Lucene search
+L

843 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2025/11/22 12:46 p.m.7 views

Malicious code in linkedin-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f087523af82d7438462bdf269292570db2114097ae1ee24979225379641e15f6 The package linkedin-ui was found to contain malicious code. Source: ossf-package-analysis...

6.9AI score
SaveExploits0
OSV
OSV
added 2025/11/22 12:46 p.m.3 views

MAL-2025-190613 Malicious code in linkedin-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f087523af82d7438462bdf269292570db2114097ae1ee24979225379641e15f6 The package linkedin-ui was found to contain malicious code. Source: ossf-package-analysis...

6.8AI score
SaveExploits0
The Hacker News
The Hacker News
added 2025/11/20 12:29 p.m.14 views

ThreatsDay Bulletin: 0-Days, LinkedIn Spies, Crypto Crimes, IoT Flaws and New Malware Waves

This week has been crazy in the world of hacking and online security. From Thailand to London to the US, we've seen arrests, spies at work, and big power moves online. Hackers are getting caught. Spies are getting better at their jobs. Even simple things like browser add-ons and smart home gadget...

9.8CVSS8.7AI score0.88312EPSS
SaveExploits2
The Hacker News
The Hacker News
added 2025/11/17 11:55 a.m.11 views

5 Reasons Why Attackers Are Phishing Over LinkedIn

Phishing attacks are no longer confined to the email inbox, with 1 in 3 phishing attacks now taking place over non-email channels like social media, search engines, and messaging apps. LinkedIn in particular has become a hotbed for phishing attacks, and for good reason. Attackers are running...

6.7AI score
SaveExploits0
The Hacker News
The Hacker News
added 2025/11/14 6:25 p.m.10 views

North Korean Hackers Turn JSON Services into Covert Malware Delivery Channels

The North Korean threat actors behind the Contagious Interview campaign have once again tweaked their tactics by using JSON storage services to stage malicious payloads. "The threat actors have recently resorted to utilizing JSON storage services like JSON Keeper, JSONsilo, and npoint.io to host...

6.7AI score
SaveExploits0
Malwarebytes
Malwarebytes
added 2025/11/14 4:30 p.m.10 views

Be careful responding to unexpected job interviews

One of our customers was contacted on LinkedIn about a job offer. The initial message was followed up by an email: “Thank you for your interest in the Senior Construction Manager position at company. After reviewing your background, we were impressed with your experience and would like to invite...

7.2AI score
SaveExploits0
RedhatCVE
RedhatCVE
added 2025/11/05 5:8 a.m.5 views

CVE-2025-12402

The LinkedIn Resume plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.00. This is due to missing or incorrect nonce validation on the linkedinresumeprintAdminPage function. This makes it possible for unauthenticated attackers to update settin...

6.1CVSS5.3AI score0.00142EPSS
SaveExploits0References1
NVD
NVD
added 2025/11/04 5:16 a.m.6 views

CVE-2025-12402

The LinkedIn Resume plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.00. This is due to missing or incorrect nonce validation on the linkedinresumeprintAdminPage function. This makes it possible for unauthenticated attackers to update settin...

6.1CVSS0.00142EPSS
SaveExploits0References4
Patchstack
Patchstack
added 2025/11/04 5:4 a.m.6 views

WordPress LinkedIn Resume plugin <= 2.00 - Cross-Site Request Forgery to Stored Cross-Site Scripting vulnerability

Cross-Site Request Forgery to Stored Cross-Site Scripting vulnerability discovered by johska in WordPress Plugin LinkedIn Resume versions = 2.00...

6.1CVSS5.6AI score0.00142EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2025/11/04 4:27 a.m.12 views

CVE-2025-12402 LinkedIn Resume <= 2.00 - Cross-Site Request Forgery to Stored Cross-Site Scripting

The LinkedIn Resume plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.00. This is due to missing or incorrect nonce validation on the linkedinresumeprintAdminPage function. This makes it possible for unauthenticated attackers to update settin...

6.1CVSS0.00142EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2025/11/04 4:27 a.m.2 views

CVE-2025-12402 LinkedIn Resume <= 2.00 - Cross-Site Request Forgery to Stored Cross-Site Scripting

The LinkedIn Resume plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.00. This is due to missing or incorrect nonce validation on the linkedinresumeprintAdminPage function. This makes it possible for unauthenticated attackers to update settin...

6.1CVSS4.9AI score0.00142EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2025/11/04 12:0 a.m.20 views

PT-2025-44954

The LinkedIn Resume plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.00. This is due to missing or incorrect nonce validation on the linkedinresume printAdminPage function. This makes it possible for unauthenticated attackers to update...

6.1CVSS5.3AI score0.00142EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2025/11/04 12:0 a.m.5 views

WordPress plugin LinkedIn Resume 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site...

6.1CVSS6.3AI score0.00142EPSS
SaveExploits0References4
GithubExploit
GithubExploit
added 2025/11/01 7:19 p.m.129 views

robolinkedin

Linkedinrobo que adiciona pessoas com profissões desejadas ao se...

6.9AI score
SaveExploits0
The Hacker News
The Hacker News
added 2025/10/16 2:56 p.m.11 views

North Korean Hackers Use EtherHiding to Hide Malware Inside Blockchain Smart Contracts

A threat actor with ties to the Democratic People's Republic of Korea aka North Korea has been observed leveraging the EtherHiding technique to distribute malware and enable cryptocurrency theft, marking the first time a state-sponsored hacking group has embraced the method. The activity has been...

7.5AI score
SaveExploits0
EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-2017-9632

Malware in sbrugna...

6.1CVSS6.2AI score0.01688EPSS
SaveExploits1References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.7 views

EUVD-2008-3421

Malware in sbrugna...

7.5CVSS6.4AI score0.0184EPSS
SaveExploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.6 views

EUVD-2017-8738

Malware in sbrugna...

9.8CVSS9.2AI score0.02978EPSS
SaveExploits2References3
EUVD
EUVD
added 2025/10/03 8:7 p.m.7 views

EUVD-2022-34433

Malicious code in bioql PyPI...

4.8CVSS5.1AI score0.00552EPSS
SaveExploits2References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.6 views

EUVD-2025-8196

Malicious code in bioql PyPI...

7.1CVSS9.2AI score0.00277EPSS
SaveExploits0References2
Rows per page
Query Builder