Gamma AI Platform Abused in Phishing Chain to Spoof Microsoft SharePoint Logins

Threat actors are leveraging an artificial intelligence AI powered presentation platform named Gamma in phishing attacks to direct unsuspecting users to spoofed Microsoft login pages. "Attackers weaponize Gamma, a relatively new AI-based presentation tool, to deliver a link to a fraudulent...

Mars: insecure deserilize object leads to RCE On Sitecore (CVE-██████████-27218)

This critical vulnerability involved an insecure deserialization issue in Sitecore implementation, which was assigned CVE-2025-27218. The vulnerability allowed remote code execution through unsanitized user input in the ThumbnailsAccessToken header. The vulnerability was remediated by removing...

Malicious code in cloudflare-vite-tutorial (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-2867 Malicious code in cloudflare-vite-tutorial (npm)

--- -= Per source details. Do not edit below this line.=-...

AI Data Poisoning

Cloudflare has a new feature--available to free users as well--that uses AI to generate random pages to feed to AI web crawlers: Instead of simply blocking bots, Cloudflare's new system lures them into a "maze" of realistic-looking but irrelevant pages, wasting the crawler's computing resources...

androidx.benchmark:benchmark-common (>=1.4.0-alpha01 <=1.4.0-alpha07), androidx.benchmark:benchmark-macro (>=1.4.0-alpha01 <=1.4.0-alpha07) +44 more potentially affected by CVE-2024-58103 via com.squareup.wire:wire-runtime (>=5.0.0-alpha01 <=5.1.0)

com.squareup.wire:wire-runtime MAVEN version =5.0.0-alpha01, =1.4.0-alpha01, =1.4.0-alpha01, =2.108.2, =2024.08.21.185109-d03dfc6, =2024.08.21.185109-d03dfc6, =2024.08.21.185109-d03dfc6, =2024.08.21.185109-d03dfc6, =2024.08.21.185109-d03dfc6, =2024.08.21.185109-d03dfc6, =2024.08.21.185109-d03dfc6...

Memory corruption issues is Cloudflare zlib implementation

...

X users report login troubles as Dark Storm claims cyberattack

In the early morning hours of March 10, thousands of users on X formerly Twitter began having trouble logging into the platform. It was only the first service blip of at least three to come that same day and, if one cybercriminal group is to be believed, it was all on purpose. “Twitter has been...

Hemi VDP: Cloudflare WAF Bypass - Origin IP Exposure

The Cloudflare WAF was bypassed, exposing an IP address belonging to a server operated by Hemi...

CVE-2025-22332

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in shanaver CloudFlareR Cache Purge cloudflare-cache-purge allows Reflected XSS.This issue affects CloudFlareR Cache Purge: from n/a through = 1.2...

CVE-2024-27968

Cross-Site Request Forgery CSRF vulnerability in Optimole Super Page Cache for Cloudflare allows Stored XSS.This issue affects Super Page Cache for Cloudflare: from n/a through 4.7.5...

CVE-2024-0212

The Cloudflare Wordpress plugin was found to be vulnerable to improper authentication. The vulnerability enables attackers with a lower privileged account to access data from the Cloudflare API...

MAL-2025-1075 Malicious code in cloudflare-workers-chatgpt-plugin-example (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9b46c4da440b19b277aebc456e9424aa6b70c0b512ba1327db414e22e96576b2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cloudflare-workers-chatgpt-plugin-example (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9b46c4da440b19b277aebc456e9424aa6b70c0b512ba1327db414e22e96576b2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malvertising Scam Uses Fake Google Ads to Hijack Microsoft Advertising Accounts

Cybersecurity researchers have discovered a malvertising campaign that's targeting Microsoft advertisers with bogus Google ads that aim to take them to phishing pages that are capable of harvesting their credentials. "These malicious ads, appearing on Google Search, are designed to steal the logi...

CVE-2025-22332

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in shanaver CloudFlareR Cache Purge cloudflare-cache-purge allows Reflected XSS.This issue affects CloudFlareR Cache Purge: from n/a through = 1.2...

CVE-2025-22332 WordPress CloudFlare(R) Cache Purge plugin <= 1.2 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Bryan Shanaver @ fiftyandfifty.org CloudFlareR Cache Purge allows Reflected XSS. This issue affects CloudFlareR Cache Purge: from n/a through 1.2...

CVE-2025-22332

CVE-2025-22332 is a reflected XSS in the WordPress CloudFlare(R) Cache Purge plugin (versions up to 1.2) caused by improper neutralization of input during web page generation. Public references list CloudFlare(R) Cache Purge

CVE-2025-22332 WordPress CloudFlare(R) Cache Purge plugin <= 1.2 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in shanaver CloudFlareR Cache Purge cloudflare-cache-purge allows Reflected XSS.This issue affects CloudFlareR Cache Purge: from n/a through = 1.2...

WordPress plugin CloudFlare(R) Cache Purge 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerabilit...