DOUBLECUP Uses ClickFix and Cached PNGs to Deliver CountLoader and DeviceManager RAT

A new Russian loader-as-a-service LaaS codenamed DOUBLECUP has been using ClickFix lures as a way to stage malware-laced PNG images in victims' browser cache and ultimately deliver CountLoader and a previously undocumented remote access trojan called DeviceManager. "The first stage drops a...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: deepin-devicemanager (UTSA-2025-986179)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986179 advisory. com.deepin.devicemanager.execCmd Tenable has extracted the preceding description block directly from the Unity Linux security advisory. Note that Nessus has not test...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: deepin-devicemanager (UTSA-2025-986176)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986176 advisory. deepin-devicemanagercom.deepin.devicemanager.execCmd Tenable has extracted the preceding description block directly from the Unity Linux security advisory. Note that...

EUVD-2015-2357

Malware in sbrugna...

EUVD-2024-49538

Malicious code in bioql PyPI...

EUVD-2025-23736

Malicious code in bioql PyPI...

EUVD-2025-23735

Malicious code in bioql PyPI...

Huawei HarmonyOS devicemanager module out-of-bounds read vulnerability

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. An out-of-bounds read vulnerability exists in the Huawei HarmonyOS devicemanager module, which can be exploited by attackers to affect availability...

Huawei HarmonyOS devicemanager bind authentication bypass vulnerability

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A bind authentication bypass vulnerability exists in Huawei HarmonyOS devicemanager, which can be exploited by an attacker to compromise confidentiality...

CVE-2025-54623

Out-of-bounds read vulnerability in the devicemanager module. Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2025-54622

Binding authentication bypass vulnerability in the devicemanager module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2025-54623

Out-of-bounds read vulnerability in the devicemanager module. Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2025-54623

Out-of-bounds read vulnerability in the devicemanager module. Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2025-54622

Binding authentication bypass vulnerability in the devicemanager module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2025-54622

Binding authentication bypass vulnerability in the devicemanager module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2025-54623

Out-of-bounds read vulnerability in the devicemanager module. Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2025-54623

Huawei HarmonyOS devicemanager module contains an out-of-bounds read vulnerability (CVE-2025-54623) that may affect availability. Affected component is the devicemanager module in HarmonyOS; root cause described as an out-of-bounds read. The CVE documents do not specify exact affected versions or...

CVE-2025-54622

Binding authentication bypass vulnerability in the devicemanager module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2025-54622

Binding authentication bypass vulnerability in the devicemanager module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2025-54622

CVE-2025-54622 affects Huawei HarmonyOS devicemanager module, with a binding authentication bypass vulnerability that can lead to confidentiality impact. Connected sources indicate affected software (HarmonyOS) and the module (devicemanager), but do not provide concrete vulnerable versions or a c...