Linux Distros Unpatched Vulnerability : CVE-2025-56648

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - npm parcel 2.0.0-alpha and before has an Origin Validation Error vulnerability. Malicious websites can send XMLHTTPRequests to the application's development...

CVE-2025-54855

Cleartext storage of sensitive information was discovered in Click Programming Software version v3.60. The vulnerability can be exploited by a local user with access to the file system, while an administrator session is active, to steal credentials stored in clear text...

CVE-2025-20240: Incomplete Denylist to Cross-Site Scripting

A vulnerability in the Web Authentication feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting attack XSS on an affected device. This vulnerability is due to improper sanitization of user-supplied input. An attacker could...

PT-2025-39221

Name of the Vulnerable Software and Affected Versions Click Programming Software version v3.60 Description A security issue allows a local user, while an administrator session is active, to steal credentials stored in clear text. The issue involves the cleartext storage of sensitive information a...

CVE-2025-56648

npm parcel 2.0.0-alpha and before has an Origin Validation Error vulnerability. Malicious websites can send XMLHTTPRequests to the application's development server and read the response to steal source code when developers visit them...

Malicious code in config-cordova (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c6be890bb2add4317485a3489a291b37fc52ecb9b16d9d5f5f1a6c67421c14c6 Any computer that has this package installed or running should be considered fully compromised. All...

Malicious code in koa2-swagger-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 31fd12270f2d2a5b53bfaf3aabcbae8d26a7eec21613c28e4673369a33025ba5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

EvilAI Operators Use AI-Generated Code and Fake Apps for Far-Reaching Attacks

Combining AI-generated code and social engineering, EvilAI operators are executing a rapidly expanding campaign, disguising their malware as legitimate applications to bypass security, steal credentials, and persistently compromise organizations worldwide...

Malicious npm Packages Impersonate Flashbots, Steal Ethereum Wallet Keys

A new set of four malicious packages have been discovered in the npm package registry with capabilities to steal cryptocurrency wallet credentials from Ethereum developers. "The packages masquerade as legitimate cryptographic utilities and Flashbots MEV infrastructure while secretly exfiltrating...

8 Malicious NPM Packages Stole Chrome User Data on Windows

JFrog researchers found eight malicious NPM packages using 70 layers of obfuscation to steal data from Chrome browser…...

Referral Beware, Your Rewards are Mine (Part 1)

The post Referral Beware, Your Rewards are Mine Part 1 appeared first on Rhino Security Labs...

CVE-2025-20317

Cisco CVE-2025-20317 affects the Integrated Management Controller (IMC) and the vKVM component (also in Cisco UCS Manager). The issue is an open redirect caused by insufficient verification of vKVM endpoints, allowing an unauthenticated, remote attacker to persuade a user to click a crafted link ...

Exploit for CVE-2018-19323

CVE-2018-19323: GIGABYTE GDrv Exploitation Framework ---...

Malicious Package

Overview bittenso is a malicious package. This package contains malicious code, and its content was removed from the official package manager. The package appears to be part of a typosquatting campaign targeting the Bittensor ecosystem. The goal of the attackers is to steal cryptocurrency from...

CVE-2025-55103

There is a stored Cross-site Scripting vulnerability in Esri Portal for ArcGIS Enterprise Sites versions 10.9.1 – 11.4 that may allow a remote, authenticated attacker to inject malicious a file with an embedded xss script which when loaded could potentially execute arbitrary JavaScript code in th...

PT-2025-34283

Name of the Vulnerable Software and Affected Versions: Esri Portal for ArcGIS Enterprise Sites versions 10.9.1 through 11.4 Description: A stored Cross-site Scripting issue exists in Esri Portal for ArcGIS Enterprise Sites that may allow a remote, authenticated attacker to inject a malicious file...

The vulnerability of Google Chrome’s cookie handling mechanism, related to errors in using standard permissions, allows a hacker to intercept class identifier registrations and steal cookie files.

The vulnerability of Google Chrome’s cookie handling mechanism is related to errors in the use of standard permissions. Exploiting this vulnerability can allow a hacker to intercept class identifier registrations and steal cookie files...

CVE-2025-9001 LemonOS HTTP Client main.cpp HTTPGet stack-based overflow

A vulnerability was determined in LemonOS up to nightly-2024-07-12 on LemonOS. Affected by this issue is the function HTTPGet of the file /Applications/Steal/main.cpp of the component HTTP Client. The manipulation of the argument chunkSize leads to stack-based buffer overflow. The attack may be...

LemonOS 安全漏洞

LemonOS is an operating system in the Lemon OS open source. A security vulnerability exists in LemonOS nightly-2024-07-12 and earlier versions, which stems from a stack buffer overflow due to incorrect manipulation of the parameter chunkSize in the file /Applications/Steal/main.cpp...

MAL-2025-20277 Malicious code in fbjs-opensource (npm)

The package fbjs-opensource was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: google-open-source-security 2dac438ef7432e162ead36cdd4121d9b31b47eaa1eb4ce24c0e577655dc496a5 This package installs a dependency hosted on a custom domain that runs an...