1373 matches found
Salt Typhoon APT Targets Global Telecom and Energy Sectors, Says Darktrace
The China-linked Salt Typhoon APT group attacked a European telecom via a Citrix NetScaler vulnerability in July 2025, Darktrace reports. This follows past US Army and telecom breaches...
Malicious Package
Overview zdachboostv3 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
⚡ Weekly Recap: F5 Breached, Linux Rootkits, Pixnapping Attack, EtherHiding & More
It's easy to think your defenses are solid — until you realize attackers have been inside them the whole time. The latest incidents show that long-term, silent breaches are becoming the norm. The best defense now isn't just patching fast, but watching smarter and staying alert for what you don't...
GHSA-RMJR-87WV-GF87 Mammoth is vulnerable to Directory Traversal
Versions of the package mammoth from 0.3.25 and before 1.11.0; versions of the package mammoth from 0.3.25 and before 1.11.0; versions of the package mammoth before 1.11.0; versions of the package org.zwobble.mammoth:mammoth before 1.11.0 are vulnerable to Directory Traversal due to the lack of...
Malicious code in isg-iwp-web-client (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cd99ea1f73a0a8a60395dd908d6a970f8ab7861bec1eb627b70023c9716185ad Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2023-7304
creationtimestamp| type| source ---|---|--- 2025-10-15 09:06:57+00:00| seen| https://bsky.app/profile/basefortify.bsky.social/post/3m37vdav3hk2e 2025-10-16 21:02:36+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3m3dnrl7ciw26 2025-11-20 00:00:00+00:00| seen| The Shadowserver...
ai.catboost:catboost-spark_3.2_2.13 (>=1.0.6 <=1.2.10), ai.catboost:catboost-spark_3.3_2.13 (>=1.1.1 <=1.2.10) +317 more potentially affected by CVE-2025-55039 via org.apache.spark:spark-network-common_2.13 (>=3.2.0 <=3.4.3)
org.apache.spark:spark-network-common2.13 MAVEN version =3.2.0, =1.0.6, =1.1.1, =1.2, =0.0.25, =0.0.25, =0.0.25, =0.0.86, =0.0.14, =0.20, =1.1.3, =1.4.0, =1.5.0, =1.5.0, =1.8.0 and more Source cves: CVE-2025-55039 Source advisory: SNYK:JAVA-ORGAPACHESPARK-13553869...
Chinese Hackers Exploit ArcGIS Server as Backdoor for Over a Year
Threat actors with ties to China have been attributed to a novel campaign that compromised an ArcGIS system and turned it into a backdoor for more than a year. The activity, per ReliaQuest, is the handiwork of a Chinese state-sponsored hacking group called Flax Typhoon , which is also tracked as...
CVE-2025-58132
creationtimestamp| type| source ---|---|--- 2025-10-14 15:28:41+00:00| seen| https://bsky.app/profile/ripjyr.bsky.social/post/3m3626xxxtc2d...
Malicious code in optional-native-module-abc (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2ae21c7e7ad399a3a2a3bf0b58502513f2aa7d40e23bb801a75dd10e871bbf04 Any computer that has this package installed or running should be considered...
MAL-2025-48395 Malicious code in solhint-plugin-namechain (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ac5d2de76e0cbceedfea435f9f5d9ef240571f3e422835020e1efa99f9dba392 Any computer that has this package installed or running should be considered...
EUVD-2025-31831
A weakness has been identified in SourceCodester Hotel and Lodge Management System 1.0. The affected element is an unknown function of the file /pages/savecustomer.php. Executing manipulation of the argument Contact can lead to sql injection. The attack can be executed remotely. The exploit has...
EUVD-2025-31833
A vulnerability was detected in Kilo Code up to 4.86.0. Affected is the function ClineProvider of the file src/core/webview/ClineProvider.ts of the component Prompt Handler. Performing manipulation results in injection. The attack can be initiated remotely. The exploit is now public and may be...
Linux Distros Unpatched Vulnerability : CVE-2025-39918
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: mt76: fix linked list corruption Never leave scheduled wcid entries on the temporary on-stack list CVE-2025-39918 Note that Nessus relies on the presence ...
EUVD-2021-1854
Malware in sbrugna...
EUVD-2018-18809
Malware in sbrugna...
EUVD-2021-23563
Malware in sbrugna...
EUVD-2017-2333
Malware in sbrugna...