CVE-2024-26733

creationtimestamp| type| source ---|---|--- 2025-12-03 14:14:49+00:00| seen| https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8...

CVE-2024-26747

creationtimestamp| type| source ---|---|--- 2025-12-03 14:14:49+00:00| seen| https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8...

EUVD-2025-200726

The Everest Backup – WordPress Cloud Backup, Migration, Restore & Cloning Plugin plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the processstatusunlink function in all versions up to, and including, 2.3.8. This makes it possible for unauthenticated...

CVE-2025-64298

creationtimestamp| type| source ---|---|--- 2025-12-02 23:24:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m723milxw72n 2025-12-03 03:10:07+00:00| seen| https://bsky.app/profile/blackwiremedia.bsky.social/post/3m72iad66xm2b...

CVE-2025-57850

creationtimestamp| type| source ---|---|--- 2025-12-02 19:16:39+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115651575723555326 2025-12-02 21:35:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m6zvkp3lak2k...

GHSA-9H52-P55H-VW2F

creationtimestamp| type| source ---|---|--- 2025-12-02 19:07:58+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115651541601478240...

GHSA-C7RR-2H93-7GJF

creationtimestamp| type| source ---|---|--- 2025-12-02 18:09:25+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115651311349715908...

“Sleeper” browser extensions woke up as spyware on 4 million devices

Researchers have unraveled a malware campaign that really did play the long game. After seven years of behaving normally, a set of browser extensions installed on roughly 4.3 million Chrome and Edge users’ devices suddenly went rogue. Now they can track what you browse and run malicious code insi...

Malicious code in chai-status (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36f6f6dd537cdb195504efe77187096dff2f05e7ffd064975c9f54a4d45e17b9 The package chai-status was found to contain malicious code. Source: ghsa-malware ac16fe9f8e1d6ef61aa920967a83f93dc57d69f70b534ac70a2e59870b2b3533 An...

EUVD-2025-200191

Malicious code in chai-status npm...

MAL-2025-191546 Malicious code in chai-status (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36f6f6dd537cdb195504efe77187096dff2f05e7ffd064975c9f54a4d45e17b9 The package chai-status was found to contain malicious code. Source: ghsa-malware ac16fe9f8e1d6ef61aa920967a83f93dc57d69f70b534ac70a2e59870b2b3533 An...

Malicious Package

Overview chai-status is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorshi...

CVE-2025-13808

creationtimestamp| type| source ---|---|--- 2025-12-02 02:20:14+00:00| seen| https://bsky.app/profile/pmloik.bsky.social/post/3m6xuy7glpb27...

GHSA-27M7-FFHQ-JQRM

creationtimestamp| type| source ---|---|--- 2025-12-01 23:36:46+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115646936118500552...

CVE-2025-48633

creationtimestamp| type| source ---|---|--- 2025-12-01 22:25:48+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115646657177918322 2025-12-02 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1693 2025-12-02 09:32:43+00:00| seen|...

GHSA-MP93-8VXR-HQQ9

creationtimestamp| type| source ---|---|--- 2025-12-01 21:07:43+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115646350174352459...

CVE-2025-65404

creationtimestamp| type| source ---|---|--- 2025-12-01 17:13:17+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115645428301148412 2025-12-01 18:44:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m6x3ja5j5t2n...

CVE-2025-8351

creationtimestamp| type| source ---|---|--- 2025-12-01 15:59:04+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115645136498784264 2025-12-08 22:32:01+00:00| seen| https://bsky.app/profile/getpokemon7.bsky.social/post/3m7j3ik5ch22j...

CVE-2025-12559

creationtimestamp| type| source ---|---|--- 2025-12-01 15:25:27+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115645004340699533...

D-Link DI-524 CSRF (reboot)

D-Link DI-524 Wireless 150 router - Reboot via CSRF GET from kittysploit import from lib.protocols.http.csrf import Csrf class ModuleBrowserAuxiliary, Csrf: info = "name": "D-Link DI-524 CSRF reboot", "description": "D-Link DI-524 Wireless 150 router - Reboot via CSRF GET", "author": "KittySploit...