China-Linked UAT-7290 Targets Telecoms with Linux Malware and ORB Nodes

A China-nexus threat actor known as UAT-7290 has been attributed to espionage-focused intrusions against entities in South Asia and Southeastern Europe. The activity cluster, which has been active since at least 2022, primarily focuses on extensive technical reconnaissance of target organizations...

RHSA-2026:0074

creationtimestamp| type| source ---|---|--- 2026-01-07 08:07:26+00:00| seen| https://gist.github.com/Darkcrai86/68c063b61124676f24152a465f2a20ca...

MAL-2026-39 Malicious code in spire.officejs-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d5bc6046960bccab3120bb794cc2c868fa2bb41e0d35028f39e2e9ca9033a80 The package spire.officejs-common was found to contain malicious code. Source: ossf-package-analysis...

CVE-2025-48768

creationtimestamp| type| source ---|---|--- 2025-12-31 19:18:53+00:00| seen| https://seclists.org/oss-sec/2025/q4/355 2025-12-31 20:45:14+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mbcqatc2xd2w 2026-01-01 18:54:25+00:00| seen|...

CVE-2025-15195

A vulnerability was determined in code-projects Assessment Management 1.0. Affected by this issue is some unknown functionality of the file /admin/add-module.php. This manipulation of the argument linked causes sql injection. The attack can be initiated remotely. The exploit has been publicly...

EUVD-2025-205608

A vulnerability was determined in code-projects Assessment Management 1.0. Affected by this issue is some unknown functionality of the file /admin/add-module.php. This manipulation of the argument linked causes sql injection. The attack can be initiated remotely. The exploit has been publicly...

CVE-2025-15195

A vulnerability was determined in code-projects Assessment Management 1.0. Affected by this issue is some unknown functionality of the file /admin/add-module.php. This manipulation of the argument linked causes sql injection. The attack can be initiated remotely. The exploit has been publicly...

CVE-2025-15195

A vulnerability was determined in code-projects Assessment Management 1.0. Affected by this issue is some unknown functionality of the file /admin/add-module.php. This manipulation of the argument linked causes sql injection. The attack can be initiated remotely. The exploit has been publicly...

CVE-2025-15195

Code-Projects Assessment Management 1.0 is affected. The vulnerability lies in /admin/add-module.php where manipulating the linked[] parameter enables SQL injection. The issue can be exploited remotely and exploits have been publicly disclosed. Multiple sources corroborate the SQLi risk and remot...

Picklescan does not block ctypes

Summary Picklescan doesnt flag ctypes module as a dangerous module, which is a huge issue. ctypes is basically a foreign function interface library and can be used to Load DLLs Call C functions directly Manipulate memory raw pointers. This can allow attackers to achieve RCE by invoking direct...

CVE-2025-15181

creationtimestamp| type| source ---|---|--- 2025-12-29 12:18:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mb4sz6bckm2u...

PT-2025-53742

Name of the Vulnerable Software and Affected Versions code-projects Assessment Management version 1.0 Description A SQL injection issue exists due to manipulation of the linked argument within the /admin/add-module.php file. This manipulation affects some unknown functionality. The attack can be...

CVE-2024-30167

creationtimestamp| type| source ---|---|--- 2025-12-27 15:00:07+00:00| published-proof-of-concept| Telegram/jzwMWime8fhSscH30BIVAvpGgHaIHZPVce6IatouQmqqRA 2026-04-29 05:31:07+00:00| seen| https://bsky.app/profile/exploitdb-bot.bsky.social/post/3mkmensmnki2g...

SUSE CVE-2023-54043

In the Linux kernel, the following vulnerability has been resolved: iommufd: Do not add the same hwpt to the ioas-hwptlist twice The hwpt is added to the hwptlist only during its creation, it is never added again. This hunk is some missed leftover from rework. Adding it twice will corrupt the...

EUVD-2023-60283

In the Linux kernel, the following vulnerability has been resolved: iommufd: Do not add the same hwpt to the ioas-hwptlist twice The hwpt is added to the hwptlist only during its creation, it is never added again. This hunk is some missed leftover from rework. Adding it twice will corrupt the...

CVE-2024-25183

creationtimestamp| type| source ---|---|--- 2025-12-24 14:22:52+00:00| seen| https://gist.github.com/joaoviictorti/db387ef5ea3d35482c5ad4598d945b2f 2025-12-29 22:29:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mb5v5noghq2u...

CVE-2025-68505

creationtimestamp| type| source ---|---|--- 2025-12-24 13:50:32+00:00| seen| https://gist.github.com/Darkcrai86/e369efab61cb9559e825a02fc169db07 2025-12-26 01:25:13+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mau53nl52b22...

CVE-2023-54043

In the Linux kernel, the following vulnerability has been resolved: iommufd: Do not add the same hwpt to the ioas-hwptlist twice The hwpt is added to the hwptlist only during its creation, it is never added again. This hunk is some missed leftover from rework. Adding it twice will corrupt the...

CVE-2023-54043 iommufd: Do not add the same hwpt to the ioas->hwpt_list twice

In the Linux kernel, the following vulnerability has been resolved: iommufd: Do not add the same hwpt to the ioas-hwptlist twice The hwpt is added to the hwptlist only during its creation, it is never added again. This hunk is some missed leftover from rework. Adding it twice will corrupt the...

CVE-2023-54043 iommufd: Do not add the same hwpt to the ioas->hwpt_list twice

In the Linux kernel, the following vulnerability has been resolved: iommufd: Do not add the same hwpt to the ioas-hwptlist twice The hwpt is added to the hwptlist only during its creation, it is never added again. This hunk is some missed leftover from rework. Adding it twice will corrupt the...