quiche -- Infinite loop triggered by connection ID retirement

Quiche Releases reports: This update includes 1 security fix: High CVE-2025-7054: Infinite loop triggered by connection ID retirement. Reported by Catena cyber on 2025-08-07...

Hackers Use Fake VPN and Browser NSIS Installers to Deliver Winos 4.0 Malware

Cybersecurity researchers have disclosed a malware campaign that uses fake software installers masquerading as popular tools like LetsVPN and QQ Browser to deliver the Winos 4.0 framework. The campaign, first detected by Rapid7 in February 2025, involves the use of a multi-stage, memory-resident...

NSIS Abuse and sRDI Shellcode: Anatomy of the Winos 4.0 Campaign

Co-authored byAnna Širokova and Ivan Feigl Executive summary Rapid7 has been tracking a malware campaign that uses fake software installers disguised as popular apps like VPN and QQBrowser—to deliver Winos v4.0, a hard-to-detect malware that runs entirely in memory and gives attackers remote...

catena-uhren.com Improper Access Control vulnerability OBB-3853912

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

com.github.fracpete:nlp-weka-package (>=2015.3.25 <=2019.3.29), com.github.paramitamirza:CATENA (>=1.0.1 <=1.0.2) +8 more potentially affected by CVE-2023-39020 via edu.stanford.nlp:stanford-parser (>=3.2.0 <=3.9.2)

edu.stanford.nlp:stanford-parser MAVEN version =3.2.0, =2015.3.25, =1.0.1, =1.3.0, =1.1, =7.20.4, =8.0.1 - org.zalando.research:zap =1.0 Source cves: CVE-2023-39020 Source advisory: OSV:GHSA-353M-JH2M-72V4...

Threat Outbreak Alert RuleID33053: Email Messages Distributing Malicious Software on June 26, 2018

Medium Alert ID: 58299 First Published: 2018 June 26 15:56 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID33053 may contain the following files: Name | Siz...