ThreatsDay Bulletin: Edge Plaintext Passwords, ICS 0-Days, Patch-or-Die Alerts and 25+ New Stories

Bad week. Turns out the easiest way to get hacked in 2026 is still the same old garbage: shady packages, fake apps, forgotten DNS junk, scam ads, and stolen logins getting dumped into Discord channels like it’s normal. Some of these attack chains don’t even feel sophisticated anymore. More like...

EUVD-2008-1361

Malware in sbrugna...

MAL-2025-17992 Malicious code in data-solutions-framework-on-aws (npm)

The package data-solutions-framework-on-aws was found to contain malicious code...

Malicious code in data-solutions-framework-on-aws (npm)

The package data-solutions-framework-on-aws was found to contain malicious code...

bennettdatasolutions.com Cross Site Scripting vulnerability OBB-2941019

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Information Leakage Vulnerability in Website Building System of Fansoft Software Co.

hereinafter referred to as "Fansoft", founded in 2006, is a professional big data BI and analytics platform provider in China, focusing on business intelligence and data analytics, dedicated to providing one-stop business intelligence solutions for global enterprises. There is an information...

New Imperva Framework: Accelerating the development of large scale solutions with “Stepping”

Handling large amounts of data at scale is a common task in the high-tech industry nowadays. To address this challenge many frameworks have been developed and made publicly available such as distributed messaging queues, distributed databases, lightweight protocols and caching servers, among...

Sql injection

SQL injection vulnerability in MyIssuesView.asp in Advanced Data Solutions Virtual Support Office-XP VSO-XP allows remote attackers to execute arbitrary SQL commands via the IssueID parameter...

CVE-2008-1354

SQL injection vulnerability in MyIssuesView.asp in Advanced Data Solutions Virtual Support Office-XP VSO-XP allows remote attackers to execute arbitrary SQL commands via the IssueID parameter...

CVE-2008-1354

SQL injection vulnerability in MyIssuesView.asp in Advanced Data Solutions Virtual Support Office-XP VSO-XP allows remote attackers to execute arbitrary SQL commands via the IssueID parameter...