EUVD-2012-1659

Malware in sbrugna...

EUVD-2020-25524

Malware in sbrugna...

EUVD-2016-4044

Malware in sbrugna...

EUVD-2018-14931

Malware in sbrugna...

Characterizing Event-Themed Malicious Web Campaigns: A Case Study on War-Themed Websites

Cybercrimes such as online scams and fraud have become prevalent. Cybercriminals often abuse various global or regional events as themes of their fraudulent activities to breach user trust and attain a higher attack success rate. These attacks attempt to manipulate and deceive innocent people int...

CVE-2025-34162

An unauthenticated SQL injection vulnerability exists in the GetLyfsByParams endpoint of Bian Que Feijiu Intelligent Emergency and Quality Control System, accessible via the /AppService/BQMedical/WebServiceForFirstaidApp.asmx interface. The backend fails to properly sanitize user-supplied input i...

Malicious code in aid-mercury (npm)

The package aid-mercury was found to contain malicious code...

MAL-2025-14174 Malicious code in aid-mercury (npm)

The package aid-mercury was found to contain malicious code...

Linux Distros Unpatched Vulnerability : CVE-2021-47282

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: spi: bcm2835: Fix out-of-bounds access with more than 4 slaves Commit 571e31fa60b3 spi:...

The US Is Building a One-Stop Shop for Buying Your Data

Plus: A mysterious hacking group’s secret client is exposed, Signal takes a swipe at Microsoft Recall, Russian hackers target security cameras to spy on aid to Ukraine, and more...

Russian Hackers Exploit Email and VPN Vulnerabilities to Spy on Ukraine Aid Logistics

Russian cyber threat actors have been attributed to a state-sponsored campaign targeting Western logistics entities and technology companies since 2022. The activity has been assessed to be orchestrated by APT28 aka BlueDelta, Fancy Bear, or Forest Blizzard, which is linked to the Russian General...

UK Legal Aid Agency Hit by Cyberattack, Sensitive Data Stolen

The UK Legal Aid Agency has suffered a major cyberattack, with “significant” sensitive data, including criminal records, stolen.…...

Fake Student Fraud in Community Colleges

Reporting on the rise of fake students enrolling in community college courses: The bots' goal is to bilk state and federal financial aid money by enrolling in classes, and remaining enrolled in them, long enough for aid disbursements to go out. They often accomplish this by submitting AI-generate...

PHPGurukul Human Metapneumovirus Testing Management System 注入漏洞

Human Metapneumovirus Testing Management System is a human subpneumovirus testing management system. The Human Metapneumovirus Testing Management System suffers from a SQL injection vulnerability that originates from a lack of validation of externally-entered SQL statements in the parameter...

CVE-2025-0525

In affected versions of Octopus Server the preview import feature could be leveraged to identify the existence of a target file. This could provide an adversary with information that may aid in further attacks against the server...

Itechscripts School Management Software 注入漏洞

Itechscripts School Management Software is a campus management software. An injection vulnerability exists in Itechscripts School Management Software version 2.75, which stems from the parameter aid in the file /notice-edit.php that can lead to SQL injection...

PT-2025-1328 · Itechscripts · Itechscripts School Management

Name of the Vulnerable Software and Affected Versions: Itechscripts School Management Software version 2.75 Description: A critical issue has been found in the software, affecting an unknown part of the /notice-edit.php file. The manipulation of the aid argument leads to SQL injection. It is...

@adaliszk/qwik (>=1.5.1 <=1.5.5), @aid-on/qwiks (>=0.1.2 <=0.1.4) +34 more potentially affected by CVE-2024-41677 via @builder.io/qwik (>=0.15.2 <=1.4.5)

@builder.io/qwik NPM version =0.15.2, =1.5.1, =0.1.2, =0.0.1-beta.1, =0.0.1, =0.0.1-rc.0, =0.0.1-rc.0, =0.0.1-rc.0, =0.0.1, =0.0.1, =0.0.2-rc.0, =1.0.3, =1.0.7 - @melons/qwik-new-1 =0.0.1 and more Source cves: CVE-2024-41677 Source advisory: OSV:GHSA-2RWJ-7XQ8-4GX4...

PT-2024-38348 · Simple Machines · Simplemachines Smf

Name of the Vulnerable Software and Affected Versions: SimpleMachines SMF version 2.1.4 Description: A vulnerability has been found in the User Alert Read Status Handler component, specifically in the file /index.php?action=profile;u=2;area=showalerts;do=read. The manipulation of the aid argument...

PT-2024-38347 · Simple Machines · Simplemachines Smf

Name of the Vulnerable Software and Affected Versions: SimpleMachines SMF version 2.1.4 Description: A critical issue was found in the Delete User Handler component, specifically in the file /index.php?action=profile;u=2;area=showalerts;do=remove. The manipulation of the aid argument leads to...