MAL-2025-43891 Malicious code in cool-rays-appearance (npm)

The package cool-rays-appearance was found to contain malicious code...

CVE-2025-48544

creationtimestamp| type| source ---|---|--- 2025-09-04 21:18:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ly233m3aal2z...

MAL-2025-191796 Malicious code in mulaptested-pakname (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 fe9ba6c7da3568c9fc879641c190c301a2bd8a349b38a44295eb2924139c78b4 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

Malicious code in electron-osx-appearance-settings (npm)

The package electron-osx-appearance-settings was found to contain malicious code...

MAL-2025-19444 Malicious code in electron-appearance-settings-osx (npm)

The package electron-appearance-settings-osx was found to contain malicious code...

MAL-2025-19453 Malicious code in electron-osx-appearance-settings (npm)

The package electron-osx-appearance-settings was found to contain malicious code...

Malicious code in electron-appearance-settings-osx (npm)

The package electron-appearance-settings-osx was found to contain malicious code...

HumanSAM: Classifying Human-Centric Forgery Videos in Human Spatial, Appearance, and Motion Anomaly

Numerous synthesized videos from generative models, especially human-centric ones that simulate realistic human actions, pose significant threats to human information security and authenticity. While progress has been made in binary forgery video detection, the lack of fine-grained understanding ...

Q2 2025 Ransomware Trends Analysis: Boom and Bust

“Tumultous times” would be an accurate summary of Q2 2025 where ransomware threat actors are concerned. Rapid7’s internal and publicly-available data analysis reveals a dynamic environment where major players come and go, newer groups work their way up the heavy-hitters ladder, and threat actors...

Malicious code in blabutt (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 258dbe10b138b170391a1beecc464e618b85c47192f558a737105ef3525948ad Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

CVE-2024-34677

Exposure of sensitive information in System UI prior to SMR Nov-2024 Release 1 allow local attackers to make malicious apps appear as legitimate...

CVE-2016-11065

An issue was discovered in Mattermost Server before 3.3.0. An attacker could use the WebSocket feature to send pop-up messages to users or change a post's appearance...

CVE-2022-45192

creationtimestamp| type| source ---|---|--- 2025-03-25 15:24:03+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8683...

CVE-2024-4981

creationtimestamp| type| source ---|---|--- 2025-03-22 21:04:30+00:00| published-proof-of-concept| https://t.me/techb0ltGenona/5127 2025-05-12 19:29:11+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16023 2025-05-12 22:48:38+00:00| seen| https://t.me/cvedetector/25113...

CVE-2024-9490

DLL hijacking vulnerabilities, caused by an uncontrolled search path in Silicon Labs 8-bit IDE installer can lead to privilege escalation and arbitrary code execution when running the impacted installer...

CVE-2024-34677

Exposure of sensitive information in System UI prior to SMR Nov-2024 Release 1 allow local attackers to make malicious apps appear as legitimate...

CVE-2024-50067

creationtimestamp| type| source ---|---|--- 2024-10-28 02:46:40+00:00| published-proof-of-concept| https://t.me/cvedetector/9084 2025-12-03 14:14:49+00:00| seen| https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8 2026-01-09 13:55:34+00:00| seen|...

CVE-2024-9136

creationtimestamp| type| source ---|---|--- 2024-09-27 14:12:39+00:00| seen| https://t.me/cvedetector/6495...

CVE-2024-8432

The Appointment & Event Booking Calendar Plugin – Webba Booking plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the saveappearance function in all versions up to, and including, 5.0.48. This makes it possible for authenticated attackers...

PT-2024-39009 · WordPress · Webba Booking

Name of the Vulnerable Software and Affected Versions: The Appointment & Event Booking Calendar Plugin – Webba Booking plugin for WordPress versions up to, and including, 5.0.48 Description: The issue allows authenticated attackers with Subscriber-level access and above to modify the booking form...