CVE-2026-21668

A vulnerability allowing an authenticated domain user to bypass restrictions and manipulate arbitrary files on a Backup Repository...

MAL-2025-105527 Malicious code in maman-bubursumsum73-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7cedc5a74bfa8ec2efc17b2e6bd448ef030c2775d1bd983d971acddf810e063 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hendra-lodeh34-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6307b5d64b0eba94bb1314650552052cc7a165fdb6be891d1e10e039c1eed5ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-72324 Malicious code in cici-telurtahu25-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7486f6a4874296782f50ed6c0e1a010713c88cfe4e766b03d0cb21833d837405 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Windows Downgrade Attack Risks Exposing Patched Systems to Old Vulnerabilities

Microsoft said it is developing security updates to address two loopholes that it said could be abused to stage downgrade attacks against the Windows update architecture and replace current versions of the operating system files with older versions. The vulnerabilities are listed below -...

MAL-2023-2443 Malicious code in xsxwriter (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx de9ffb88108cef8af4bba32e2ef88b570b329f16448ee849ef43b16ddfeb10f8 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

MAL-2023-2308 Malicious code in tensorrflow (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 9743741eb617e1a86db80894acdc85f9413390a4adaddae56b9f211f41b387b7 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Trojan-Spy.Win32.KeyLogger.qt Insecure Permissions

Discovery / credits: Malvuln - malvuln.com c 2021 Original source: https://malvuln.com/advisory/de613b96174056ef22b42e112d0e61a5.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Trojan-Spy.Win32.KeyLogger.qt Vulnerability: Insecure Permissions Description: KeyLogger.qt creates ...