CVE-2025-20301 Cisco Secure Firewall Management Center Software Authorization Bypass Vulnerability

A vulnerability in the web-based management interface of Cisco Secure FMC Software could allow an authenticated, low-privileged, remote attacker to access troubleshoot files for a different domain. This vulnerability is due to missing authorization checks. An attacker could exploit this...

CVE-2025-8047

The disable-right-click-powered-by-pixterme through v1.2 and pixter-image-digital-license thtough v1.0 WordPress plugins load a JavaScript file which has been compromised from an apparent abandoned S3 bucket. It can be used as a backdoor by those who control it, but it currently displays an alert...

CVE-2025-8047

A supply chain compromise affects the disable-right-click-powered-by-pixterme (versions through 1.2) and pixter-image-digital-license (versions through 1.0) WordPress plugins. The vulnerability occurs because these plugins load a JavaScript file from a compromised, abandoned S3 bucket. This flaw ...

svg-sanitizer Bypasses Attribute Sanitization

Problem The sanitization logic at https://github.com/darylldoyle/svg-sanitizer/blob/0.21.0/src/Sanitizer.phpL454-L481 only searches for lower-case attribute names e.g. xlink:href instead of xlink:HrEf, which allows to by-pass the isHrefSafeValue check. As a result this allows cross-site scripting...

CVE-2025-55166

savg-sanitizer is a PHP SVG/XML sanitizer. Prior to version 0.22.0, the sanitization logic in the cleanXlinkHrefs method only searches for lower-case attribute name, which allows to by-pass the isHrefSafeValue check. As a result this allows cross-site scripting or linking to external domains. Thi...

Linux Distros Unpatched Vulnerability : CVE-2023-52645

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: pmdomain: mediatek: fix race conditions with genpd If the power domains are registered first...

BIT-LIBPYTHON-2025-0938 URL parser allowed square brackets in domain names

The Python standard library functions urllib.parse.urlsplit and urlparse accepted domain names that included square brackets which isn't valid according to RFC 3986. Square brackets are only meant to be used as delimiters for specifying IPv6 and IPvFuture hosts in URLs. This could result in...

Chimera: Harnessing Multi-Agent LLMs for Automatic Insider Threat Simulation

Insider threats, which can lead to severe losses, remain a major security concern. While machine learning-based insider threat detection ITD methods have shown promising results, their progress is hindered by the scarcity of high-quality data. Enterprise data is sensitive and rarely accessible,...

Linux Distros Unpatched Vulnerability : CVE-2024-46703

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: Revert serial: 8250omap: Set the console genpd always on if no console suspend This reverts...

MAL-2025-6804 Malicious code in sendbird-visual-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c99c539ebeed9289f0f603fbfe2d80bc9fe35f624bbd036ad397617db3be8de2 The OpenSSF Package Analysis project identified 'sendbird-visual-test' @ 11001.0.1 npm as malicious. It is considered malicious because: - The...

MAL-2025-6800 Malicious code in sendbird-docs-validation (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6b8e9f1e70bd8605ecac970f5651ab351d6560a0001119746388c77f590ba4d4 The OpenSSF Package Analysis project identified 'sendbird-docs-validation' @ 1005.0.1 npm as malicious. It is considered malicious because: - Th...

15,000 Fake TikTok Shop Domains Deliver Malware, Steal Crypto via AI-Driven Scam Campaign

Cybersecurity researchers have lifted the veil on a widespread malicious campaign that's targeting TikTok Shop users globally with an aim to steal credentials and distribute trojanized apps. "Threat actors are exploiting the official in-app e-commerce platform through a dual attack strategy that...

15,000 Fake TikTok Shop Domains Deliver Malware, Steal Crypto via AI-Driven Scam Campaign

Cybersecurity researchers have lifted the veil on a widespread malicious campaign that's targeting TikTok Shop users globally with an aim to steal credentials and distribute trojanized apps. "Threat actors are exploiting the official in-app e-commerce platform through a dual attack strategy that...

MAL-2025-6678 Malicious code in ledger-provider (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 213b191babc7191e43f7c5440581518cecd61302d3870b5fbbe6f20266b8e9cf The OpenSSF Package Analysis project identified 'ledger-provider' @ 1337.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2025-6677 Malicious code in undeface-test-3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5d434f28a3308a27549e2074866ae549681568f517ab1c783d210924f5d827f0 The OpenSSF Package Analysis project identified 'undeface-test-3' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

Cybercriminals Use Fake Apps to Steal Data and Blackmail Users Across Asia’s Mobile Networks

Cybersecurity researchers have discovered a new, large-scale mobile malware campaign that's targeting Android and iOS platforms with fake dating, social networking, cloud storage, and car service apps to steal sensitive personal data. The cross-platform threat has been codenamed SarangTrap by...

MAL-2025-6259 Malicious code in fuzzponent (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7c090409f91fd478642c58e1c30b8fc667878e0128355fb88448e4ebed4d8aa9 Any computer that has this package installed or running should be considered...

Operation Checkmate: BlackSuit Ransomware’s Dark Web Domains Seized

International law enforcement agencies, including the FBI and Europol, have successfully seized the infrastructure of the notorious BlackSuit ransomware gang in Operation Checkmate. This article details the takedown, BlackSuit's origins, and the ongoing fight against evolving cyber threats...

MAL-2025-6239 Malicious code in scheduler-builtin (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9238549a48f542b04214bdd11a30353e38a60a8838caafb36557ef1225cf6fd8 Any computer that has this package installed or running should be considered...

Watch out: Instagram users targeted in novel phishing campaign

A phishing campaign targeting Instagram users is doing the rounds. There are plenty of those around, but when we took a look at this particular email, it seemed a bit different to the normal phishing emails that point to scammy websites. The email looked like this, which is very similar to the on...