4762 matches found
A week in security (September 29 – October 5)
Last week on Malwarebytes Labs: From threats to apology, hackers pull child data offline after public backlash Your Meta AI conversations may come back as ads in your feed Scam Facebook groups send malicious Android malware to seniors Sendit tricked kids, harvested their data, and faked messages,...
CVE-2025-59337
Discourse is an open-source community discussion platform. In versions 3.5.0 and below, malicious meta-commands could be embedded in a backup dump and executed during restore. In multisite setups, this allowed an admin of one site to access data or credentials from other sites. This issue is fixe...
BIT-DISCOURSE-2025-59337 Discourse: Cross-Site Data Exposure via Backup Restore Metacommand Injection in Multisite Deployments
Discourse is an open-source community discussion platform. In versions 3.5.0 and below, malicious meta-commands could be embedded in a backup dump and executed during restore. In multisite setups, this allowed an admin of one site to access data or credentials from other sites. This issue is fixe...
WordPress SEO Meta Description Updater plugin <= 1.2.0 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Abu Hurayra in WordPress Plugin SEO Meta Description Updater versions = 1.2.0...
EUVD-2024-27892
Malicious code in bioql PyPI...
EUVD-2025-10600
Malicious code in bioql PyPI...
EUVD-2025-31337
Malicious code in bioql PyPI...
EUVD-2025-8166
Malicious code in bioql PyPI...
EUVD-2024-45428
Malicious code in bioql PyPI...
EUVD-2023-26847
Malicious code in bioql PyPI...
EUVD-2024-30657
Malicious code in bioql PyPI...
EUVD-2023-59157
Malicious code in bioql PyPI...
EUVD-2025-5081
Malicious code in bioql PyPI...
EUVD-2023-12899
Malicious code in bioql PyPI...
EUVD-2024-47742
Malicious code in bioql PyPI...
EUVD-2023-51931
Malicious code in bioql PyPI...
EUVD-2025-32062
Malicious code in bioql PyPI...
EUVD-2024-17700
Malicious code in bioql PyPI...