CVE-2025-9111

The AI ChatBot for WordPress WordPress plugin before 7.1.0 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

CVE-2025-55244

Azure Bot Service Elevation of Privilege Vulnerability...

Basecamp: Improper bot-authentication allows to impersonate any user when sending messages in a room

A vulnerability was discovered in the bot authentication mechanism. The issue allowed an unauthenticated user to impersonate any user and post messages in rooms the impersonated user had access to. The bot authentication function failed to properly validate the bot key, allowing a partial key to...

Malicious npm Packages Impersonate Flashbots, Steal Ethereum Wallet Keys

A new set of four malicious packages have been discovered in the npm package registry with capabilities to steal cryptocurrency wallet credentials from Ethereum developers. "The packages masquerade as legitimate cryptographic utilities and Flashbots MEV infrastructure while secretly exfiltrating...

Malicious npm Packages Impersonate Flashbots, Steal Ethereum Wallet Keys

A new set of four malicious packages have been discovered in the npm package registry with capabilities to steal cryptocurrency wallet credentials from Ethereum developers. "The packages masquerade as legitimate cryptographic utilities and Flashbots MEV infrastructure while secretly exfiltrating...

CVE-2025-55244

Azure Bot Service Elevation of Privilege Vulnerability...

CVE-2025-55244 Azure Bot Service Elevation of Privilege Vulnerability

...

CVE-2025-55244

Technical details about CVE-2025-55244 are not provided in the connected documents. Public info only notes an Azure Bot Service elevation of privilege vulnerability; monitor Microsoft advisories for updates and fixes.

CVE-2025-55244 Azure Bot Service Elevation of Privilege Vulnerability

...

CVE-2025-55244: Improper Access Control

Azure Bot Service Elevation of Privilege Vulnerability...

Microsoft Azure Bot Service 访问控制错误漏洞

Microsoft Azure Bot Service is a hosted service for developing, deploying, and managing intelligent chatbots from Microsoft Corporation in the United States. An access control error vulnerability exists in Microsoft Azure Bot Service that stems from elevation of privilege...

PT-2025-36100

Name of the Vulnerable Software and Affected Versions Azure Bot Service affected versions not specified Description An elevation of privilege issue exists within the Azure Bot Service. This allows for unauthorized privilege escalation. Recommendations At the moment, there is no information about ...

KLA87341 Multiple vulnerabilities in Microsoft Azure

Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to gain privileges. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability in Azure Bot Service can be exploited remotely to gain privileges. 2. An elevation ...

Malicious code in solana-bot-sdk (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-41605 Malicious code in solana-bot-sdk (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in dccs-bot (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-41657 Malicious code in dccs-bot (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Linux Distros Unpatched Vulnerability : CVE-2015-1554

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - kgb-bot 1.33-2 allows remote attackers to cause a denial of service crash. CVE-2015-1554 Note that Nessus relies on the presence of the package as reported by t...

Malicious Go Module Poses as SSH Brute-Force Tool, Steals Credentials via Telegram Bot

Cybersecurity researchers have discovered a malicious Go module that presents itself as a brute-force tool for SSH but actually contains functionality to discreetly exfiltrate credentials to its creator. "On the first successful login, the package sends the target IP address, username, and passwo...

Malicious Go Module Poses as SSH Brute-Force Tool, Steals Credentials via Telegram Bot

Cybersecurity researchers have discovered a malicious Go module that presents itself as a brute-force tool for SSH but actually contains functionality to discreetly exfiltrate credentials to its creator. "On the first successful login, the package sends the target IP address, username, and passwo...