Malicious code in namedpkg (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in azure-iothub-service-client (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in airtime-media-monitor (PyPI)

--- -= Per source details. Do not edit below this line.=-...

WordPress plugin Popup for CF7 with Sweet Alert 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

PT-2025-35031

Name of the Vulnerable Software and Affected Versions: Popup for CF7 with Sweet Alert versions through 1.6.5 Description: The software contains a Cross-Site Request Forgery CSRF flaw. This issue allows attackers to perform actions on behalf of authenticated users without their knowledge...

Linux Distros Unpatched Vulnerability : CVE-2020-13977

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Nagios 4.4.5 allows an attacker, who already has administrative access to change the URL for JSON CGIs configuration setting, to modify the Alert Histogram and...

Malicious code in @espace-client-axafr/sticker-policy-list (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in @espace-client-axafr/alert-resilience-message (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-47767 Malicious code in fucknukeer (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 ba298ecb23601a4d9ddb1c2123c99ed19ff6a44c82225c5627a97033225feabb Importing the module downloads and executes widely recognized malware --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...

Malicious code in msal-node1 (npm)

The package communicates with a domain associated with malicious activity...

CVE-2017-10348 vulnerabilities

Vulnerabilities for packages: openjdk-8-openj9, openjdk-17-openj9, openjdk-11-openj9, openjdk-21-openj9, openjdk-26-openj9, openjdk-25-openj9...

CGA-JX53-5F96-P22V

Bulletin has no description...

CGA-XC3V-42VV-WJ6Q

Bulletin has no description...

CGA-CXHV-P5QP-F7CG

Bulletin has no description...

CVE-2025-5060

creationtimestamp| type| source ---|---|--- 2025-08-23 08:28:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lx2ki6y7dx2q 2026-04-08 23:31:42+00:00| seen| Telegram/9bO0-1binurVzp3pCY9TyWaRl8X3rBZNbLTO3pIar2J4QNM...

MAL-2025-41402 Malicious code in r00tsid (npm)

The package communicates with a domain associated with malicious activity...

CVE-2025-55741

creationtimestamp| type| source ---|---|--- 2025-08-22 14:05:03+00:00| published-proof-of-concept| https://github.com/unopim/unopim/security/advisories/GHSA-8p2f-fx4q-75cx 2025-08-22 20:19:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lwzbpngibp2p...

CVE-2025-53992

Insertion of Sensitive Information Into Sent Data vulnerability in Crocoblock JetTricks jet-tricks allows Retrieve Embedded Sensitive Data.This issue affects JetTricks: from n/a through = 1.5.4.1...

Europol Denies $50K Reward for Qilin Ransomware, Calls It a Scam

Europol has confirmed that a widely reported $50,000 reward for information on the Qilin ransomware group is a…...

Malicious code in etherweb3 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 500af99cbff4bad856e50637e3046662824ccdde4cbf8f35cfe5d6bb2c880ce8 Malicious clone of a legitimate "web3" package. During importing, a code aiming to exfiltrate private keys is executed --- Category: MALICIOUS - The campaign h...