7007 matches found
Malicious code in ace-tools (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...
The vulnerability of the IBM Personal Communications terminal emulator arises from the possibility of writing operations outside of the buffer in memory, allowing an attacker to exploit their privileges.
The vulnerability of the IBM Personal Communications terminal emulator relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...
PT-2025-20381 · Telemessage · Telemessage Archiving Backend +1
Name of the Vulnerable Software and Affected Versions: TeleMessage versions prior to 2025-05-05 Description: The TeleMessage archiving backend holds cleartext copies of messages from TM SGNL aka Archive Signal app users, which is different functionality than described in the TeleMessage "End-to-E...
The Trump Administration Sure Is Having Trouble Keeping Its Comms Private
In the wake of SignalGate, a knockoff version of Signal used by a high-ranking member of the Trump administration was hacked. Today on Uncanny Valley, we discuss the platforms used for government communications...
Unauthorized Access Vulnerability in NetDrive Unified Communications Platform of Beijing NetDrive Network Technology Co.
NetDrive Unified Communications Platform is a comprehensive communications platform designed to enhance users' communication efficiency and convenience and provide a unified communications environment. An unauthorized access vulnerability exists in NetDrive Unified Communications Platform of...
Unauthorized Access Vulnerability in NetDrive Unified Communications Platform of Beijing NetDrive Network Technology Co.
NetDrive Unified Communications Platform is a comprehensive communications platform designed to enhance users' communication efficiency and convenience and provide a unified communications environment. An unauthorized access vulnerability exists in the NetDrive Unified Communications Platform of...
Risk Assessment and Threat Modeling for Safe Autonomous Driving Technology
This research paper delves into the field of autonomous vehicle technology, examining the vulnerabilities inherent in each component of these transformative vehicles. Autonomous vehicles AVs are revolutionizing transportation by seamlessly integrating advanced functionalities such as sensing,...
MAL-2025-3576 Malicious code in adobe-io-events (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 96f150232693e090d60954bb70dd3a03535edeceb5d77cc30a30914454396963 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MintsLoader Drops GhostWeaver via Phishing, ClickFix — Uses DGA, TLS for Stealth Attacks
The malware loader known as MintsLoader has been used to deliver a PowerShell-based remote access trojan called GhostWeaver. "MintsLoader operates through a multi-stage infection chain involving obfuscated JavaScript and PowerShell scripts," Recorded Future's Insikt Group said in a report shared...
MAL-2025-3566 Malicious code in lezer-snowsql (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 79d686dc87e1e046c8091bd313f15cba6ccc513fa0effa19a8798c4d23e066c5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2025-3200
An unauthenticated remote attacker could exploit the used, insecure TLS 1.0 and TLS 1.1 protocols to intercept and manipulate encrypted communications between the Com-Server and connected systems...
CVE-2025-23181 Ribbon Communications - CWE-250: Execution with Unnecessary Privileges
CWE-250: Execution with Unnecessary Privileges...
CVE-2025-23181
CVE-2025-23181 affects Ribbon Communications Apollo 9608 SBC; root cause is an unnecessary privileged operation in v9.6R3, enabling Execution with Unnecessary Privileges. CVSS 3.1 base score 8.0 (HIGH) with Adjacent attack vector, Low attack complexity, Low privileges required, no user interactio...
CVE-2025-23181 Ribbon Communications - CWE-250: Execution with Unnecessary Privileges
CWE-250: Execution with Unnecessary Privileges...
CVE-2025-23180 Ribbon Communications - CWE-250: Execution with Unnecessary Privileges
CWE-250: Execution with Unnecessary Privileges...
CVE-2025-23180
CVE-2025-23180 affects Ribbon Communications Apollo 9608 SBC; exposed vulnerability stems from an unnecessary privileged operation in v9.6R3. Reported by CNNVD/PT-Security and corroborated in Red Hat/NVD-style feeds. Impact per sources: CWE-250 (Execution with Unnecessary Privileges); CVSSv3.1 ba...
CVE-2025-23180 Ribbon Communications - CWE-250: Execution with Unnecessary Privileges
CWE-250: Execution with Unnecessary Privileges...
CVE-2025-23179 Ribbon Communications - CWE-798: Use of Hard-coded Credentials
CWE-798: Use of Hard-coded Credentials...