iot-vul

IoT Vulnerability Exploitation and Verification Framework Thi...

MAL-2025-2730 Malicious code in webhooks-contacts-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 823e5cf1e6fd5a930dbd702f998d1d88ae58e255f62e920b0262615ac2efdbbf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2019-9875

creationtimestamp| type| source ---|---|--- 2025-03-26 18:45:15+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3llcgyim6af2v 2025-03-26 19:05:08+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3llci42bxm52u 2025-03-26 21:39:21+00:00| seen|...

CVE-2015-2743

creationtimestamp| type| source ---|---|--- 2025-03-19 13:54:17+00:00| seen| https://gist.github.com/makeforfun/85ab01bc29a9bdc9bd019a3e320a3f94 2026-08-05 15:26:51+00:00| seen| https://gist.github.com/vseredi/153fca0b63bab02237be36c7c5e29109...

Schneider Electric End-of-Life Devices Detection

The current plugin identifies Schneider devices that are end-of-life, i.e., still supported but have a discontinued date announced. Schneider Lifecycle Statuses: - Active: Most current offering within a product category. - End of Life: Discontinued date announced - actively execute migrations and...

SimpleHelp Detected

This is an informational notice that the scanner was able to detect a SimpleHelp instance on the target server. Note that this detection is included in the Remote Access Tools category. No source data...

CVE-2025-21842

creationtimestamp| type| source ---|---|--- 2025-03-07 10:15:45+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114120624260487340 2025-03-07 12:04:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ljrxr4vhzt22 2025-03-07 12:25:47+00:00| seen| https://t.me/cvedetector/19...

MAL-2025-2206 Malicious code in @domons/test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b3fb4b8817484cd6bd07e6b222ab6a29f0b7ec9655b273a41638c382e54aafb5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Linux Distros Unpatched Vulnerability : CVE-2024-57795

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RDMA/rxe: Remove the direct link to netdevice The similar patch in siw is in the link: https://git.kernel.org/rdma/rdma/c/16b87037b48889 This problem also...

CVE-2022-49585

In the Linux kernel, the following vulnerability has been resolved: tcp: Fix data-races around sysctltcpfastopenblackholetimeout. While reading sysctltcpfastopenblackholetimeout, it can be changed concurrently. Thus, we need to add READONCE to its readers...

GHSA-4R24-JJWM-9PFX vulnerabilities

Vulnerabilities for packages: mysql...

CVE-2024-13849

creationtimestamp| type| source ---|---|--- 2025-02-20 12:41:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3limctgl4rq2y 2025-02-20 13:08:54+00:00| seen| https://t.me/cvedetector/18523...

MAL-2025-1388 Malicious code in zmcrypty (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ee24745300aa11ed0e92813032e7269a17e9c66f73b03ac3e38e6bd613268e1c The OpenSSF Package Analysis project identified 'zmcrypty' @ 66.6.0 npm as malicious. It is considered malicious because: - The package...

CVE-2024-12013

creationtimestamp| type| source ---|---|--- 2025-02-13 16:04:31+00:00| seen| https://infosec.exchange/users/cve/statuses/113997425586155705 2025-02-13 18:50:45+00:00| seen| https://t.me/cvedetector/18037...

CVE-2025-25202

creationtimestamp| type| source ---|---|--- 2025-02-11 19:15:44+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhwenfmpuu2d 2025-02-11 21:33:23+00:00| seen| https://t.me/cvedetector/17734 2025-02-11 22:07:59+00:00| published-proof-of-concept|...

Fortinet FortiPortal 安全漏洞

Fortinet FortiPortal is an advanced, feature-rich hosted security analysis and management support tool for Fortinet's FortiGate, FortiWiFi, and FortiAP product lines, available as a virtual machine for MSPs. A security vulnerability exists in Fortinet FortiPortal that stems from improper parsing ...

DeepSeek-R1 LLM Fails Over Half of Jailbreak Attacks in Security Analysis

DeepSeek-R1 LLM fails 58% of jailbreak attacks in Qualys security analysis. Learn about the vulnerabilities, compliance concerns, and risks for enterprise adoption...

CVE-2025-20185

creationtimestamp| type| source ---|---|--- 2025-02-05 16:36:39+00:00| seen| https://infosec.exchange/users/cve/statuses/113952253499265593 2025-02-05 17:16:26+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhh36kj54x2h 2025-02-05 19:09:07+00:00| seen|...

DeepSeek Failed Over Half of the Jailbreak Tests by Qualys TotalAI

A comprehensive security analysis of DeepSeek 's flagship reasoning model reveals significant concerns for enterprise adoption. Introduction DeepSeek-R1, a groundbreaking Large Language Model recently released by a Chinese startup, DeepSeek, has captured the AI industry’s attention. The model...

CVE-2025-0065

creationtimestamp| type| source ---|---|--- 2025-01-28 10:23:32+00:00| seen| https://infosec.exchange/users/cve/statuses/113905487848074528 2025-01-28 11:15:28+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgsdbqlg7r2n 2025-01-28 12:00:20+00:00| seen|...