EUVD-2017-17152

Malware in sbrugna...

Chinese Android Phones Shipped with Fake WhatsApp, Telegram Apps Targeting Crypto Users

Cheap Android smartphones manufactured by Chinese companies have been observed pre-installed with trojanized apps masquerading as WhatsApp and Telegram that contain cryptocurrency clipper functionality as part of a campaign since June 2024. While using malware-laced apps to steal financial...

Cross-Site Scripting (XSS)

phpoffice/phpspreadsheet is vulnerable to cross-site scripting XSS. The vulnerability is due to improper handling of custom properties, as the library generates HTML pages without clearing them, allowing an attacker to inject and execute malicious scripts in another user's browser, potentially...

Car Thieves Hacking the CAN Bus

Car thieves are injecting malicious software into a cars network through wires in the headlights or taillights that fool the car into believing that the electronic key is nearby. News articles...

GHSA-4MM3-XGC2-656R Static Methods since 2007 (div2007) extension for TYPO3 vulnerable to Cross-site Scripting

Cross-site scripting XSS vulnerability in the Static Methods since 2007 div2007 extension before 0.10.2 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to the t3libdiv::quoteJSvalue function...

LfSoOxxBtKDnFHl

A Remote Browser's Agent XSS is a piece of software that allows a remote "operator" to control a browser as if he has physical access to that system. While desktop sharing and remote administration have many legal uses, "XSS" software is usually associated with criminal or malicious activity...

LAN.FS Messenger v2.4 - Command Execution Vulnerability

Exploit for windows platform in category remote exploits LAN.FS Messenger v2.4 - Command Execution Vulnerability Introduction: ============= Lan.FS is a very quick, small and compact freeware networktool for non-commercial use only for Windows 2000/XP/2003/Vista & Windows 7. It is easy to handle...