EUVD-2023-1274

Malicious code in bioql PyPI...

EUVD-2024-45644

Malicious code in bioql PyPI...

EUVD-2024-45626

Malicious code in bioql PyPI...

EUVD-2022-49920

Malicious code in bioql PyPI...

EUVD-2023-33896

Malicious code in bioql PyPI...

EUVD-2022-47989

Malicious code in bioql PyPI...

EUVD-2025-28506

Malicious code in bioql PyPI...

EUVD-2023-27948

Malicious code in bioql PyPI...

EUVD-2025-29040

Malicious code in bioql PyPI...

EUVD-2024-28447

Malicious code in bioql PyPI...

EUVD-2025-27017

Malicious code in bioql PyPI...

EUVD-2023-52353

Malicious code in bioql PyPI...

CVE-2025-10309

The PayPal Forms plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.3. This is due to missing nonce validation on the form creation and management functions. This makes it possible for unauthenticated attackers to create new PayPal forms and...

WordPress WP Attractive Donations System - Easy Stripe & Paypal donations plugin <= 1.25 - Cross Site Request Forgery (CSRF) vulnerability

WordPress WP Attractive Donations System - Easy Stripe & Paypal donations plugin = 1.25 - Cross Site Request Forgery CSRF vulnerability discovered by Bibek Dhakal in WordPress Plugin WP Attractive Donations System - Easy Stripe & Paypal donations versions = 1.25...

Securing the Journey: Cybersecurity Challenges in the Tourism Industry

This weekend is World Tourism Day, a celebration of the global travel industry and the cultural, economic, and social connections it fosters. However, as the tourism industry continues to grow and evolve, it faces an increasing array of cybersecurity threats. From data breaches targeting personal...

Feds Tie ‘Scattered Spider’ Duo to $115M in Ransoms

U.S. prosecutors last week levied criminal hacking charges against 19-year-old U.K. national Thalha Jubair for allegedly being a core member of Scattered Spider , a prolific cybercrime group blamed for extorting at least $115 million in ransom payments from victims. The charges came as Jubair and...

WordPress plugin CashBill.pl – WooCommerce payment cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plug-in. WordPress...

New Raven Stealer Malware Hits Browsers for Passwords and Payment Data

New research reveals Raven Stealer malware that targets browsers like Chrome and Edge to steal personal data. Learn how this threat uses simple tricks like process hollowing to evade antiviruses and why it's a growing risk for everyday users...

CVE-2025-59144 [email protected] contains malware after npm account takeover

debug is a JavaScript debugging utility. On 8 September 2025, the npm publishing account for debug was taken over after a phishing attack. Version 4.4.2 was published, functionally identical to the previous patch version, but with a malware payload added attempting to redirect cryptocurrency...

CVE-2025-8699

Some "Stored Value" Unattended Payment Solutions of KioSoft use vulnerable NFC cards. Attackers could potentially use this vulnerability to change the balance on the cards and generate money. The account balance is stored on an insecure MiFare Classic NFC card and can be read and written back. By...