CVE-2023-25141

Apache Sling JCR Base 3.1.12 has a critical injection vulnerability when running on old JDK versions JDK 1.8.191 or earlier through utility functions in RepositoryAccessor. The functions getRepository and getRepositoryFromURL allow an application to access data stored in a remote location via JDN...

Adobe Experience Manager (AEM) Sling Login Panel Detected

This plugin detects the presence of the Adobe Experience Manager AEM Sling Login panel on a web application. The Sling Login panel is part of the Apache Sling framework used by AEM for content delivery and management, providing authentication and access control features. No source data...

Adobe Experience Manager (AEM) Sling User Information Servlet Exposure

The remote Adobe Experience Manager AEM Sling User Information Servlet is prone to information disclosure vulnerabilities. An attacker can exploit this issue to gather information about user accounts, including usernames and other details, which could be used in subsequent attacks such as...

A week in security (November 3 – November 9)

Last week on Malwarebytes Labs: Malwarebytes scores 100% in AV-Comparatives Stalkerware Test 2025 Fake CAPTCHA sites now have tutorial videos to help victims install malware Hackers commit highway robbery, stealing cargo and goods Android malware steals your card details and PIN to make instant A...

EUVD-2018-16661

Malware in sbrugna...

EUVD-2020-12753

Malware in sbrugna...

EUVD-2017-2930

Malware in sbrugna...

EUVD-2021-2501

Malware in sbrugna...

EUVD-2022-5345

Malicious code in bioql PyPI...

EUVD-2022-5256

Malicious code in bioql PyPI...

EUVD-2022-7374

Malicious code in bioql PyPI...

EUVD-2023-0791

Malicious code in bioql PyPI...

EUVD-2023-0711

Malicious code in bioql PyPI...

EUVD-2024-0646

Malicious code in bioql PyPI...

EUVD-2023-0315

Malicious code in bioql PyPI...

EUVD-2022-5587

Malicious code in bioql PyPI...

EUVD-2022-2991

Malicious code in bioql PyPI...

EUVD-2022-5871

Malicious code in bioql PyPI...

EUVD-2022-3033

Malicious code in bioql PyPI...

EUVD-2022-3162

Malicious code in bioql PyPI...