1604 matches found
⚡ Weekly Recap: F5 Breached, Linux Rootkits, Pixnapping Attack, EtherHiding & More
It's easy to think your defenses are solid — until you realize attackers have been inside them the whole time. The latest incidents show that long-term, silent breaches are becoming the norm. The best defense now isn't just patching fast, but watching smarter and staying alert for what you don't...
GHSA-RMJR-87WV-GF87 Mammoth is vulnerable to Directory Traversal
Versions of the package mammoth from 0.3.25 and before 1.11.0; versions of the package mammoth from 0.3.25 and before 1.11.0; versions of the package mammoth before 1.11.0; versions of the package org.zwobble.mammoth:mammoth before 1.11.0 are vulnerable to Directory Traversal due to the lack of...
Malicious code in isg-iwp-web-client (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cd99ea1f73a0a8a60395dd908d6a970f8ab7861bec1eb627b70023c9716185ad Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2023-7304
creationtimestamp| type| source ---|---|--- 2025-10-15 09:06:57+00:00| seen| https://bsky.app/profile/basefortify.bsky.social/post/3m37vdav3hk2e 2025-10-16 21:02:36+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3m3dnrl7ciw26 2025-11-20 00:00:00+00:00| seen| The Shadowserver...
Chinese Hackers Exploit ArcGIS Server as Backdoor for Over a Year
Threat actors with ties to China have been attributed to a novel campaign that compromised an ArcGIS system and turned it into a backdoor for more than a year. The activity, per ReliaQuest, is the handiwork of a Chinese state-sponsored hacking group called Flax Typhoon , which is also tracked as...
CVE-2025-58132
creationtimestamp| type| source ---|---|--- 2025-10-14 15:28:41+00:00| seen| https://bsky.app/profile/ripjyr.bsky.social/post/3m3626xxxtc2d...
Malicious code in optional-native-module-abc (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2ae21c7e7ad399a3a2a3bf0b58502513f2aa7d40e23bb801a75dd10e871bbf04 Any computer that has this package installed or running should be considered...
MAL-2025-48395 Malicious code in solhint-plugin-namechain (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ac5d2de76e0cbceedfea435f9f5d9ef240571f3e422835020e1efa99f9dba392 Any computer that has this package installed or running should be considered...
EUVD-2025-31831
A weakness has been identified in SourceCodester Hotel and Lodge Management System 1.0. The affected element is an unknown function of the file /pages/savecustomer.php. Executing manipulation of the argument Contact can lead to sql injection. The attack can be executed remotely. The exploit has...
EUVD-2025-31833
A vulnerability was detected in Kilo Code up to 4.86.0. Affected is the function ClineProvider of the file src/core/webview/ClineProvider.ts of the component Prompt Handler. Performing manipulation results in injection. The attack can be initiated remotely. The exploit is now public and may be...
Linux Distros Unpatched Vulnerability : CVE-2025-39918
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: mt76: fix linked list corruption Never leave scheduled wcid entries on the temporary on-stack list CVE-2025-39918 Note that Nessus relies on the presence ...
EUVD-2020-25291
Malware in sbrugna...
EUVD-2021-26661
Malware in sbrugna...
EUVD-2010-4753
Malware in sbrugna...
EUVD-2010-3920
Malware in sbrugna...
EUVD-2017-2333
Malware in sbrugna...
EUVD-2018-18809
Malware in sbrugna...
EUVD-2020-20825
Malware in sbrugna...