WalletProbe: a Testing Framework for Browser-Based Cryptocurrency Wallet Extensions

Serving as the first touch point for users to the cryptocurrency world, cryptocurrency wallets allow users to manage, receive, and transmit digital assets on blockchain networks and interact with emerging decentralized finance DeFi applications. Unfortunately, cryptocurrency wallets have always...

iot-vul

IoT Vulnerability Exploitation and Verification Framework Thi...

MAL-2025-2730 Malicious code in webhooks-contacts-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 823e5cf1e6fd5a930dbd702f998d1d88ae58e255f62e920b0262615ac2efdbbf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2019-9875

creationtimestamp| type| source ---|---|--- 2025-03-26 18:45:15+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3llcgyim6af2v 2025-03-26 19:05:08+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3llci42bxm52u 2025-03-26 21:39:21+00:00| seen|...

CVE-2015-2743

creationtimestamp| type| source ---|---|--- 2025-03-19 13:54:17+00:00| seen| https://gist.github.com/makeforfun/85ab01bc29a9bdc9bd019a3e320a3f94 2026-08-05 15:26:51+00:00| seen| https://gist.github.com/vseredi/153fca0b63bab02237be36c7c5e29109...

Schneider Electric End-of-Life Devices Detection

The current plugin identifies Schneider devices that are end-of-life, i.e., still supported but have a discontinued date announced. Schneider Lifecycle Statuses: - Active: Most current offering within a product category. - End of Life: Discontinued date announced - actively execute migrations and...

SimpleHelp Detected

This is an informational notice that the scanner was able to detect a SimpleHelp instance on the target server. Note that this detection is included in the Remote Access Tools category. No source data...

CVE-2025-21842

creationtimestamp| type| source ---|---|--- 2025-03-07 10:15:45+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114120624260487340 2025-03-07 12:04:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ljrxr4vhzt22 2025-03-07 12:25:47+00:00| seen| https://t.me/cvedetector/19...

MAL-2025-2206 Malicious code in @domons/test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b3fb4b8817484cd6bd07e6b222ab6a29f0b7ec9655b273a41638c382e54aafb5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Linux Distros Unpatched Vulnerability : CVE-2024-57795

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RDMA/rxe: Remove the direct link to netdevice The similar patch in siw is in the link: https://git.kernel.org/rdma/rdma/c/16b87037b48889 This problem also...

CVE-2022-49585

In the Linux kernel, the following vulnerability has been resolved: tcp: Fix data-races around sysctltcpfastopenblackholetimeout. While reading sysctltcpfastopenblackholetimeout, it can be changed concurrently. Thus, we need to add READONCE to its readers...

GHSA-4R24-JJWM-9PFX vulnerabilities

Vulnerabilities for packages: mysql...

CVE-2024-13849

creationtimestamp| type| source ---|---|--- 2025-02-20 12:41:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3limctgl4rq2y 2025-02-20 13:08:54+00:00| seen| https://t.me/cvedetector/18523...

MAL-2025-1388 Malicious code in zmcrypty (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ee24745300aa11ed0e92813032e7269a17e9c66f73b03ac3e38e6bd613268e1c The OpenSSF Package Analysis project identified 'zmcrypty' @ 66.6.0 npm as malicious. It is considered malicious because: - The package...

CVE-2024-12013

creationtimestamp| type| source ---|---|--- 2025-02-13 16:04:31+00:00| seen| https://infosec.exchange/users/cve/statuses/113997425586155705 2025-02-13 18:50:45+00:00| seen| https://t.me/cvedetector/18037...

CVE-2025-25202

creationtimestamp| type| source ---|---|--- 2025-02-11 19:15:44+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhwenfmpuu2d 2025-02-11 21:33:23+00:00| seen| https://t.me/cvedetector/17734 2025-02-11 22:07:59+00:00| published-proof-of-concept|...

Fortinet FortiPortal 安全漏洞

Fortinet FortiPortal is an advanced, feature-rich hosted security analysis and management support tool for Fortinet's FortiGate, FortiWiFi, and FortiAP product lines, available as a virtual machine for MSPs. A security vulnerability exists in Fortinet FortiPortal that stems from improper parsing ...

DeepSeek-R1 LLM Fails Over Half of Jailbreak Attacks in Security Analysis

DeepSeek-R1 LLM fails 58% of jailbreak attacks in Qualys security analysis. Learn about the vulnerabilities, compliance concerns, and risks for enterprise adoption...

CVE-2025-20185

creationtimestamp| type| source ---|---|--- 2025-02-05 16:36:39+00:00| seen| https://infosec.exchange/users/cve/statuses/113952253499265593 2025-02-05 17:16:26+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhh36kj54x2h 2025-02-05 19:09:07+00:00| seen|...

DeepSeek Failed Over Half of the Jailbreak Tests by Qualys TotalAI

A comprehensive security analysis of DeepSeek 's flagship reasoning model reveals significant concerns for enterprise adoption. Introduction DeepSeek-R1, a groundbreaking Large Language Model recently released by a Chinese startup, DeepSeek, has captured the AI industry’s attention. The model...