EUVD-2006-2640

Malware in sbrugna...

EUVD-2022-44746

Malicious code in bioql PyPI...

EUVD-2024-35536

Malicious code in bioql PyPI...

EUVD-2025-13782

Malicious code in bioql PyPI...

EUVD-2023-36827

Malicious code in bioql PyPI...

EUVD-2022-46462

Malicious code in bioql PyPI...

EUVD-2024-35527

Malicious code in bioql PyPI...

EUVD-2025-10741

Malicious code in bioql PyPI...

EUVD-2023-38285

Malicious code in bioql PyPI...

CVE-2025-58841

Incorrect Privilege Assignment vulnerability in John Luetke Media Author media-author allows Privilege Escalation.This issue affects Media Author: from n/a through = 1.0.4...

PT-2025-36180

Name of the Vulnerable Software and Affected Versions: Media Author versions n/a through 1.0.4 Description: An incorrect privilege assignment issue exists in Media Author, potentially allowing privilege escalation. Recommendations: Update Media Author to a version later than 1.0.4...

Penetration-Testing-on-Metasploitable2

Penetration-Testing-on-Metasploitable2...

Malicious code in node-red-contrib-john-temp (npm)

The package node-red-contrib-john-temp was found to contain malicious code...

MAL-2025-27642 Malicious code in node-red-contrib-john-temp (npm)

The package node-red-contrib-john-temp was found to contain malicious code...

KrebsOnSecurity in New ‘Most Wanted’ HBO Max Series

A new documentary series about cybercrime airing next month on HBO Max features interviews with Yours Truly. The four-part series follows the exploits of Julius Kivimäki , a prolific Finnish hacker recently convicted of leaking tens of thousands of patient records from an online psychotherapy...

NULL Pointer Dereference

Overview Affected versions of this package are vulnerable to NULL Pointer Dereference via the bfdelfgetstrsection function in the bfd/elf.c file. Remediation A fix was pushed into the master branch but not yet published. References - GitHub Commit - POC Credit: John Reiser...

PT-2025-27128 · Unknown · John Russell National Weather Service Alerts

Name of the Vulnerable Software and Affected Versions: John Russell National Weather Service Alerts versions 1.3.5 and earlier Description: The issue is related to an Improper Control of Filename for Include/Require Statement in PHP Program, also known as 'PHP Remote File Inclusion', which allows...

CVE-2024-35778

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in John West Slideshow SE PHP Local File Inclusion.This issue affects Slideshow SE: from n/a through 2.5.17...

CVE-2024-35769

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in John West Slideshow SE allows Stored XSS.This issue affects Slideshow SE: from n/a through 2.5.17...

CVE-2023-32584

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in John Newcombe eBecas plugin = 3.1.3 versions...