A week in security (October 20 – October 26)

Last week on Malwarebytes Labs: Is AI moving faster than its safety net? Thousands of online stores at risk as SessionReaper attacks spread Apple may have to open its walled garden to outside app stores Meta boosts scam protection on WhatsApp and Messenger Home Depot Halloween phish gives users a...

CVE-2025-61543

A Host Header Injection vulnerability exists in the password reset functionality of CraftMyCMS 4.0.2.2. The system uses $SERVER'HTTPHOST' directly to construct password reset links sent via email. An attacker can manipulate the Host header to send malicious reset links, enabling phishing attacks ...

Dev jobs handlebars 安全漏洞

Dev jobs handlebars is a job search program by Felix Individual Developers. A security vulnerability exists in Dev jobs handlebars version 1.0 that stems from the use of an untrusted req.headers.host header to generate an absolute password reset link and force the use of an http scheme, which cou...

EUVD-2007-4674

Malware in sbrugna...

EUVD-2013-0751

Malware in sbrugna...

EUVD-2007-3135

Malware in sbrugna...

EUVD-2016-6954

Malware in sbrugna...

EUVD-2017-10764

Malware in sbrugna...

EUVD-2019-14145

Malware in sbrugna...

EUVD-2019-5979

Malware in sbrugna...

EUVD-2020-25900

Malware in sbrugna...

EUVD-2013-0605

Malware in sbrugna...

EUVD-2015-4421

Malware in sbrugna...

EUVD-2018-13883

Malware in sbrugna...

EUVD-2015-2839

Malware in sbrugna...

EUVD-2020-26087

Malware in sbrugna...

EUVD-2008-2871

Malware in sbrugna...

EUVD-2007-4057

Malware in sbrugna...

EUVD-2016-6812

Malware in sbrugna...

EUVD-2016-6255

Malware in sbrugna...