MAL-2025-2600 Malicious code in bsb-family-pack (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: oracle-using-macaron 9ce94b3baee18c22e6c4de9808764de9496aa7a055a74f58eb972741ac433181 This package seems to be part of a larger malicious toolkit designed for unauthorized access to systems, data theft, and potentially acting as a...

MAL-2025-2602 Malicious code in connector-bsb (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: oracle-using-macaron eed0770278358269212ff3971e9c4ee9d5410676ea27a4feb6ae52fa8cb5484b This package seems to be part of a larger malicious toolkit designed for unauthorized access to systems, data theft, and potentially acting as a...

MAL-2025-2586 Malicious code in blackspammerbd (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: oracle-using-macaron 610e92bd25b3f4e4206c9e4e0c321b5120bc85b6a01b289d192f78c53bff9ada This package seems to be part of a larger malicious toolkit designed for unauthorized access to systems, data theft, and potentially acting as a...

MAL-2025-2595 Malicious code in blackspammerbd-tools (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: oracle-using-macaron 032eea352b83029c69620b0a45a9297f18ccf6dcf76418258d428e85ca8dc304 This package is designed for remote control and data exfiltration, and could be used for malicious purposes such as spying, unauthorized access,...

MAL-2025-2590 Malicious code in blackspammerbd-remot (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: oracle-using-macaron b3620d6bbda8c8e6a637f39997f1d22114756ec09e8e458eaab7287ea64ff7c3 This package is designed for remote control and data exfiltration, and could be used for malicious purposes such as spying, unauthorized access,...

MAL-2025-2593 Malicious code in blackspammerbd-tool (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: oracle-using-macaron 49490144c72d79e7bb37921a87c52011d6ce935fd7d031e2a4d3e4835e98a399 This package is designed for remote control and data exfiltration, and could be used for malicious purposes such as spying, unauthorized access,...

Company Visitor Management System /index.php File SQL Injection Vulnerability

Company Visitor Management System is a visitor management system. Company Visitor Management System suffers from a SQL injection vulnerability that originates from the lack of validation of the parameter username in the /index.php file of the component Sign In against an externally-entered SQL...

Online Class and Exam Scheduling System salut_del.php File SQL Injection Vulnerability

Online Class and Exam Scheduling System is an online class and exam scheduling system. The Online Class and Exam Scheduling System suffers from a SQL injection vulnerability that originates from the parameter id of /pages/salutdel.php that lacks validation of externally entered SQL statements. An...

Human Metapneumovirus Testing Management System /password-recovery.php File SQL Injection Vulnerability

Human Metapneumovirus Testing Management System is a human subpneumovirus testing management system. A SQL injection vulnerability exists in the Human Metapneumovirus Testing Management System due to a lack of validation of an externally-entered SQL statement in the parameter username in the...

Human Metapneumovirus Testing Management System /profile.php File SQL Injection Vulnerability

Human Metapneumovirus Testing Management System is a human subpneumovirus testing management system. The Human Metapneumovirus Testing Management System suffers from a SQL injection vulnerability that originates from a lack of validation of externally-entered SQL statements in the parameter...

Doctor Appointment Management System /doctor/search.php File SQL Injection Vulnerability

Doctor Appointment Management System is a doctor appointment management system. Doctor Appointment Management System suffers from a SQL injection vulnerability that stems from a lack of validation of externally-entered SQL statements in the searchdata parameter of file /doctor/search.php. An...

Apartment Visitors Management System username parameter SQL Injection Vulnerability

Apartment Visitors Management System is an apartment visitor management system. Apartment Visitors Management System suffers from a SQL injection vulnerability that stems from the lack of validation of an externally entered SQL statement for the parameter username. An attacker can exploit this...

Apartment Visitors Management System mobilenumber parameter SQL Injection Vulnerability

Apartment Visitors Management System is an apartment visitor management system. Apartment Visitors Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter mobilenumber of file /admin-profile.php...

Human Metapneumovirus Testing Management System /check_availability.php File SQL Injection Vulnerability

Human Metapneumovirus Testing Management System is a human subpneumovirus testing management system. The Human Metapneumovirus Testing Management System suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements in the parameter...

Apartment Visitors Management System visname Parameter SQL Injection Vulnerability

Apartment Visitors Management System is an apartment visitor management system. Apartment Visitors Management System suffers from a SQL injection vulnerability that stems from the lack of validation of an externally entered SQL statement in the parameter visname. An attacker can exploit this...

Scammers Sneak 300+ Ad Fraud Apps onto Google Play with 60M Downloads

Google Play Store hit by 300+ fake Android apps, downloaded more than 60 million times pushing ad fraud and data theft. Learn how to spot and remove these threats...

Unpatched Windows Zero-Day Flaw Exploited by 11 State-Sponsored Threat Groups Since 2017

An unpatched security flaw impacting Microsoft Windows has been exploited by 11 state-sponsored groups from China, Iran, North Korea, and Russia as part of data theft, espionage, and financially motivated campaigns that date back to 2017. The zero-day vulnerability, tracked by Trend Micro's Zero...

Microsoft Warns of StilachiRAT: A Stealthy RAT Targeting Credentials and Crypto Wallets

Microsoft is calling attention to a novel remote access trojan RAT named StilachiRAT that it said employs advanced techniques to sidestep detection and persist within target environments with an ultimate aim to steal sensitive data. The malware contains capabilities to "steal information from the...

PT-2025-11590

Name of the Vulnerable Software and Affected Versions Softdial Contact Center of Sytel Ltd affected versions not specified Description The issue is related to Stored Cross-Site Scripting XSS that allows an attacker to upload XML files with injected JavaScript code to the server via the...

CVE-2025-30117: Improper Authorization

An issue was discovered on the Forvia Hella HELLA Driving Recorder DR 820. Managing Settings and Obtaining Sensitive Data and Sabotaging the Car Battery can be performed by unauthorized parties. After bypassing the device pairing, an attacker can obtain sensitive user and vehicle information...