Chinese Hackers Exploit ArcGIS Server as Backdoor for Over a Year

Threat actors with ties to China have been attributed to a novel campaign that compromised an ArcGIS system and turned it into a backdoor for more than a year. The activity, per ReliaQuest, is the handiwork of a Chinese state-sponsored hacking group called Flax Typhoon , which is also tracked as...

CVE-2025-58132

creationtimestamp| type| source ---|---|--- 2025-10-14 15:28:41+00:00| seen| https://bsky.app/profile/ripjyr.bsky.social/post/3m3626xxxtc2d...

Malicious code in optional-native-module-abc (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2ae21c7e7ad399a3a2a3bf0b58502513f2aa7d40e23bb801a75dd10e871bbf04 Any computer that has this package installed or running should be considered...

MAL-2025-48395 Malicious code in solhint-plugin-namechain (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ac5d2de76e0cbceedfea435f9f5d9ef240571f3e422835020e1efa99f9dba392 Any computer that has this package installed or running should be considered...

EUVD-2025-31831

A weakness has been identified in SourceCodester Hotel and Lodge Management System 1.0. The affected element is an unknown function of the file /pages/savecustomer.php. Executing manipulation of the argument Contact can lead to sql injection. The attack can be executed remotely. The exploit has...

EUVD-2025-31833

A vulnerability was detected in Kilo Code up to 4.86.0. Affected is the function ClineProvider of the file src/core/webview/ClineProvider.ts of the component Prompt Handler. Performing manipulation results in injection. The attack can be initiated remotely. The exploit is now public and may be...

Linux Distros Unpatched Vulnerability : CVE-2025-39918

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: mt76: fix linked list corruption Never leave scheduled wcid entries on the temporary on-stack list CVE-2025-39918 Note that Nessus relies on the presence ...

EUVD-2018-18809

Malware in sbrugna...

EUVD-2021-1854

Malware in sbrugna...

EUVD-2017-2333

Malware in sbrugna...

EUVD-2020-25291

Malware in sbrugna...

EUVD-2021-26661

Malware in sbrugna...

EUVD-2010-4753

Malware in sbrugna...

EUVD-2021-23563

Malware in sbrugna...

EUVD-2020-1906

Malware in sbrugna...

EUVD-2020-30103

Malware in sbrugna...

EUVD-2010-3920

Malware in sbrugna...

EUVD-2020-20825

Malware in sbrugna...

EUVD-2021-23988

Malware in sbrugna...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414367)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414367 advisory. A list management bug in BSS handling in the mac80211 stack in the Linux kernel 5.1 through 5.19.x before 5.19.16 could be used by local attackers able to inject WLA...