183 matches found
CVE-2023-49276
Uptime Kuma is an open source self-hosted monitoring tool. In affected versions the Google Analytics element in vulnerable to Attribute Injection leading to Cross-Site-Scripting XSS. Since the custom status interface can set an independent Google Analytics ID and the template has not been...
Hackers Abuse Popular Monitoring Tool Nezha as a Stealth Trojan
Cybersecurity firm Ontinue reveals how the open-source tool Nezha is being used as a Remote Access Trojan RAT to bypass security and control servers globally...
Cacti 安全漏洞
Cacti is a suite of open source network traffic monitoring and analysis tools from the Cacti team. The tool obtains data via snmpget, analyzes it using RRDtool drawing graphs, and provides data and user management features. A security vulnerability exists in Cacti versions prior to 1.2.29 that...
IBM Concert Output Neutralization Malpractice Vulnerability
IBM Concert is a generative artificial intelligence-driven automated application management and monitoring tool based on the watsonx platform released in May 2024 by IBM. IBM Concert suffers from an improper output neutralization vulnerability that can be exploited by an attacker to cause a forge...
Tsundere Botnet Expands Using Game Lures and Ethereum-Based C2 on Windows
Cybersecurity researchers have warned of an actively expanding botnet dubbed Tsundere that's targeting Windows users. Active since mid-2025, the threat is designed to execute arbitrary JavaScript code retrieved from a command-and-control C2 server, Kaspersky researcher Lisandro Ubiedo said in an...
Desktop Alert PingAlert Improper Access Control Vulnerability (CNVD-2025-29430)
Desktop Alert PingAlert is a network status monitoring tool developed by Desktop Alert, Inc. and is mainly used to monitor the status of network devices in real time and send alerts. Desktop Alert PingAlert suffers from an Improper Access Control vulnerability that stems from improper access...
Desktop Alert PingAlert Cross-Site Scripting Vulnerability
Desktop Alert PingAlert is a network status monitoring tool developed by Desktop Alert, Inc. and is mainly used to monitor the status of network devices in real time and send alerts. Desktop Alert PingAlert suffers from a cross-site scripting vulnerability for which no detailed vulnerability...
EUVD-2014-7857
Malware in sbrugna...
EUVD-2021-14130
Malware in sbrugna...
EUVD-2014-3305
Malware in sbrugna...
EUVD-2014-0763
Malware in sbrugna...
EUVD-2023-57460
Malicious code in bioql PyPI...
EUVD-2024-48970
Malicious code in bioql PyPI...
EUVD-2023-2738
Malicious code in bioql PyPI...
EUVD-2024-46391
Malicious code in bioql PyPI...
EUVD-2023-29703
Malicious code in bioql PyPI...
EUVD-2022-33855
Malicious code in bioql PyPI...
EUVD-2023-3036
Malicious code in bioql PyPI...