CVE-2025-11740

CVE-2025-11740 affects WordPress plugin wpForo Forum,

PT-2025-44709

Name of the Vulnerable Software and Affected Versions wpForo Forum plugin for WordPress versions through 2.4.9 Description The wpForo Forum plugin for WordPress is susceptible to SQL Injection through the Subscriptions Manager. Insufficient escaping of user-supplied parameters and inadequate...

EUVD-2025-35591

OpenWrt Project is a Linux operating system targeting embedded devices. Prior to version 24.10.4, ubusd contains a heap buffer overflow in the event registration parsing code. This allows an attacker to modify the head and potentially execute arbitrary code in the context of the ubus daemon. The...

CVE-2025-62176 Mastadon streaming server allows OAuth clients without the `read` scope to subscribe to public channels

Mastodon is a free, open-source social network server based on ActivityPub. In Mastodon before 4.4.6, 4.3.14, and 4.2.27, the streaming server accepts serving events for public timelines to clients using any valid authentication token, even if those tokens lack the read:statuses scope. This allow...

EUVD-2008-0056

Malware in sbrugna...

EUVD-2012-5975

Malware in sbrugna...

EUVD-2013-1679

Malware in sbrugna...

EUVD-2012-1190

Malware in sbrugna...

EUVD-2021-11640

Malware in sbrugna...

EUVD-2008-0904

Malware in sbrugna...

EUVD-2007-4895

Malware in sbrugna...

EUVD-2021-21090

Malware in sbrugna...

EUVD-2013-1847

Malware in sbrugna...

A week in security (September 29 – October 5)

Last week on Malwarebytes Labs: From threats to apology, hackers pull child data offline after public backlash Your Meta AI conversations may come back as ads in your feed Scam Facebook groups send malicious Android malware to seniors Sendit tricked kids, harvested their data, and faked messages,...

EUVD-2025-8569

Malicious code in bioql PyPI...

EUVD-2025-7984

Malicious code in bioql PyPI...

EUVD-2023-38323

Malicious code in bioql PyPI...

EUVD-2023-55583

Malicious code in bioql PyPI...

EUVD-2023-2607

Malicious code in bioql PyPI...

EUVD-2021-30808

Malicious code in bioql PyPI...