BIT-MOODLE-2024-34005 moodle: authenticated LFI risk in some misconfigured shared hosting environments via modified mod_data backup

In a shared hosting environment that has been misconfigured to allow access to other users' content, a Moodle user with both access to restore database activity modules and direct access to the web server outside of the Moodle webroot could execute a local file include...

BIT-MOODLE-2024-28593

The Chat activity in Moodle 4.3.3 allows students to insert a potentially unwanted HTML A element or IMG element, or HTML content that leads to a performance degradation. NOTE: the vendor's UsingChat page says "If you know some HTML code, you can use it in your text to do things like insert image...

MAL-2025-3562 Malicious code in minicom-support-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9fe5a32eef884912d0aef63ac3eaee111adfe5f86d5aa4b762a728f9d6f8c7e5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

The remote desktop puzzle. DFIR techniques for dealing with RDP Bitmap Cache

TL;DR How RDP Bitmap Cache can reveal user activity No RDP logs? How can we reconstruct RDP activity? How cached tiles can uncover insider threats Introduction A lot of people are aware of RDP and what its functions are. It’s known for providing remote access and making life easier for...

Development of an Adapter for Analyzing and Protecting Machine Learning Models from Competitive Activity in the Networks Services

Due to the increasing number of tasks that are solved on remote servers, identifying and classifying traffic is an important task to reduce the load on the server. There are various methods for classifying traffic. This paper discusses machine learning models for solving this problem. However, su...

ASB-A-322159724

In clearAllowBgActivityStarts of PendingIntentRecord.java, there is a possible way for an application to launch an activity from the background due to BAL Bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

ASB-A-232799171

In RemoteSpeechRecognitionService of RemoteSpeechRecognitionService.java, there is a possible way to launch an activity from the background due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not...

MAL-2025-3380 Malicious code in besec (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 8f4637511caaa8fbdf877671d4abfc117aa6ef86436b35652d7d1a842ac558a6 The OpenSSF Package Analysis project identified 'besec' @ 1.0.0 npm as malicious. It is considered malicious because: - The package communicates...

Malicious code in freo-design-system (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 8745e789b7b101fb7ede2f6f26567a39b6ec9522c2f6cad7f182098661442ced The OpenSSF Package Analysis project identified 'freo-design-system' @ 1.0.4 npm as malicious. It is considered malicious because: - The package...

CVE-2024-56156

creationtimestamp| type| source ---|---|--- 2025-04-25 17:19:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnnq76r3yt24 2025-04-25 19:11:04+00:00| seen| https://t.me/cvedetector/23761 2025-04-25 21:36:02+00:00| seen|...

CVE-2025-31006

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in arete-it Activity Reactions For Buddypress activity-reactions-for-buddypress allows Reflected XSS.This issue affects Activity Reactions For Buddypress: from n/a through = 1.0.22...

CVE-2025-2238

creationtimestamp| type| source ---|---|--- 2025-04-25 07:07:13+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13386 2025-04-25 07:07:36+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lnmnxvjn6m52 2025-04-25 08:20:18+00:00| seen|...

CVE-2025-3775

creationtimestamp| type| source ---|---|--- 2025-04-25 05:08:58+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13378 2025-04-25 05:42:36+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lnmiyzlvwvb2 2025-04-25 09:09:17+00:00| seen|...

CVE-2025-46547

creationtimestamp| type| source ---|---|--- 2025-04-25 03:06:48+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13371 2025-04-25 04:04:40+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lnmdowftehn2 2025-04-25...

Mattermost Improper Access Control Vulnerability

Mattermost is an open source collaboration platform from Mattermost, Inc. in the United States. Mattermost suffers from an Improper Access Control vulnerability that stems from improper access control and can be exploited by an attacker to retrieve user activity logs...

CVE-2025-3749

creationtimestamp| type| source ---|---|--- 2025-04-24 23:09:23+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13365 2025-04-25 03:18:14+00:00| seen| https://t.me/cvedetector/23714...

CVE-2025-1294

creationtimestamp| type| source ---|---|--- 2025-04-24 23:09:19+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13364 2025-04-25 01:30:07+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lnm2hdsoapq2 2025-04-25 03:18:21+00:00| seen|...

Malicious code in echo-color (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3f49c42944e8358945b0e71cfb98fe50999b199d5f3e12802e35b84c9893c5c7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-30409

creationtimestamp| type| source ---|---|--- 2025-04-24 14:09:03+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114393333303430166 2025-04-24 14:16:43+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lnkt4hn5ob22 2025-04-24...

ALBEDO Telecom Net.Time - PTP/NTP clock

RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to transmit passwords over unencrypted connections, resulting in the product becoming vulnerable to interception. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of...