MAL-2025-25158 Malicious code in leopard-labyrinth-vpd730-project (npm)

The package leopard-labyrinth-vpd730-project was found to contain malicious code...

MAL-2025-24864 Malicious code in labyrinth-09y80-pq6ds-opal-project (npm)

The package labyrinth-09y80-pq6ds-opal-project was found to contain malicious code...

MAL-2025-24866 Malicious code in labyrinth-albatross-opo606-project (npm)

The package labyrinth-albatross-opo606-project was found to contain malicious code...

MAL-2025-31584 Malicious code in rainbow-labyrinth-voo528-project (npm)

The package rainbow-labyrinth-voo528-project was found to contain malicious code...

MAL-2025-21748 Malicious code in gorge-labyrinth-kqk027-project (npm)

The package gorge-labyrinth-kqk027-project was found to contain malicious code...

MAL-2025-24872 Malicious code in labyrinth-everest-rgd440-project (npm)

The package labyrinth-everest-rgd440-project was found to contain malicious code...

MAL-2025-24874 Malicious code in labyrinth-pucpz-0lb6l-utopia-project (npm)

The package labyrinth-pucpz-0lb6l-utopia-project was found to contain malicious code...

MAL-2025-36826 Malicious code in thistle-labyrinth-enw098-project (npm)

The package thistle-labyrinth-enw098-project was found to contain malicious code...

The vulnerability of “Laboratory Kasper” antivirus protection, related to an error in processing certain expressions, allows attackers to execute arbitrary code with privileges of SYSTEM.

The vulnerability of “Labyrinth Kasper” antivirus protection is related to an error in the processing of certain expressions. Exploiting this vulnerability allows a remote attacker to execute arbitrary code with SYSTEM privileges...

Friday Squid Blogging: 1994 Lair of Squid Game

I didnt know: In 1994, Hewlett-Packard released a miracle machine: the HP 200LX pocket-size PC. In the depths of the device, among the MS-DOS productivity apps built into its fixed memory, there lurked a first-person maze game called Lair of Squid. … In Lair of Squid, youre trapped in an underwat...

Meta Launches Default End-to-End Encryption for Chats and Calls on Messenger

Meta has officially begun to roll out support for end-to-end encryption E2EE in Messenger for personal calls and one-to-one personal messages by default in what it called the "most significant milestone yet." "This isn't a routine security update: we rebuilt the app from the ground up, in close...

North Korean State-Sponsored Hackers Suspected in JumpCloud Supply Chain Attack

An analysis of the indicators of compromise IoCs associated with the JumpCloud hack has uncovered evidence pointing to the involvement of North Korean state-sponsored groups, in a style that's reminiscent of the supply chain attack targeting 3CX. The findings come from SentinelOne, which mapped o...

North Korean Hackers Uncovered as Mastermind in 3CX Supply Chain Attack

Enterprise communications service provider 3CX confirmed that the supply chain attack targeting its desktop application for Windows and macOS was the handiwork of a threat actor with North Korean nexus. The findings are the result of an interim assessment conducted by Google-owned Mandiant, whose...

North Korean Hackers Uncovered as Mastermind in 3CX Supply Chain Attack

Enterprise communications service provider 3CX confirmed that the supply chain attack targeting its desktop application for Windows and macOS was the handiwork of a threat actor with North Korean nexus. The findings are the result of an interim assessment conducted by Google-owned Mandiant, whose...

CVE-2011-10002 weblabyrinth labyrinth.inc.php Labyrinth sql injection

A vulnerability classified as critical has been found in weblabyrinth 0.3.1. This affects the function Labyrinth of the file labyrinth.inc.php. The manipulation leads to sql injection. Upgrading to version 0.3.2 is able to address this issue. The identifier of the patch is...

WebLabyrinth SQL注入漏洞

WebLabyrinth is a simple tool by Rafael Rotelok personal developer. A scanner used to delay and occupy malicious scanning sites to detect event handlers and react to them before damage is done. WebLabyrinth version 0.3.1 suffers from a SQL injection vulnerability that stems from a problem with th...

PT-2023-9914 · Unknown · Weblabyrinth

Name of the Vulnerable Software and Affected Versions: weblabyrinth version 0.3.1 Description: A critical vulnerability has been found in weblabyrinth, affecting the Labyrinth function of the file labyrinth.inc.php. This issue leads to sql injection. Recommendations: For weblabyrinth version 0.3....

ZINC weaponizing open-source software

In recent months, Microsoft has detected a wide range of social engineering campaigns using weaponized legitimate open-source software by an actor we track as ZINC. Microsoft Threat Intelligence Center MSTIC observed activity targeting employees in organizations across multiple industries includi...

ZINC weaponizing open-source software

In recent months, Microsoft has detected a wide range of social engineering campaigns using weaponized legitimate open-source software by an actor we track as ZINC. Microsoft Threat Intelligence Center MSTIC observed activity targeting employees in organizations across multiple industries includi...

Kids Draw Maze Labyrinth - Base64 encoded String, Exported ContentProvider, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Kids Draw Maze Labyrinth published at the 'play' market has multiple vulnerabilities...