MAL-2025-48726 Malicious code in ldhpgemrdhs92007 (npm)

The package ldhpgemrdhs92007 was found to contain malicious code. --- -= Per source details. Do not edit below this line.=-...

WordPress DoFollow Case by Case plugin <= 3.5.1 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Nabil Irawan in WordPress Plugin DoFollow Case by Case versions = 3.5.1...

CVE-2025-46597

creationtimestamp| type| source ---|---|--- 2025-10-25 22:57:52+00:00| seen| https://bsky.app/profile/earlybirdsinvest.bsky.social/post/3m42igc6k2b2t 2026-03-23 15:00:27+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhqd7rymcj2h...

CVE-2025-12005

creationtimestamp| type| source ---|---|--- 2025-10-25 07:01:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m3ysxiuhwu2h...

CVE-2025-12194

creationtimestamp| type| source ---|---|--- 2025-10-25 02:50:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m3yexyohrv2i...

Security Bulletin: IBM Content Navigator consumes vulnerable spring framework library

Summary Spring Framework versions 5.3.0 - 5.3.18, 5.2.0 - 5.2.20, and older unsupported versions. A vulnerability where the fix for CVE-2022-22968 made disallowedFields patterns in DataBinder case insensitive, but String.toLowerCase has Locale-dependent exceptions that could potentially result in...

Security Bulletin: IBM Content Navigator consumes vulnerable spring framework library

Summary Spring Framework versions 5.3.0 - 5.3.18, 5.2.0 - 5.2.20, and older unsupported versions. The vulnerability involves case-sensitive patterns for disallowedFields on a DataBinder, meaning a field is not effectively protected unless it is listed with both upper and lower case for the first...

CVE-2023-53729

In the Linux kernel, the following vulnerability has been resolved: soc: qcom: qmiencdec: Restrict string length in decode The QMI TLV value for strings in a lot of qmi element info structures account for null terminated strings with MAXLEN + 1. If a string is actually MAXLEN + 1 length, this wil...

EUVD-2025-35580

Hono Improper Authorization vulnerability...

CVE-2025-53043

...

CVE-2025-40006

In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: fix folio is still mapped when deleted Migration may be raced with fallocating hole. removeinodesinglefolio will unmap the folio if the folio is still mapped. However, it's called without folio lock. If the folio is...

`unic-ucd-case` is unmaintained

All Unicode crates that are part of https://github.com/open-i18n/rust-unic are unmaintained. Recommended alternatives - icuproperties...

RUSTSEC-2025-0092 `unic-ucd-case` is unmaintained

All Unicode crates that are part of https://github.com/open-i18n/rust-unic are unmaintained. Recommended alternatives - icuproperties...

Malicious Package

Overview case-sensitive-paths is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

CVE-2025-47148

creationtimestamp| type| source ---|---|--- 2025-10-16 04:20:50+00:00| seen| Telegram/ujHEnwf9Bcm7jw8fGJcPOgCR6Fj4TQPmKtnIGHPJb8YWmXk...

Improving Cybercrime Detection and Digital Forensics Investigations with Artificial Intelligence

According to a recent EUROPOL report, cybercrime is still recurrent in Europe, and different activities and countermeasures must be taken to limit, prevent, detect, analyze, and fight it. Cybercrime must be prevented with specific measures, tools, and techniques, for example through automated...

EUVD-2025-34687

Creative Cloud Desktop versions 6.7.0.278 and earlier are affected by a Time-of-check Time-of-use TOCTOU Race Condition vulnerability that could lead to arbitrary file system write. A low-privileged attacker could exploit the timing between the check and use of a resource, potentially allowing...

EUVD-2025-34503

Not used...

Cursor < 1.7 RCE (GHSA-xcwh-rrwj-gxc7)

The version of Cursor installed on the remote host is prior to 1.7. It is, therefore, affected by a remote code execution vulnerability. Versions 1.6.23 and below contain case-sensitive checks in the way Cursor IDE protects its sensitive files e.g., /.cursor/mcp.json, which allows attackers to...

Feds Seize Record-Breaking $15 Billion in Bitcoin From Alleged Scam Empire

Officials in the US and UK have taken sweeping action against “one of the largest investment fraud operations in history,” confiscating a historic amount of funds in the process...