CVE-2025-23248

NVIDIA CUDA Toolkit for all platforms contains a vulnerability in the nvdisasm binary where a user may cause an out-of-bounds read by passing a malformed ELF file to nvdisasm. A successful exploit of this vulnerability may lead to a partial denial of service...

CVE-2025-57902

creationtimestamp| type| source ---|---|--- 2025-09-23 20:49:33+00:00| seen| Telegram/hs-4PUgHiXTkJBMsrb9z084ZiMgQb37q6zfRSbaTTVdvhk...

CVE-2025-58671

creationtimestamp| type| source ---|---|--- 2025-09-23 16:49:58+00:00| seen| Telegram/mb8gLQD4SrM6OLS3941ymRznRACt1s60azHSR2ntMj3ucU...

CVE-2025-56394

creationtimestamp| type| source ---|---|--- 2025-09-23 04:07:00+00:00| seen| https://gist.github.com/DDGod2025/532691e3e2db9b47c67c3d153c026e62...

MAL-2025-48891 Malicious code in final-osint (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 e4fd0b958714b427b2b2c39e7afd8134f71fae10467ce32d52cffeb74ec716c2 Importing the module starts an infostealer exfiltrating e.g. browser data --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealer...

CVE-2025-6544

creationtimestamp| type| source ---|---|--- 2025-09-21 13:28:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lzdyqsetzd2c 2025-09-22 01:32:18+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lzfb75ldxl2w 2026-05-22 14:09:29+00:00| seen|...

Malicious Package

Overview internallibv915 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

CVE-2025-6198

creationtimestamp| type| source ---|---|--- 2025-09-19 05:32:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lz657cfcn62c 2025-09-23 18:51:24+00:00| seen| https://infosec.exchange/users/edwardk/statuses/115255114722172590 2025-09-24 04:06:07+00:00| seen|...

CVE-2023-53431

creationtimestamp| type| source ---|---|--- 2025-09-18 16:45:34+00:00| seen| Telegram/ZPOxjpjyAbwLHS3qvLJrJBx-kTECRwAUouCcFYLDi76CWs...

CVE-2025-9972

creationtimestamp| type| source ---|---|--- 2025-09-17 07:40:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lyzdgsyn7v2a...

CVE-2025-43287

creationtimestamp| type| source ---|---|--- 2025-09-17 04:45:56+00:00| seen| Telegram/fDMyMJAv0zZ05H1qj7ApP09ICrzj5rbfQUvBqa5TLqCkSsA...

MAL-2025-47402 Malicious code in kecks (npm)

The package kecks was found to contain malicious code...

CVE-2025-37130

creationtimestamp| type| source ---|---|--- 2025-09-16 22:43:44+00:00| seen| Telegram/kguWd5Aun6eq72JVBm7iqZdRZAVyYP4th-x2becp-RgRVo...

CVE-2025-10533

creationtimestamp| type| source ---|---|--- 2025-09-16 13:24:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lyxg73ijtm2c 2025-09-18 21:02:27+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lz5apsj7rh2d 2026-04-13 17:58:03+00:00| seen|...

Malicious Package

Overview aktsii-gazproma-kupit-fizicheskomu-yxpir9hpn is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that...

Malicious Package

Overview openzeppelin-compact is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview alert-codestreamer is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

CVE-2025-43295

creationtimestamp| type| source ---|---|--- 2025-09-15 22:44:30+00:00| seen| Telegram/dCqEynpwtr-y3I3ArdM10a2EZwz9RT5XZs7AQ3thZ3o9VYg...

Malicious code in consolergbcolor (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 04beefffad3b4018eda21173a10a1dbebd8127bd9870d86e31894c6be592e107 If used, the code attempts to take a photo using the computer's camera and exfiltrates it --- Category: MALICIOUS - The campaign has clearly malicious intent,...

CVE-2025-59328

creationtimestamp| type| source ---|---|--- 2025-09-15 12:21:27+00:00| seen| https://seclists.org/oss-sec/2025/q3/167 2025-09-15 14:32:34+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3lyuzjwdl7c2o 2025-09-15 17:16:56+00:00| seen|...