Fake Voicemail Emails Install UpCrypter Malware on Windows

FortiGuard Labs warns of a global phishing campaign that delivers UpCrypter malware, giving hackers complete control of infected…...

CVE-2025-55105

There is a stored Cross-site Scripting vulnerability in Esri Portal for ArcGIS Enterprise Sites versions 10.9.1 – 11.4 that may allow a remote, authenticated attacker to inject malicious a file with an embedded xss script which when loaded could potentially execute arbitrary JavaScript code in th...

ROS-20250822-18

A vulnerability in the 2D component of the Oracle Java SE software platform and Oracle GraalVM for JDK and Oracle GraalVM Enterprise Edition virtual machines is related to insufficient input validation. and Oracle GraalVM Enterprise Edition virtual machines is related to insufficient input...

ROS-20250822-17

A vulnerability in the 2D component of the Oracle Java SE software platform and Oracle GraalVM for JDK and Oracle GraalVM Enterprise Edition virtual machines is related to insufficient input validation. and Oracle GraalVM Enterprise Edition virtual machines is related to insufficient input...

PT-2025-34281 · Esri · Esri Portal For Arcgis Enterprise Sites

Name of the Vulnerable Software and Affected Versions: Esri Portal for ArcGIS Enterprise Sites versions 10.9.1 through 11.4 Description: A stored Cross-site Scripting issue exists that may allow a remote, authenticated attacker to inject a malicious file containing an XSS script. When loaded, thi...

KuWFi 4G AC900 安全漏洞

KuWFi 4G AC900 is a WiFi router from KuWFi China. A security vulnerability exists in the KuWFi 4G AC900 version 1.0.13, which originates from a command injection in the HTTP API endpoint that could lead to full system control...

The vulnerability of Trendnet’s microprogrammed router software TEW-822DRE allows a hacker to escalate their privileges and gain full control over the device.

The vulnerability of the Trendnet TEW-822DRE router microprogramming system’s demon vftpd software is related to incorrect privilege assignments. Exploiting this vulnerability can allow an attacker to enhance their privileges and gain full control over the device...

The vulnerability of the monitoring and control device for solar energy systems, Tigo Cloud Connect Advanced (CCA), arises from the use of strictly encrypted account data. This allows attackers to circumvent security restrictions, gain increased privileges, and obtain full control over the device.

The vulnerability of the monitoring and control device for solar energy systems, Tigo Cloud Connect Advanced CCA, lies in the use of strictly encrypted account data. Exploiting this vulnerability allows a malicious actor to bypass security restrictions, gain increased privileges, and obtain full...

The vulnerability of the Sparkle framework on the Oracle Java SE software platform arises from the ability to expose files or directories to external parties. This allows a perpetrator to bypass the signature verification mechanism and gain full control over the application.

The vulnerability of the Sparkle framework on the Oracle Java SE software platform relates to the exposure of files or directories to external parties. Exploiting this vulnerability could allow an attacker to bypass the EdDSA signature verification and gain full control over the application...

Malicious code in @sys711/my-npx-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f4c05684044741c67899c2f0bd5728540fec66f7e4f62a44542006c938e0c550 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in react-stylizer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 812122411d8ab81ce837c1af7272056e2f1dd88b413f290021a615d5ad03524e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

The vulnerability of the Strategic Planner Starter App component in the Oracle Application Express development environment allows a hacker to gain full control over the application.

The vulnerability of the Strategic Planner Starter App component in the Oracle Application Express development environment is related to the redirection of URLs to an unreliable website. Exploiting this vulnerability can allow a malicious actor to gain full control over the application...

The vulnerability of Trend Micro Worry-Free Business Security (WFBS) and Worry-Free Business Security Services (WFBSS) lies in the lack of authentication for a critical function, allowing attackers to gain full control over the application.

The vulnerability of Trend Micro Worry-Free Business Security WFBS and Worry-Free Business Security Services WFBSS lies in the lack of authentication for a critical function. Exploiting this vulnerability can allow an attacker, operating remotely, to gain full control over the application...

The vulnerability of the Install component of the Oracle Java SE software platform allows a perpetrator to gain full control over the application.

The vulnerability of the Install component of the Oracle Java SE software platform is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain full control over the application...

Malicious code in api-key-provider (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0a88a62f8ea00d632d4e82aaad35c4ba5fc30f8c8974e967235a721edb9df9c6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in nf-cons-log (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e638446c9e65c64ab2f4781b57b182ae1de4c1da746270215e07e09992fc954e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in kiwi-module-recommendations (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f83d5585ffa8a9b91652a5a6696f15e108b45a86acc0edbe6ae6afb7ba4b0cd7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

The vulnerability of Oracle Java SE’s 2D software platform and the Oracle GraalVM virtual machine allows a hacker to gain full control over the application.

The vulnerability of the Oracle Java SE 2D software platform and the Oracle GraalVM Enterprise Edition virtual machine is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain full control over the application...

The vulnerability of the Oracle Database component of the Oracle Database Server system allows a hacker to gain full control over the application.

The vulnerability of the Oracle Database component of the Oracle Database Server system is related to deficiencies in the authentication process. Exploiting this vulnerability can allow a malicious actor to gain full control over the application...

Malicious code in jsonli-conf (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8e8776bc06346e1791322c97de75dbe5905bb93e7c671205b1d3fec085ac75db Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...