New GodRAT Trojan Targets Trading Firms Using Steganography and Gh0st RAT Code

Financial institutions like trading and brokerage firms are the target of a new campaign that delivers a previously unreported remote access trojan called GodRAT. The malicious activity involves the "distribution of malicious .SCR screen saver files disguised as financial documents via Skype...

Malicious code in test-mlw2-knowe-saver (npm)

The package test-mlw2-knowe-saver was found to contain malicious code...

MAL-2025-35629 Malicious code in test-mlw2-knowe-saver (npm)

The package test-mlw2-knowe-saver was found to contain malicious code...

xorg-x11-server: ScreenSaverSetAttributes use-after-free

A vulnerability was found in X.Org. This issue occurs because the handler for the ScreenSaverSetAttributes request may write to memory after it has been freed. This flaw can lead to local privileges elevation on systems where the X server runs privileged and remote code execution for ssh X...

CVE-2025-24735

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Chatra Chatra Live Chat + ChatBot + Cart Saver allows Stored XSS. This issue affects Chatra Live Chat + ChatBot + Cart Saver: from n/a through 1.0.11...

CVE-2025-24735

CVE-2025-24735 concerns the WordPress plugin Chatra Live Chat + ChatBot + Cart Saver (<= 1.0.11). The vulnerability is an improper input neutralization that enables Stored Cross-Site Scripting during web page generation. The CVSS v3.1 base score is 7.7 (HIGH) with network attack vector, low at...

WordPress plugin Chatra Live Chat + ChatBot + Cart Saver 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

CVE-2023-29747

Story Saver for Instragram - Video Downloader 1.0.6 for Android exists exposed component, the component provides the method to modify the SharedPreference file. The attacker can use the method to modify the data in any SharedPreference file, these data will be loaded into the memory when the...

CVE-2020-0312

In Battery Saver, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-153879099...

CVE-2013-1031

Power Management in Apple Mac OS X before 10.8.5 does not properly perform locking upon occurrences of a power assertion, which allows physically proximate attackers to bypass intended access restrictions by visiting an unattended workstation on which a locking failure had prevented the startup o...

CVE-2025-2954

A vulnerability, which was classified as problematic, was found in mannaandpoem OpenManus up to 2025.3.13. This affects the function execute of the file app/tool/filesaver.py of the component File Handler. The manipulation leads to improper access controls. Local access is required to approach th...

Malicious code in gas-fee-saver (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 904ff1206c8caf54d8e6e4625ec9690c0925700de436af0685916b90e17003ae Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2104 Malicious code in gas-fee-saver (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 904ff1206c8caf54d8e6e4625ec9690c0925700de436af0685916b90e17003ae Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Windows Screen Saver may not produce desired animation or image in ICA desktop session

Windows Screen Saver e.g. C:\Windows\System32\ssText3d.scr may not be able to produce the desired animation when it is initiated in ICA desktop session. Instead, a white or black screen could be presented...

The vulnerability of the ScreenSaverSetAttributes function in the X Window System X.Org Server, and the Wayland protocol for X.Org XWayland, allows a perpetrator to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the ScreenSaverSetAttributes function in the X Window System X.Org Server, and the Wayland protocol for X.Org XWayland, is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to access confidential data, compromise its...

CVE-2023-29748

Story Saver for Instragram - Video Downloader 1.0.6 for Android has an exposed component that provides a method to modify the SharedPreference file. An attacker can leverage this method to inject a large amount of data into any SharedPreference file, which will be loaded into memory when the...

PT-2023-22398 · Unknown · Story Saver For Instagram - Video Downloader

Name of the Vulnerable Software and Affected Versions: Story Saver for Instragram - Video Downloader version 1.0.6 Description: The issue allows an attacker to inject a large amount of data into any SharedPreference file, which will be loaded into memory when the application is opened. This can...

CVE-2023-29748

Story Saver for Instragram - Video Downloader 1.0.6 for Android has an exposed component that provides a method to modify the SharedPreference file. An attacker can leverage this method to inject a large amount of data into any SharedPreference file, which will be loaded into memory when the...

CVE-2023-29748

CVE-2023-29748 affects Story Saver for Instagram – Video Downloader (Android, v1.0.6). An exposed component lets an attacker modify SharedPreferences, enabling injection of large data into a file that is loaded into memory on app start. This can trigger an OutOfMemoryError and crash at startup, p...

Code injection

Story Saver for Instragram - Video Downloader 1.0.6 for Android exists exposed component, the component provides the method to modify the SharedPreference file. The attacker can use the method to modify the data in any SharedPreference file, these data will be loaded into the memory when the...