Lucene search
+L

39682 matches found

OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/11/10 4:40 a.m.•9 views

Malicious code in nadia-asinan37-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5535a9c8f16c77d57a311260ae1914da1049abaecdee2745e95ee162e1040d44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

6.9AI score
SaveExploits0
osv_mal
osv_mal
•added 2025/11/10 4:05 a.m.•10 views

MAL-2025-51025 Malicious code in bella-dodol8-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62a38a638662e2f9f74786179f48b83c75228086da85fcbcb614d3648c0388b4 The package bella-dodol8-ruro was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

6.9AI score
SaveExploits0
RedHat Linux
RedHat Linux
•added 2025/11/10 2:58 a.m.•18 views

Important: Red Hat Security Advisory: bind security update

An update for bind is now available for Red Hat Enterprise Linux 9.6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

8.6CVSS6.8AI score0.00667EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
•added 2025/11/10 12:00 a.m.•8 views

Oracle Linux 8 : bind9.16 (ELSA-2025-19793)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-19793 advisory. - Prevent cache poisoning due to weak PRNG CVE-2025-40780 - Address various spoofing attacks CVE-2025-40778 Tenable has extracted the preceding...

8.6CVSS7.2AI score0.00667EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
•added 2025/11/10 12:00 a.m.•10 views

RHEL 9 : bind (RHSA-2025:19951)

"The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:19951 advisory. BIND Berkeley Internet Name Domain is an implementation of the DNS Domain Name System protocols. BIND includes a DNS server named, which...

8.6CVSS7AI score0.00667EPSS
SaveExploits1References6
Tenable Nessus
Tenable Nessus
•added 2025/11/10 12:00 a.m.•4 views

Oracle Linux 8 : bind (ELSA-2025-19835)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-19835 advisory. - Address various spoofing attacks CVE-2025-40778 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note...

8.6CVSS7AI score0.00667EPSS
SaveExploits1References2
Oracle linux
Oracle linux
•added 2025/11/10 12:00 a.m.•19 views

bind security update

9.16.23-31.0.1 - Fix warning when changing device file permissions Orabug: 36518580 32:9.16.23-31.2 - Replace downstream fixes with upstream changes 32:9.16.23-31.1 - Prevent cache poisoning due to weak PRNG CVE-2025-40780 - Address various spoofing attacks CVE-2025-40778...

8.6CVSS6.9AI score0.00667EPSS
SaveExploits1
SUSE CVE
SUSE CVE
•added 2025/11/09 12:24 a.m.•17 views

SUSE CVE-2025-54499

Mattermost versions 10.5.x = 10.5.10, 10.11.x = 10.11.2 fail to use constant-time comparison for sensitive string comparisons which allows attackers to exploit timing oracles to perform byte-by-byte brute force attacks via response time analysis on Cloud API keys and OAuth client secrets...

3.7CVSS6.4AI score0.00272EPSS
SaveExploits0References2
Packet Storm News
Packet Storm News
•added 2025/11/08 12:00 a.m.•18 views

Enhancing Adversarial Robustness of IoT Intrusion Detection Via SHAP-Based Attribution Fingerprinting

The rapid proliferation of Internet of Things IoT devices has transformed numerous industries by enabling seamless connectivity and data-driven automation. However, this expansion has also exposed IoT networks to increasingly sophisticated security threats, including adversarial attacks targeting...

6.9AI score
SaveExploits0
GithubExploit
GithubExploit
•added 2025/11/07 10:13 a.m.•489 views

Exploit for OS Command Injection in Vsftpd_Project Vsftpd

Task-4-Exploitation-System-Security Internship: ApexPlanet —...

10CVSS8.4AI score0.96184EPSS
SaveExploits60
Packet Storm News
Packet Storm News
•added 2025/11/07 12:00 a.m.•27 views

Quantifying the Risk of Transferred Black Box Attacks

Neural networks have become pervasive across various applications, including security-related products. However, their widespread adoption has heightened concerns regarding vulnerability to adversarial attacks. With emerging regulations and standards emphasizing security, organizations must...

6.9AI score
SaveExploits0
GithubExploit
GithubExploit
•added 2025/11/06 2:18 p.m.•184 views

demo_web_attacks

demowebatta...

7AI score
SaveExploits0
SUSE Linux
SUSE Linux
•added 2025/11/06 1:14 p.m.•14 views

Security update for bind

This update for bind fixes the following issues: CVE-2025-40778: Address various spoofing attacks bsc1252379. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the command listed for yo...

9.2CVSS6.9AI score0.00667EPSS
SaveExploits1References4
osv_suse
osv_suse
•added 2025/11/06 1:14 p.m.•5 views

SUSE-SU-2025:3976-1 Security update for bind

This update for bind fixes the following issues: - CVE-2025-40778: Address various spoofing attacks bsc1252379...

8.6CVSS6.8AI score0.00667EPSS
SaveExploits1References3
Malwarebytes
Malwarebytes
•added 2025/11/06 10:29 a.m.•22 views

Cyberattacks on UK water systems reveal rising risks to critical infrastructure

Digital intruders have been targeting UK drinking water systems in what seems to be a growing risk. Recorded Future News sent a request to the UK's Drinking Water Inspectorate DWI, the organization responsible for ensuring that drinking water is safe, for details on cyberattacks affecting the...

6.2AI score
SaveExploits0
Oracle linux
Oracle linux
•added 2025/11/06 12:00 a.m.•2 views

bind security update

9.18.33-4.0.1 - Fix warning when changing device file permissions Orabug: 36518580 9.18.33-4.2 - Fix upstream reported regression in recent CVE fix CVE-2025-8677 9.18.33-4.1 - Refuse malformed DNSKEY records CVE-2025-8677 - Address various spoofing attacks CVE-2025-40778 - Prevent cache poisoning...

8.6CVSS6.9AI score0.10737EPSS
SaveExploits1
NVD
NVD
•added 2025/11/05 7:16 p.m.•32 views

CVE-2025-5770

A reflected cross-site scripting XSS vulnerability exists in the authentication endpoints of multiple WSO2 products due to a lack of output encoding. A malicious actor can inject arbitrary JavaScript payloads into the authentication endpoint, which are reflected back in the response, enabling...

6.1CVSS0.00212EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/11/05 7:02 p.m.•34 views

CVE-2025-5770 Reflected Cross-Site Scripting (XSS) in Authentication Endpoints of Multiple WSO2 Products

A reflected cross-site scripting XSS vulnerability exists in the authentication endpoints of multiple WSO2 products due to a lack of output encoding. A malicious actor can inject arbitrary JavaScript payloads into the authentication endpoint, which are reflected back in the response, enabling...

6.1CVSS0.00212EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/05 12:00 a.m.•6 views

CVE-2025-5770: Improper Neutralization of Input During Web Page Generation

A reflected cross-site scripting XSS vulnerability exists in the authentication endpoints of multiple WSO2 products due to a lack of output encoding. A malicious actor can inject arbitrary JavaScript payloads into the authentication endpoint, which are reflected back in the response, enabling...

6.1CVSS5.9AI score0.00212EPSS
SaveExploits0References1
Oracle linux
Oracle linux
•added 2025/11/05 12:00 a.m.•20 views

bind9.16 security update

32:9.16.23-0.22.4 - Prevent cache poisoning due to weak PRNG CVE-2025-40780 - Address various spoofing attacks CVE-2025-40778 - Replace downstream fixes with upstream changes 32:9.16.23-0.22.3 - Update addresses of b.root-servers.net RHEL-18449...

8.6CVSS6.9AI score0.00667EPSS
SaveExploits1
Rows per page
Query Builder