EUVD-2025-86692

Malicious code in comprehensivecheetahz3n npm...

Malicious code in comprehensive-cyan-elk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a30b2d0ad5055335cccbae866b0857106de84e7d0cc0b22ca4f9581b47274423 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-55272

Malicious code in comprehensive-copper-dingo npm...

EUVD-2025-55270

Malicious code in comprehensive-indigo-egret npm...

EUVD-2025-55269

Malicious code in comprehensive-peach-lemur npm...

EUVD-2025-55271

Malicious code in comprehensive-cyan-elk npm...

EUVD-2025-60259

Malicious code in comprehensivesquirrelz3n npm...

EUVD-2025-50530

Malicious code in comprehensivelandfowlz3n npm...

EUVD-2025-50531

Malicious code in comprehensivekitez3n npm...

VulnCheck KEV: CVE-2024-58274

Hikvision CSMP Comprehensive Security Management Platform iSecure Center through 2024-08-01 allows execution of a command within $ in /center/api/installation/detection JSON data, as exploited in the wild in 2024 and 2025...

Toward Understanding Security Issues in the Model Context Protocol Ecosystem

The Model Context Protocol MCP is an emerging open standard that enables AI-powered applications to interact with external tools through structured metadata. A rapidly growing ecosystem has formed around MCP, including a wide range of MCP hosts i.e., Cursor, Windsurf, Claude Desktop, and Cline, M...

Beyond a Single Perspective: Towards a Realistic Evaluation of Website Fingerprinting Attacks

Website Fingerprinting WF attacks exploit patterns in encrypted traffic to infer the websites visited by users, posing a serious threat to anonymous communication systems. Although recent WF techniques achieve over 90% accuracy in controlled experimental settings, most studies remain confined to...

xss-security-scanner

XSS Security Scanner A professional web-based XSS vulnerabili...

Exploit for Missing Authentication for Critical Function in Erlang Erlang\/Otp

CVE-2025-32433 – Erlang/OTP SSH RCE Vulnerability 📌 Summary...

LMDG: Advancing Lateral Movement Detection through High-Fidelity Dataset Generation

Lateral Movement LM attacks continue to pose a significant threat to enterprise security, enabling adversaries to stealthily compromise critical assets. However, the development and evaluation of LM detection systems are impeded by the absence of realistic, well-labeled datasets. To address this...

CISA and USCG Issue Joint Advisory to Strengthen Cyber Hygiene in Critical Infrastructure

CISA, in partnership with the U.S. Coast Guard USCG, released a joint Cybersecurity Advisory aimed at helping critical infrastructure organizations improve their cyber hygiene. This follows a proactive threat hunt engagement conducted at a U.S. critical infrastructure facility. During this...

PurpCode: Reasoning for Safer Code Generation

We introduce PurpCode, the first post-training recipe for training safe code reasoning models towards generating secure code and defending against malicious cyberactivities. PurpCode trains a reasoning model in two stages: i Rule Learning, which explicitly teaches the model to reference cybersafe...

How Microsoft Defender for Endpoint is redefining endpoint security

Securing your digital estate with endpoint detection and response EDR across all platforms, devices, and Internet of Things IoT has never been more challenging. A rapidly evolving cyberthreat landscape has seen cyberattacks grow in sophistication, evolving from randomized single domain cyberattac...

PT-2025-54642

Уязвимость программных обеспечений 1С: ERP Управление предприятием, 1С:Комплексная автоматизация, 1С:Управление торговлей связана с отсутствием авторизации. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, выполнять произвольные запросы...

CVE-2023-41896

Home assistant is an open source home automation. Whilst auditing the frontend code to identify hidden parameters, Cure53 detected authcallback=1, which is leveraged by the WebSocket authentication logic in tandem with the state parameter. The state parameter contains the hassUrl, which is...