2233 matches found
CVE-2025-11147 Reflected Cross-site scripting (XSS) vulnerability in Apt-Cacher-NG
Reflected cross-site scripting XSS in Apt-Cacher-NG v3.2.1. The vulnerability allows malicious scripts XSS to be executed in “/html/.html”...
CVE-2025-11146 Reflected Cross-site scripting (XSS) vulnerability in Apt-Cacher-NG
Reflected Cross-site scripting XSS in Apt-Cacher-NG v3.2.1. The vulnerability allows an attacker to execute malicious scripts XSS in the web management application. The vulnerability is caused by improper handling of GET inputs included in the URL in “/acng-report.html”...
CVE-2025-11146
CVE-2025-11146 affects Apt-Cacher-NG (v3.2.1). The vulnerability is a Reflected XSS caused by improper handling of GET inputs in the URL at /acng-report.html, allowing execution of malicious scripts in the web management interface. The available connected documents confirm the affected product/ve...
CVE-2025-11146
Reflected Cross-site scripting XSS in Apt-Cacher-NG v3.2.1. The vulnerability allows an attacker to execute malicious scripts XSS in the web management application. The vulnerability is caused by improper handling of GET inputs included in the URL in “/acng-report.html”...
CVE-2025-11146 Reflected Cross-site scripting (XSS) vulnerability in Apt-Cacher-NG
Reflected Cross-site scripting XSS in Apt-Cacher-NG v3.2.1. The vulnerability allows an attacker to execute malicious scripts XSS in the web management application. The vulnerability is caused by improper handling of GET inputs included in the URL in “/acng-report.html”...
Apt-Cacher-NG 跨站脚本漏洞
Apt-Cacher-NG is a cache proxy service from the Apt-Cacher-NG open source. A cross-site scripting vulnerability exists in Apt-Cacher-NG version 3.2.1, which originates in /html/.html and is susceptible to reflective cross-site scripting attacks...
PT-2025-39821
Name of the Vulnerable Software and Affected Versions Apt-Cacher-NG version 3.2.1 Description A reflected cross-site scripting XSS issue exists in Apt-Cacher-NG. This allows the execution of malicious scripts within the “/html/.html” path. The vulnerability enables attackers to inject and execute...
Apt-Cacher-NG 跨站脚本漏洞
Apt-Cacher-NG is a cache proxy service from the Apt-Cacher-NG open source. A cross-site scripting vulnerability exists in Apt-Cacher-NG version 3.2.1, which stems from improper handling of GET inputs contained in URLs in the file /acng-report.html, and could lead to a reflective cross-site...
PT-2025-39820
Name of the Vulnerable Software and Affected Versions Apt-Cacher-NG version 3.2.1 Description A reflected cross-site scripting XSS issue exists in the web management application. This allows an attacker to execute malicious scripts. The issue is due to improper handling of GET inputs included in...
Chinese APT Hits Philippine Military Firm with New EggStreme Fileless Malware
Bitdefender uncovers EggStreme, a fileless malware by a China-based APT targeting the Philippine military and APAC organisations. Cybersecurity…...
Silver Fox APT Exploits Signed Windows Driver to Deliver ValleyRAT
Check Point reports Silver Fox APT using a signed WatchDog driver flaw to disable Windows security and deliver…...
Linux Distros Unpatched Vulnerability : CVE-2020-5202
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - apt-cacher-ng through 3.3 allows local users to obtain sensitive information by hijacking the hardcoded TCP port. The /usr/lib/apt-cacher-ng/acngtool program...
Linux Distros Unpatched Vulnerability : CVE-2017-7443
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - apt-cacher before 1.7.15 and apt-cacher-ng before 3.4 allow HTTP response splitting via encoded newline characters, related to lack of blocking for the %0ad...
Linux Distros Unpatched Vulnerability : CVE-2005-2214
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - apt-setup in Debian GNU/Linux installs the apt.conf file with insecure permissions, which allows local users to obtain sensitive information such as passwords...
Revisiting UNC3886 Tactics to Defend Against Present Risk
We examine the past tactics used by UNC3886 to gain insight on how to best strengthen defenses against the ongoing and emerging threats of this APT group...
Exploit for Use After Free in Adobe Flash_Player
APTREPORT collected by @blackorbird https://x.com/blackorbird Interesting apt report & sample & malware & technology & intellegence collection APT Group for country Threat Actor Groups Tracked by Palo Alto Networks Unit 42...
China-Based APTs Deploy Fake Dalai Lama Apps to Spy on Tibetan Community
The Tibetan community has been targeted by a China-nexus cyber espionage group as part of two campaigns conducted last month ahead of the Dalai Lama's 90th birthday on July 6, 2025. The multi-stage attacks have been codenamed Operation GhostChat and Operation PhantomPrayers by Zscaler ThreatLabz...
New GhostContainer Malware Hits High-Value MS Exchange Servers in Asia
Kaspersky's SecureList reveals GhostContainer, a new, highly customized backdoor targeting government and high-tech organizations in Asia via Exchange server vulnerabilities. Learn how this APT malware operates and how to stay protected...
GhostContainer backdoor: malware compromising Exchange servers of high-value organizations in Asia
In a recent incident response IR case, we discovered highly customized malware targeting Exchange infrastructure within government environments. Analysis of detection logs and clues within the sample suggests that the Exchange server was likely compromised via a known N-day vulnerability. Our...