MAL-2025-28086 Malicious code in ocean-7fbyh-tax4c-labyrinth-project (npm)

The package ocean-7fbyh-tax4c-labyrinth-project was found to contain malicious code...

MAL-2025-26666 Malicious code in moon-labyrinth-hqq240-project (npm)

The package moon-labyrinth-hqq240-project was found to contain malicious code...

Malicious code in leopard-labyrinth-vpd730-project (npm)

The package leopard-labyrinth-vpd730-project was found to contain malicious code...

Malicious code in labyrinth-sapphire-byr950-project (npm)

The package labyrinth-sapphire-byr950-project was found to contain malicious code...

Malicious code in labyrinth-ufvpn-egdh0-emerald-project (npm)

The package labyrinth-ufvpn-egdh0-emerald-project was found to contain malicious code...

Malicious code in labyrinth-cliff-zmj835-project (npm)

The package labyrinth-cliff-zmj835-project was found to contain malicious code...

Malicious code in labyrinth-trcek-88blj-celestial-project (npm)

The package labyrinth-trcek-88blj-celestial-project was found to contain malicious code...

Malicious code in labyrinth-volcano-gsh193-project (npm)

The package labyrinth-volcano-gsh193-project was found to contain malicious code...

Laboratory Kasper Code Execution

The vulnerability of “Labyrinth Kasper” antivirus protection is related to an error in the processing of certain expressions. Exploiting this vulnerability allows a remote attacker to execute arbitrary code with SYSTEM privileges...

Friday Squid Blogging: 1994 Lair of Squid Game

I didnt know: In 1994, Hewlett-Packard released a miracle machine: the HP 200LX pocket-size PC. In the depths of the device, among the MS-DOS productivity apps built into its fixed memory, there lurked a first-person maze game called Lair of Squid. … In Lair of Squid, youre trapped in an underwat...

Meta Launches Default End-to-End Encryption for Chats and Calls on Messenger

Meta has officially begun to roll out support for end-to-end encryption E2EE in Messenger for personal calls and one-to-one personal messages by default in what it called the "most significant milestone yet." "This isn't a routine security update: we rebuilt the app from the ground up, in close...

North Korean State-Sponsored Hackers Suspected in JumpCloud Supply Chain Attack

An analysis of the indicators of compromise IoCs associated with the JumpCloud hack has uncovered evidence pointing to the involvement of North Korean state-sponsored groups, in a style that's reminiscent of the supply chain attack targeting 3CX. The findings come from SentinelOne, which mapped o...

North Korean Hackers Uncovered as Mastermind in 3CX Supply Chain Attack

Enterprise communications service provider 3CX confirmed that the supply chain attack targeting its desktop application for Windows and macOS was the handiwork of a threat actor with North Korean nexus. The findings are the result of an interim assessment conducted by Google-owned Mandiant, whose...

North Korean Hackers Uncovered as Mastermind in 3CX Supply Chain Attack

Enterprise communications service provider 3CX confirmed that the supply chain attack targeting its desktop application for Windows and macOS was the handiwork of a threat actor with North Korean nexus. The findings are the result of an interim assessment conducted by Google-owned Mandiant, whose...

CVE-2011-10002 weblabyrinth labyrinth.inc.php Labyrinth sql injection

A vulnerability classified as critical has been found in weblabyrinth 0.3.1. This affects the function Labyrinth of the file labyrinth.inc.php. The manipulation leads to sql injection. Upgrading to version 0.3.2 is able to address this issue. The identifier of the patch is...

WebLabyrinth SQL注入漏洞

WebLabyrinth is a simple tool by Rafael Rotelok personal developer. A scanner used to delay and occupy malicious scanning sites to detect event handlers and react to them before damage is done. WebLabyrinth version 0.3.1 suffers from a SQL injection vulnerability that stems from a problem with th...

PT-2023-9914 · Unknown · Weblabyrinth

Name of the Vulnerable Software and Affected Versions: weblabyrinth version 0.3.1 Description: A critical vulnerability has been found in weblabyrinth, affecting the Labyrinth function of the file labyrinth.inc.php. This issue leads to sql injection. Recommendations: For weblabyrinth version 0.3....

CVE-2011-10002: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in weblabyrinth 0.3.1. This affects the function Labyrinth of the file labyrinth.inc.php. The manipulation leads to sql injection. Upgrading to version 0.3.2 is able to address this issue. The identifier of the patch is...

ZINC weaponizing open-source software

In recent months, Microsoft has detected a wide range of social engineering campaigns using weaponized legitimate open-source software by an actor we track as ZINC. Microsoft Threat Intelligence Center MSTIC observed activity targeting employees in organizations across multiple industries includi...

ZINC weaponizing open-source software

In recent months, Microsoft has detected a wide range of social engineering campaigns using weaponized legitimate open-source software by an actor we track as ZINC. Microsoft Threat Intelligence Center MSTIC observed activity targeting employees in organizations across multiple industries includi...