Malicious Package

Overview bigmathex is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

CVE-2025-69016

creationtimestamp| type| source ---|---|--- 2025-12-30 13:35:32+00:00| seen| https://gist.github.com/Darkcrai86/9bcc27e97a7701b6cd9942a605d8a026...

CVE-2025-14280

creationtimestamp| type| source ---|---|--- 2025-12-29 21:01:11+00:00| seen| https://gist.github.com/Darkcrai86/39c00cb5ff2fd8affa2ecb8b7f90a438...

CVE-2025-71322

creationtimestamp| type| source ---|---|--- 2025-12-29 15:26:37+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-hgrh-qx5j-jfwx 2026-06-17 18:11:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moivz5yac32i...

Critical 0day flaw Exposes 70k XSpeeder Devices as Vendor Ignores Alert

Researchers reveal CVE-2025-54322, a critical unpatched flaw in XSpeeder networking gear found by AI agents. 70,000 industrial and branch devices are exposed...

CVE-2025-15182

creationtimestamp| type| source ---|---|--- 2025-12-29 12:13:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mb4sq7ubr72e...

CVE-2025-2307

creationtimestamp| type| source ---|---|--- 2025-12-25 23:26:49+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3matwi5dmfj2f 2025-12-25 23:28:14+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3matwkqyuyf22...

CVE-2025-15084

creationtimestamp| type| source ---|---|--- 2025-12-25 22:27:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3matt64zryf2e 2025-12-26 13:37:09+00:00| seen| https://infosec.exchange/users/vuldb/statuses/115786136214380178...

EUVD-2025-205380

Malicious code in aiogram-sever-patch PyPI...

CVE-2025-15075

creationtimestamp| type| source ---|---|--- 2025-12-25 07:16:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3masabqone72x...

CVE-2025-68532

creationtimestamp| type| source ---|---|--- 2025-12-24 13:44:50+00:00| seen| https://gist.github.com/Darkcrai86/7d8d18a8290f827548c14f8abe24cbb3...

CVE-2025-68614

LibreNMS is an auto-discovering PHP/MySQL/SNMP based network monitoring tool. Prior to version 25.12.0, the Alert Rule API is vulnerable to stored cross-site scripting. Alert rules can be created or updated via LibreNMS API. The alert rule name is not properly sanitized, and can be used to inject...

Malicious Package

Overview mw-proto-ts is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorshi...

EUVD-2025-204770

LibreNMS Alert Rule API Cross-Site Scripting Vulnerability...

LibreNMS Alert Rule API Cross-Site Scripting Vulnerability

Please find POC file here https://trendmicro-my.sharepoint.com/:u:/p/kholoudaltookhy/IQCfcnOE5ykQSb6Fm-HFI872AZzeIJxU-3aDk0jheXNE?e=zkN76d ZDI-CAN-28575: LibreNMS Alert Rule API Cross-Site Scripting Vulnerability -- CVSS ----------------------------------------- 4.3:...

GHSA-C89F-8G7G-59WJ LibreNMS Alert Rule API Cross-Site Scripting Vulnerability

Please find POC file here https://trendmicro-my.sharepoint.com/:u:/p/kholoudaltookhy/IQCfcnOE5ykQSb6Fm-HFI872AZzeIJxU-3aDk0jheXNE?e=zkN76d ZDI-CAN-28575: LibreNMS Alert Rule API Cross-Site Scripting Vulnerability -- CVSS ----------------------------------------- 4.3:...

CVE-2025-14000

creationtimestamp| type| source ---|---|--- 2025-12-23 13:09:28+00:00| seen| https://gist.github.com/Darkcrai86/38b88dd0bbe8f31b6abf8de4001a191e 2025-12-23 13:34:33+00:00| seen| https://gist.github.com/Darkcrai86/319741ab43d82cddfa549145e264c93b...

Assessing SIEM effectiveness

A SIEM is a complex system offering broad and flexible threat detection capabilities. Due to its complexity, its effectiveness heavily depends on how it is configured and what data sources are connected to it. A one-time SIEM setup during implementation is not enough: both the organization's...

MAL-2025-192877 Malicious code in tdm-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8968a0a78c56b7d557376180f0c517c04d41f0d5679431744489211dd82d4aae The package tdm-react was found to contain malicious code. Source: ossf-package-analysis...

MAL-2025-192866 Malicious code in sturdyfetch15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8efa01bf8ae7c64fda2970ecad836d73ed8625102c4a109ea1bff1e09c785057 The package sturdyfetch15 was found to contain malicious code...