Next.js Middleware Authorization Bypass Scanner

This module detects self-hosted Next.js applications affected by CVE-2025-29927, an authorization bypass in the middleware layer. Next.js tags its own internal subrequests with the x-middleware-subrequest header and skips middleware when it sees it. The header is trusted without verifying it...

Apache Wicket Detection Consolidation

Consolidation of Apache Wicket detections. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only include"pluginfeedinfo.inc"; if description...

GIMP (Windows SMB Login)

SMB login-based detection of GIMP. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.836058";...

SUSE: Security Advisory (SUSE-SU-2025:0954-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory (FEDORA-2025-b2bdcfedac)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2025-26853

creationtimestamp| type| source ---|---|--- 2025-03-20 20:19:33+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/8282 2025-03-20 21:23:36+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114196861140560414 2025-03-20 23:09:08+00:00| seen|...

Tomorrow, and tomorrow, and tomorrow: Information security and the Baseball Hall of Fame

Welcome to this week's edition of the Threat Source newsletter. "Tomorrow, and tomorrow, and tomorrow / Creeps in this petty pace from day to day / To the last syllable of recorded time." - Shakespeare's Macbeth "But I am very poorly today and very stupid and I hate everybody and everything. One...

Rooted Androids 3,000x More Likely to Be Breached, Even iPhones Not Safe

A new Zimperium report reveals that rooted Android phones and jailbroken iOS devices face growing threats, with advanced toolkits making detection nearly impossible for cybersecurity researchers...

MAL-2025-2562 Malicious code in com.unity.performance.profile-analyzer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0af641db458fc7a8378ef6660e94aa21d6e8a8662aa90cc72412d909765b39d0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-9418

creationtimestamp| type| source ---|---|--- 2025-03-20 14:04:36+00:00| seen| https://bsky.app/profile/potato.software/post/3lksuj4gzf42u...

CVE-2024-8502

creationtimestamp| type| source ---|---|--- 2025-03-20 11:40:41+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3lksmhqyh7k2g...

CVE-2024-11167

creationtimestamp| type| source ---|---|--- 2025-03-20 11:40:24+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3lksmhb2c3v2u...

CVE-2025-0508

creationtimestamp| type| source ---|---|--- 2025-03-20 10:19:35+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8194 2025-03-20 13:03:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lksr45eq3b2k 2025-03-20 13:13:00+00:00| seen| https://t.me/cvedetector/20...

CVE-2024-12580

A vulnerability in danny-avila/librechat prior to version 0.7.6 allows for logs debug injection. The parameters sessionId, fileId, userId, and fileid in the /code/download/:sessionId/:fileId and /download/:userId/:fileid APIs are not validated or filtered, leading to potential log injection...

Detecting and Mitigating Apache Tomcat CVE-2025-24813

...

MAL-2025-3143 Malicious code in arnotest (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 64475736790097a8b2e30db87aa02796673e4a50b3af8e0d633eb261ec376983 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-30092

creationtimestamp| type| source ---|---|--- 2025-03-19 23:00:18+00:00| seen| https://t.me/cvedetector/20669 2025-03-20 00:49:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lkri2jypfu26...

CVE-2025-26475

creationtimestamp| type| source ---|---|--- 2025-03-19 18:43:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lkqtnbfvtu26 2025-03-19 18:49:29+00:00| seen| https://t.me/cvedetector/20652...

CVE-2025-29924 XWiki uses the wrong wiki reference in AuthorizationManager

XWiki Platform is a generic wiki platform. Prior to 15.10.14, 16.4.6, and 16.10.0-rc-1, it's possible for an user to get access to private information through the REST API - but could also be through another API - when a sub wiki is using "Prevent unregistered users to view pages". The...

CVE-2025-29924

XWiki Platform contains an authorization bypass in subwikis that can expose private information via the REST API (and potentially other APIs) when rights like “Prevent unregistered users to view pages” or “Prevent unregistered users to edit pages” are enabled. Affected versions: before 15.10.14, ...