2460 matches found
Malicious Go Module Poses as SSH Brute-Force Tool, Steals Credentials via Telegram Bot
Cybersecurity researchers have discovered a malicious Go module that presents itself as a brute-force tool for SSH but actually contains functionality to discreetly exfiltrate credentials to its creator. "On the first successful login, the package sends the target IP address, username, and passwo...
CVE-2025-49892
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in uxper Uxper Booking uxper-booking allows PHP Local File Inclusion.This issue affects Uxper Booking: from n/a through = 1.3.3...
PT-2025-51825
Name of the Vulnerable Software and Affected Versions Mattermost versions 10.11.x through 10.11.6 Mattermost GitHub plugin versions through 2.4.0 Description The software does not properly validate the identity of plugin bots when forwarding reactions. This allows attackers to misuse the GitHub...
CVE-2025-49892
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in uxper Uxper Booking uxper-booking allows PHP Local File Inclusion.This issue affects Uxper Booking: from n/a through = 1.3.3...
CVE-2025-49892 WordPress Pending Order Bot plugin <= 1.0.2 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in badasswp Pending Order Bot allows Stored XSS. This issue affects Pending Order Bot: from n/a through 1.0.2...
CVE-2025-49892
CVE-2025-49892 describes an LFI (Local File Inclusion) in the WordPress plugin Uxper Booking (uxper-booking) up to version 1.3.3. The vulnerability arises from improper control of filename handling in PHP include/require statements, allowing an attacker to include local files via crafted input. I...
CVE-2025-49892 WordPress Uxper Booking Plugin <= 1.3.3 - Local File Inclusion Vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in uxper Uxper Booking uxper-booking allows PHP Local File Inclusion.This issue affects Uxper Booking: from n/a through = 1.3.3...
PT-2025-33960 · WordPress · Badasswp Pending Order Bot
Name of the Vulnerable Software and Affected Versions: badasswp Pending Order Bot versions through 1.0.2 Description: The software contains an Improper Neutralization of Input During Web Page Generation issue, leading to a Stored Cross-site Scripting condition. This allows for the injection of...
WordPress plugin Pending Order Bot 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
Oregon Man Charged in ‘Rapper Bot’ DDoS Service
A 22-year-old Oregon man has been arrested on suspicion of operating "Rapper Bot ," a massive botnet used to power a service for launching distributed denial-of-service DDoS attacks against targets -- including a March 2025 DDoS that knocked Twitter/X offline. The Justice Department asserts the...
WordPress Pending Order Bot plugin <= 1.0.2 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Vinit Lakra Patchstack Alliance in WordPress Plugin Pending Order Bot versions = 1.0.2...
cassandra-query (>=1.0.1 <=1.0.3), toobatel-bot-lib-js (=1.0.0) potentially affected by unknown CVE via blubird (=0.0.1-security)
blubird NPM version =0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on blubird and may be impacted: - cassandra-query =1.0.1, =1.0.3 - toobatel-bot-lib-js =1.0.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-15874...
Malicious code in bot-methods (npm)
The package bot-methods was found to contain malicious code...
Malicious code in generator-bot-template-generator (npm)
The package generator-bot-template-generator was found to contain malicious code...
Malicious code in api-bot-basil (npm)
The package api-bot-basil was found to contain malicious code...
Malicious code in thepond-whitelist-bot (npm)
The package thepond-whitelist-bot was found to contain malicious code...
Malicious code in contentful-build-bot (npm)
The package contentful-build-bot was found to contain malicious code...
MAL-2025-36790 Malicious code in thepond-whitelist-bot (npm)
The package thepond-whitelist-bot was found to contain malicious code...