CVE-2025-30193

creationtimestamp| type| source ---|---|--- 2025-05-20 11:18:38+00:00| seen| https://bsky.app/profile/powerdns.bsky.social/post/3lplxoi5dlk2e 2025-05-20 11:18:55+00:00| seen| https://bsky.app/profile/powerdns.bsky.social/post/3lplxozplrk2e 2025-05-20 11:40:19+00:00| seen|...

AutomationDirect MB-Gateway

RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to make configuration changes, disrupt operations, or achieve arbitrary code execution. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this...

ABUP IoT Cloud Platform

RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to access device profiles for which they are not authorized. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability, such as: Minimize...

CVE-2025-3079

creationtimestamp| type| source ---|---|--- 2025-05-20 00:10:11+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lpksd26u73v2 2025-05-20 00:43:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpku6jj7o32j...

CVE-2025-4929

creationtimestamp| type| source ---|---|--- 2025-05-19 11:44:22+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lpjin6b6pym2 2025-05-19 13:13:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpjnnkfbgr24...

CVE-2025-4945

A flaw was found in the cookie parsing logic of the libsoup HTTP library, used in GNOME applications and other software. The vulnerability arises when processing the expiration date of cookies, where a specially crafted value can trigger an integer overflow. This may result in undefined behavior,...

Malicious code in moonpay-sign (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2b5de9ec184be265177d407487382fe8b9fb3b0a9b975b1d2570a06d6c054c70 Any computer that has this package installed or running should be considered...

CVE-2025-4890

creationtimestamp| type| source ---|---|--- 2025-05-18 19:04:14+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16769 2025-05-18 19:24:26+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lphrv5p7gvy2 2025-05-18...

CVE-2025-4891

creationtimestamp| type| source ---|---|--- 2025-05-18 19:04:13+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16768 2025-05-18 19:24:25+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lphruxtfqxe2 2025-05-18...

CVE-2025-4886

creationtimestamp| type| source ---|---|--- 2025-05-18 16:54:22+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lphjibz76cc2 2025-05-18 17:12:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lphkjyigtg2e...

CVE-2025-4884

creationtimestamp| type| source ---|---|--- 2025-05-18 15:55:07+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lphg6rv7yz72 2025-05-18 17:12:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lphkjypayx2p...

MAL-2025-3939 Malicious code in spingroup (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c39f718dbb6417a92610be6705edea190e4adbccbe0a2e80ede465e0a307c917 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-4867

creationtimestamp| type| source ---|---|--- 2025-05-18 09:41:07+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lpgrbxq7ayb2 2025-05-18 13:08:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lph4vdluzh2v...

MAL-2025-3935 Malicious code in eslint-plugin-i18n-strings (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 52f5d25719716952625ab6fabacd4ccb2743e7066584b9b76cf5c198a0ebfc66 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-4852

creationtimestamp| type| source ---|---|--- 2025-05-18 04:32:51+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lpg7xzunvkn2 2025-05-18 05:08:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpgc2cr7c42t 2025-05-19...

CVE-2025-4858

creationtimestamp| type| source ---|---|--- 2025-05-18 04:32:07+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lpg7xhjrfqg2 2025-05-18 05:08:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpgc2ckot52o 2025-05-19...

CVE-2025-4841

creationtimestamp| type| source ---|---|--- 2025-05-18 00:39:58+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lpfsznapxpb2 2025-05-18 01:13:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpfuvqzygv2s...

Malicious code in novacredit-global2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e08d91b667c736598ff5998d53a62bc833b8a740b0cd678a4ff9b2a33c99866a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-47948

creationtimestamp| type| source ---|---|--- 2025-05-17 12:33:11+00:00| published-proof-of-concept| https://github.com/cocotais/cocotais-bot/security/advisories/GHSA-mj2c-8hxf-ffvq 2025-05-17 20:31:28+00:00| seen|...

MAL-2025-3930 Malicious code in blahblahblah-definitely-not-a-real-package-name (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2200fcdc37007fa010dea283e42096c6211571af64a48492a2fe0b550a39ac62 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...