Amadey Exploiting Self-Hosted GitLab to Distribute StealC

Amadey Exploiting Self-Hosted GitLab to Distribute StealC By Rahul Sharma · December 18, 2025 Executive summary Amadey is a malware loader that has been active since 2018, primarily used to distribute second-stage payloads and infostealers. While Amadey has been previously known to distribute...

Whose Narrative Is It Anyway? A KV Cache Manipulation Attack

The Key ValueKV cache is an important component for efficient inference in autoregressive Large Language Models LLMs, but its role as a representation of the model's internal state makes it a potential target for integrity attacks. This paper introduces "History Swapping," a novel block-level...

CVE-2025-63248

DWSurvey 6.14.0 is vulnerable to Incorrect Access Control. When deleting a questionnaire, replacing the questionnaire ID with the ID of another questionnaire can enable the deletion of other questionnaires...

EUVD-2020-0867

Malware in sbrugna...

EUVD-2020-23545

Malware in sbrugna...

EUVD-2014-1448

Malware in sbrugna...

EUVD-2007-6393

Malware in sbrugna...

EUVD-2019-0213

Malware in sbrugna...

EUVD-2015-7920

Malware in sbrugna...

EUVD-2006-4013

Malware in sbrugna...

EUVD-2022-55245

Malicious code in bioql PyPI...

dm: limit swapping tables for devices with zone write plugs

...

Scattered Spider Hacker Gets 10 Years, $13M Restitution for SIM Swapping Crypto Theft

A 20-year-old member of the notorious cybercrime gang known as Scattered Spider has been sentenced to ten years in prison in the U.S. in connection with a series of major hacks and cryptocurrency thefts. Noah Michael Urban pleaded guilty to charges related to wire fraud and aggravated identity...

The vulnerability of the usb_paswd.asp file in the jhttpd component of D-Link DI-8400 router software allows a hacker to induce a service failure.

The vulnerability of the usbpaswd.asp file of the jhttpd component in D-Link DI-8400 router microprogramming software is related to pointer swapping errors. Exploiting this vulnerability can allow a malicious actor to cause service failure remotely...

The vulnerability of the cs40l50Upload_OWT() function in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the cs40l50UploadOWT function in the Linux operating system is related to a pointer swapping error. Exploiting this vulnerability could allow an attacker to cause a service failure...

Hot-Swap MarkBoard: an Efficient Black-Box Watermarking Approach for Large-Scale Model Distribution

Recently, Deep Learning DL models have been increasingly deployed on end-user devices as On-Device AI, offering improved efficiency and privacy. However, this deployment trend poses more serious Intellectual Property IP risks, as models are distributed on numerous local devices, making them...

The vulnerability of the eir_get_service_data() function in the Linux operating system allows a hacker to induce a service failure.

The vulnerability of the eirgetservicedata function in the Linux operating system is related to a pointer swapping error. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the NArchive::NCom::CHandler::GetStream method in the 7-Zip archive processor’s Compound component allows a attacker to cause a service failure.

The vulnerability of the NArchive::NCom::CHandler::GetStream method in the 7-Zip compressor’s Compound archive handler is related to pointer swapping errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the NTFS file system in Microsoft Windows operating systems allows attackers to increase their privileges.

The vulnerability of the NTFS file system in Microsoft Windows operating systems is related to pointer swapping errors. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the Adobe Framemaker desktop publishing system, related to the swapping of pointers, allows a hacker to trigger a service failure.

The vulnerability of the desktop publishing system Adobe Framemaker relates to the handling of pointers. Exploiting this vulnerability could allow an attacker to cause a service failure...