MAL-2025-2279 Malicious code in rexz-nsfw-detection (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f31922f88308b517c097c8e5d128be0f383ac6cb28abd2143e7dd9f6f21b0af3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2274 Malicious code in react-textfit-example (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cd133ed4ff9a23964d050578a197c7d8d9a45ba07d60f2d3b031b350bae49370 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2280 Malicious code in simple-export-map (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d44defb42445d3a7511f32616401e72a003e6eee8f3e47cd2ca1f41b4026f65b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-32123

creationtimestamp| type| source ---|---|--- 2025-03-11 17:37:47+00:00| seen| https://t.me/cvedetector/20100 2025-03-11 18:06:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lk4nsrk2m22x 2025-08-13 13:26:34+00:00| seen| MISP/682bdba3-46b7-4a8f-b7be-c6bf4b4f9868...

Detecting and Mitigating the Apache Camel Vulnerabilities

Akamai researchers have created detection scripts and additional details for the Apache Camel vulnerabilities CVE-2025-27636 and CVE-2025-29891...

Steganography Explained: How XWorm Hides Inside Images

Inside the most innocent-looking image, a breathtaking landscape, or a funny meme, something dangerous could be hiding, waiting for its moment to strike. No strange file names. No antivirus warnings. Just a harmless picture, secretly concealing a payload that can steal data, execute malware, and...

CVE-2025-2169

creationtimestamp| type| source ---|---|--- 2025-03-11 05:36:15+00:00| published-proof-of-concept| Telegram/nGCSDP4vCltArA3VXeokA5jE1t269Apyi28mkZBPrFAwc4I 2025-03-11 07:35:34+00:00| seen| https://t.me/cvedetector/20031 2025-03-11 08:00:33+00:00| seen|...

CVE-2025-27432

creationtimestamp| type| source ---|---|--- 2025-03-11 01:41:21+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/7083 2025-03-11 03:24:28+00:00| seen| https://t.me/cvedetector/20009 2025-03-11 03:51:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lk3625csfo2m...

Username Disclosure

Web Applications can sometimes expose web applications users in various places such as HTML comments, JavaScript code or API requests. By leveraging this information, an attacker can gather information and build further attacks against the target application. No source data...

Apache Tomcat RCE Vulnerability (Mar 2025) - Linux

Apache Tomcat is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Apache Guacamole Detected

This is an informational notice that the scanner was able to detect an Apache Guacamole instance on the target server. Note that this detection is included in the Remote Access Tools category. No source data...

RustDesk Console Detected

RustDesk is a mote access and control software that enables management of computers and other devices. RustDesk server Pro embeds a web console allowing users to browse devices and perform configuration modification on the application. By leveraging this, a remote and unauthenticated attacker cou...

Debian: Security Advisory (DLA-4082-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

GitLab Public Sign-Up Detected

This is an informational notice that the scanner was able to detect a GitLab public sign-up page on the target instance. No source data...

LiteLLM Detected

This is an informational plugin to inform the user that the scanner has detected a publicly accessible LiteLLM instance on the target application. LiteLLM is a LLM Gateway to provide model access in the OpenAI format. This detection is included in the AI and LLM category. No source data...

AirDroid Detected

This is an informational notice that the scanner was able to detect an AirDroid instance on the target server. Note that this detection is included in the Remote Access Tools category. No source data...

Docker Public Registry Detected

This is an informational notice that the scanner was able to detect a public Docker registry instance. No source data...

TSPlus Detected

This is an informational notice that the scanner was able to detect TSPlus on the target server. Note that this detection is included in the Remote Access Tools category. No source data...

OpenVPN Access Server Detected

This is an informational notice that the scanner was able to detect an OpenVPN Access Server on the target server. Note that this detection is included in the Remote Access Tools category. No source data...

Creating Scripts to Identify Vulnerable IMAP

This whitepaper covers how to create Nmap scripts to identify banners and versions of IMAP servers. It also covers methods to mitigate the public visibility of banners and version information on IMAP servers. Written in Portuguese...