146617 matches found
URI Credential Leakage Bypass over CVE-2025-27221
...
HoneyMyte (aka Mustang Panda) Deploys ToneShell Backdoor in New Attacks
HoneyMyte Mustang Panda is back with a new ToneShell backdoor. Read how this stealthy attack blinds Microsoft Defender to target government entities in Asia...
Exploit for Improper Access Control in Microsoft
CVE-2025-47962-POC Reproduction process： i686-w64-mingw32-gcc...
27 Malicious npm Packages Used as Phishing Infrastructure to Steal Login Credentials
Cybersecurity researchers have disclosed details of what has been described as a "sustained and targeted" spear-phishing campaign that has published over two dozen packages to the npm registry to facilitate credential theft. The activity, which involved uploading 27 npm packages from six differen...
NULL Pointer Dereference in PDO quoting
...
Heap buffer overflow in array_merge()
...
Information Leak of Memory in getimagesize
...
Exploit for Deserialization of Untrusted Data in Microsoft
No d...
Exploit for Deserialization of Untrusted Data in Microsoft
No d...
PyTorch torch.lstm_cell memory corruption
...
bpf: Fix invalid prog->stats access when update_effective_progs fails
...
landlock: Fix handling of disconnected directories
...
Microsoft Edge (Chromium-based) Spoofing Vulnerability (CNVD-2026-00010)
Microsoft Edge is a web browser from the American company Microsoft that comes with systems after Windows 10. A spoofing vulnerability exists in Microsoft Edge Chromium-based, which can be exploited by attackers to perform spoofing attacks...
can: gs_usb: gs_usb_receive_bulk_callback(): check actual_length before accessing data
...
Net-SNMP snmptrapd crash
...
CVE-2025-67743
CVE-2025-67743 affects Local Deep Research. The vulnerability lies in the download service (download_service.py) where HTTP requests are made with raw requests.get() without SSRF protection, bypassing safeguards in safe_requests.py/ssrf_validator.py. This can allow an attacker to access internal ...
CVE-2025-65041
Improper authorization in Microsoft Partner Center allows an unauthorized attacker to elevate privileges over a network...
CVE-2025-64676
'.../...//' in Microsoft Purview allows an authorized attacker to execute code over a network...
Russia-Linked Hackers Use Microsoft 365 Device Code Phishing for Account Takeovers
A suspected Russia-aligned group has been attributed to a phishing campaign that employs device code authentication workflows to steal victims' Microsoft 365 credentials and conduct account takeover attacks. The activity, ongoing since September 2025, is being tracked by Proofpoint under the...
Nigeria Arrests RaccoonO365 Phishing Developer Linked to Microsoft 365 Attacks
Authorities in Nigeria have announced the arrest of three "high-profile internet fraud suspects" who are alleged to have been involved in phishing attacks targeting major corporations, including the main developer behind the RaccoonO365 phishing-as-a-service PhaaS scheme. The Nigeria Police Force...