Malicious code in @leaffm/leaf-connect-bully-billows-eu (npm)

The package @leaffm/leaf-connect-bully-billows-eu was found to contain malicious code...

Malicious code in test-mlw2-tiler-miaow-bully-mimes (npm)

The package test-mlw2-tiler-miaow-bully-mimes was found to contain malicious code...

Malicious code in test-mlw2-kilim-preed-attic-bully (npm)

The package test-mlw2-kilim-preed-attic-bully was found to contain malicious code...

MAL-2025-8379 Malicious code in @leaffm/leaf-connect-bully-billows-eu (npm)

The package @leaffm/leaf-connect-bully-billows-eu was found to contain malicious code...

MAL-2025-35619 Malicious code in test-mlw2-kilim-preed-attic-bully (npm)

The package test-mlw2-kilim-preed-attic-bully was found to contain malicious code...

Schoolyard Bully Malware Stealing Facebook Credentials on Android

By Deeba Ahmed The campaign is ongoing, and so far, Schoolyard Bully Malware has victimized over 300,000 Facebook users on Android devices across 71 countries. This is a post from HackRead.com Read the original post: Schoolyard Bully Malware Stealing Facebook Credentials on Android...

KITT-Lite

This is a Python-based pentesting CLI tool. The tool is designed to extract WPS Wi-Fi Protected Setup pins from vulnerable routers. It uses various tools such as Piexiewps, Reaver, Bully, Aircrack Suite, and Wash in an automated way to achieve its goal. The tool is likely used for penetration...

Rockstar Games: Image Injection Vulnerability on /bully/screens

In this report, the researcher identified an image injection vulnerability in www.rockstargames.com/bully/screens that could be combined with other vulnerabilities to result in sensitive token theft from other users. This vulnerability has since been patched to prevent it from being exploitable...

Rockstar Games: Image Injection on `/bully/anniversaryedition` may lead to FB's OAuth Token Theft.

In this report, the researcher identified a chain of attacks that could result in sensitive token leakage, such as Oauth tokens. The attack would begin with an image injection exploit on the page at https://www.rockstargames.com/bully/anniversaryedition. That exploit was the focus of this...

HT-WPS Breaker - High Touch WPS Breaker

High Touch WPS Breaker HT-WB is a small tool based on the bash script language, it can help you to extract the WPS pin of many vulnerable routers and get the password, in the last you want to notice that HT-WPS Breaker in its process is using these tools : "Piexiewps" "Reaver" "Bully" "Aircrack...

Rockstar Games: Image Injection on /bully/anniversaryedition may lead to OAuth token theft.

In this report, the researcher identified an image injection issue on www.rockstargames.com/bully/anniversaryedition that could be combined with other vulnerabilities to result in sensitive token theft under certain conditions. We resolved the image injection issue, preventing this series of...

Automated Wireless Attack Tool: WiFite

Wifite is a Python script for auditing wireless networks which aims to be the “set it and forget it” wireless auditing tool. What’s new in Wifite 2? Less bugs Cleaner process management. Does not leave processes running in the background the old wifite was bad about this. No longer “one monolithi...

Amanda Todd blackmailer Kody Maxson outed another pedophile blackmailer

The hacker group Anonymous claims that Maxson is the man who drove Amanda Todd to her death last week, but the Canada native says it wasn't him and that he was a friend to the teen. Alleged Amanda Todd blackmailer Kody Maxson outed a second pedophile blackmailer, known as Viper. Maxson appeared i...

Unfixed XSS vulnerability at www.bullydog.com

Security researcher Atmon3r, has submitted on 13/01/2012 a cross-site-scripting XSS vulnerability affecting www.bullydog.com, which at the time of submission ranked 474285 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/01/2012. It is...