in a new report...

7.2AI score
SaveExploits0
The Hacker News
The Hacker News
added 2023/04/04 10:8 a.m.5 views

Arid Viper Hacking Group Using Upgraded Malware in Middle East Cyber Attacks

The threat actor known as Arid Viper has been observed using refreshed variants of its malware toolkit in its attacks targeting Palestinian entities since September 2022. Symantec, which is tracking the group under its insect-themed moniker Mantis, said the adversary is "going to great lengths to...

7AI score
SaveExploits0
The Hacker News
The Hacker News
added 2023/04/04 10:8 a.m.40 views

Arid Viper Hacking Group Using Upgraded Malware in Middle East Cyber Attacks

The threat actor known as Arid Viper has been observed using refreshed variants of its malware toolkit in its attacks targeting Palestinian entities since September 2022. Symantec, which is tracking the group under its insect-themed moniker Mantis, said the adversary is "going to great lengths to...

7AI score
SaveExploits0
The Hacker News
The Hacker News
added 2022/05/02 1:39 p.m.28 views

Chinese "Override Panda" Hackers Resurface With New Espionage Attacks

A Chinese state-sponsored espionage group known as Override Panda has resurfaced in recent weeks with a new phishing attack with the goal of stealing sensitive information. "The Chinese APT used a spear-phishing email to deliver a beacon of a Red Team framework known as 'Viper,'" Cluster25 said i...

0.1AI score
SaveExploits0
Rows per page
Query Builder