CVE-2025-24990

creationtimestamp| type| source ---|---|--- 2025-10-14 16:03:45+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2025-0310 2025-10-14 16:38:44+00:00| seen| https://www.thezdi.com/blog/2025/10/14/the-october-2025-security-update-review 2025-10-14 17:36:18+00:00| seen|...

WordPress Revive Old Posts plugin <= 9.3.3 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Legion Hunter in WordPress Plugin Revive Old Posts versions = 9.3.3...

Signal in the noise: what hashtags reveal about hacktivism in 2025

What do hacktivist campaigns look like in 2025? To answer this question, we analyzed more than 11,000 posts produced by over 120 hacktivist groups circulating across both the surface web and the dark web, with a particular focus on groups targeting MENA countries. The primary goal of our research...

CVE-2025-62176

Mastodon is a free, open-source social network server based on ActivityPub. In Mastodon before 4.4.6, 4.3.14, and 4.2.27, the streaming server accepts serving events for public timelines to clients using any valid authentication token, even if those tokens lack the read:statuses scope. This allow...

CERTFR-2025-ACT-043

creationtimestamp| type| source ---|---|--- 2025-10-13 12:13:08+00:00| seen| https://bsky.app/profile/cert-fr.bsky.social/post/3m336sfepqs2y 2025-10-13 12:13:12+00:00| seen| https://social.numerique.gouv.fr/users/certfr/statuses/115366794855854060 2025-10-13 12:33:02+00:00| seen|...

Mastodon 安全漏洞

Mastodon is an open source social networking server based on ActivityPub by Mastodon Open Source. A security vulnerability exists in Mastodon versions prior to 4.4.6, prior to 4.3.14, and prior to 4.2.27, which stems from an event where the stream server accepts service for a public timeline usin...

CVE-2025-38477

creationtimestamp| type| source ---|---|--- 2025-10-08 10:17:48+00:00| seen| https://bsky.app/profile/bluesky.awakari.com/post/3m2ofzjtqog25 2025-10-08 10:17:50+00:00| seen| https://bsky.app/profile/bluesky.awakari.com/post/3m2ofzmd6ll2o 2025-10-08 10:26:45+00:00| seen|...

CVE-2025-40649 Múltiples vulnerabilidades en Negotiator de BBMRI-ERIC

Stored Cross-Site Scripting XSS in Biobanking and Biomolecular Resources Negotiator v3.15.2 - European Research Infrastructure BBMRI-ERIC, consisting of a stored XSS due to a lack of proper validation of user input by sending a POST request using parameter text in '/api/v3/negotiations//posts'...

CVE-2025-40649

Stored XSS in BBMRI-ERIC Negotiator v3.15.2 due to insufficient validation of user-supplied data in the text parameter of POST /api/v3/negotiations//posts. A remote attacker could craft input to exfiltrate or steal the cookie session details of an authenticated user. The issue is concrete in the ...

EUVD-2014-3874

Malware in sbrugna...

EUVD-2013-3194

Malware in sbrugna...

EUVD-2013-2649

Malware in sbrugna...

EUVD-2011-0716

Malware in sbrugna...

EUVD-2006-7170

Malware in sbrugna...

EUVD-2007-1887

Malware in sbrugna...

EUVD-2016-2056

Malware in sbrugna...

EUVD-2017-9988

Malware in sbrugna...

EUVD-2019-11424

Malware in sbrugna...

EUVD-2021-12010

Malware in sbrugna...

EUVD-2021-11687

Malware in sbrugna...