New Coyote Malware Variant Exploits Windows UI Automation to Steal Banking Credentials

The Windows banking trojan known as Coyote has become the first known malware strain to exploit the Windows accessibility framework calledUI AutomationUIA to harvest sensitive information. "The new Coyote variant is targeting Brazilian users, and uses UIA to extract credentials linked to 75 banki...

OESA-2025-1863 python-cryptography security update

cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. Security Fixes: A flaw was found in the python-cryptography package. This issue may allow a remote attacker to decrypt captured messages in TLS servers that use RSA key exchanges, which may lea...

Transaction Proximity: a Graph-Based Approach to Blockchain Fraud Prevention

This paper introduces a fraud-deterrent access validation system for public blockchains, leveraging two complementary concepts: "Transaction Proximity", which measures the distance between wallets in the transaction graph, and "Easily Attainable Identities EAIs", wallets with direct transaction...

A Quantitative Notion of Economic Security for Smart Contract Compositions

Decentralized applications are often composed of multiple interconnected smart contracts. This is especially evident in DeFi, where protocols are heavily intertwined and rely on a variety of basic building blocks such as tokens, decentralized exchanges and lending protocols. A crucial security...

Centralized Trust in Decentralized Systems: Unveiling Hidden Contradictions in Blockchain and Cryptocurrency

Blockchain technology promises to democratize finance and promote social equity through decentralization, but questions remain about whether current implementations advance or hinder these goals. Through a mixed-methods study combining semi-structured interviews with 13 diverse blockchain...

CVE-2025-46348

creationtimestamp| type| source ---|---|--- 2025-04-28 16:51:05+00:00| published-proof-of-concept| https://github.com/YesWiki/yeswiki/security/advisories/GHSA-wc9g-6j9w-hr95 2025-04-29 21:10:02+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114423300046150064 2025-04-29 21:13:32+00:00|...

Denial Of Service (DoS)

golang.org/x/crypto are vulnerable to a Denial Of Service DoS. The vulnerability is due to incomplete or slow key exchanges, which cause pending content to be read into memory but never transmitted, allowing an attacker to consume server resources and cause a denial of service...

CVE-2025-30334

creationtimestamp| type| source ---|---|--- 2025-03-20 21:16:48+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114196834383227856 2025-03-20 22:18:58+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8304 2025-03-20 22:30:49+00:00| seen|...

CVE-2024-57971

creationtimestamp| type| source ---|---|--- 2025-02-16 03:52:00+00:00| seen| https://infosec.exchange/users/cve/statuses/114011532176024665 2025-02-16 04:15:35+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3libeogjmwv2n 2025-02-16 04:48:33+00:00| seen|...

CVE-2025-1053

creationtimestamp| type| source ---|---|--- 2025-02-14 03:53:45+00:00| seen| https://infosec.exchange/users/cve/statuses/114000214432857665 2025-02-14 04:15:58+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3li4drbe6a62p 2025-02-14 04:35:23+00:00| seen|...

GHSA-WG33-5H85-7Q5P

creationtimestamp| type| source ---|---|--- 2025-02-06 17:54:47+00:00| seen| https://infosec.exchange/users/cve/statuses/113958223039348997 2025-02-06 17:56:56+00:00| seen| https://infosec.exchange/users/cR0w/statuses/113958231450838584 2025-02-06 19:00:35+00:00| published-proof-of-concept|...

CVE-2025-24981

creationtimestamp| type| source ---|---|--- 2025-02-06 13:46:57+00:00| published-proof-of-concept| https://github.com/nuxt-content/mdc/security/advisories/GHSA-j82m-pc2v-2484 2025-02-06 17:28:26+00:00| seen| https://infosec.exchange/users/cve/statuses/113958119425687178 2025-02-06 18:16:41+00:00|...

CVE-2025-24390

creationtimestamp| type| source ---|---|--- 2025-01-27 06:16:29+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgpc476wbo27 2025-01-27 06:49:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lgpdxjk3tk2r 2025-01-27 07:06:47+00:00| seen|...

CVE-2024-52333

creationtimestamp| type| source ---|---|--- 2025-01-13 14:22:15+00:00| seen| https://infosec.exchange/users/cve/statuses/113821491830819005 2025-01-13 15:15:26+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfmzoz67mw2p 2025-01-13 15:42:45+00:00| seen|...

SUSE CVE-2025-0306

A vulnerability was found in Ruby. The Ruby interpreter is vulnerable to the Marvin Attack. This attack allows the attacker to decrypt previously encrypted messages or forge signatures by exchanging a large number of messages with the vulnerable service...

CVE-2025-0306

A vulnerability was found in Ruby. The Ruby interpreter is vulnerable to the Marvin Attack. This attack allows the attacker to decrypt previously encrypted messages or forge signatures by exchanging a large number of messages with the vulnerable service...

CVE-2023-47523

creationtimestamp| type| source ---|---|--- 2025-01-02 12:17:49+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ler2nclgsc2a 2025-01-02 15:23:14+00:00| seen| https://infosec.exchange/users/cve/statuses/113759446238521523...

PT-2026-5509

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel's Btrfs file system related to inode handling during rename operations and log replay. Specifically, the issue arises after a rename exchange involving...

CVE-2024-55956

creationtimestamp| type| source ---|---|--- 2024-12-13 21:21:03+00:00| seen| https://infosec.exchange/users/catc0n/statuses/113647607008214402 2024-12-13 23:18:15+00:00| seen| https://t.me/cvedetector/12902 2024-12-15 10:09:25+00:00| seen|...

CVE-2024-42453

creationtimestamp| type| source ---|---|--- 2024-12-03 18:19:48+00:00| seen| https://infosec.exchange/users/screaminggoat/statuses/113590271100041825 2024-12-04 01:57:53+00:00| seen| https://infosec.exchange/users/cve/statuses/113592072421345224 2024-12-04 04:12:29+00:00| seen|...