WordPress Bot for Telegram on WooCommerce plugin <= 1.2.6 - Broken Access Control Vulnerability

Broken Access Control Vulnerability discovered by ch4r0n in WordPress Plugin Bot for Telegram on WooCommerce versions = 1.2.6...

CVE-2025-48268 WordPress Bot for Telegram on WooCommerce <= 1.2.6 - Broken Access Control Vulnerability

Missing Authorization vulnerability in Guru Team Bot for Telegram on WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Bot for Telegram on WooCommerce: from n/a through 1.2.6...

CVE-2025-48268 WordPress Bot for Telegram on WooCommerce plugin <= 1.2.6 - Broken Access Control Vulnerability

Missing Authorization vulnerability in Guru Team Bot for Telegram on WooCommerce bot-for-telegram-on-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Bot for Telegram on WooCommerce: from n/a through = 1.2.6...

Pulsegram - Integrated Keylogger With Telegram

PulseGram is a keylogger integrated with a Telegram bot. It is a monitoring tool that captures keystrokes, clipboard content, and screenshots, sending all the information to a configured Telegram bot. It is designed for use in adversary simulations and security testing contexts. ⚠️ Warning: This...

Rogue npm Packages Mimic Telegram Bot API to Plant SSH Backdoors on Linux Systems

Cybersecurity researchers have uncovered three malicious packages in the npm registry that masquerade as a popular Telegram bot library but harbor SSH backdoors and data exfiltration capabilities. The packages in question are listed below - node-telegram-utils 132 downloads node-telegram-bots-api...

Khan Academy: Leaked reused password for a few Khan Academy users

A large number of Khan Academy user credentials, including emails and passwords, were exposed through a Telegram bot. The exact source of the leaked data is unknown, but the volume of exposed information was substantial...

CVE-2025-32757

creationtimestamp| type| source ---|---|--- 2025-04-11 03:49:48+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/11366...

CVE-2024-1076

creationtimestamp| type| source ---|---|--- 2025-03-25 19:24:49+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/8736...

MAL-2025-2621 Malicious code in bsb-backup (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: oracle-using-macaron 7c8850cc513318b8ede38268eed0fee01ba44c81087cd289294b63bada9f394c This package decodes and executes a script during installation to set up a Telegram bot for device event monitoring. However, the code is...

MAL-2025-2599 Malicious code in bsb-family-bot (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: oracle-using-macaron 73381c6a90c69556e5d81fd8b66b24eb30907c18f1b24a8a1de3635d533d3284 This package decodes and executes a script during installation to set up a Telegram bot for device event monitoring. However, the code is...

New Golang-Based Backdoor Uses Telegram Bot API for Evasive C2 Operations

Cybersecurity researchers have shed light on a new Golang-based backdoor that uses Telegram as a mechanism for command-and-control C2 communications. Netskope Threat Labs, which detailed the functions of the malware, described it as possibly of Russian origin. "The malware is compiled in Golang a...

MAL-2025-1443 Malicious code in telegram-bot-hoster3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a657b92399440588fd143dbe4c319d27882350d825a29877b96676add635391e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in telegram-bot-hoster3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a657b92399440588fd143dbe4c319d27882350d825a29877b96676add635391e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in telegram-bot-hoster2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4f0cd2b5b45da2e84d95f63a130c4c69abcf83af2365c6a45ab3a60b6a61fc41 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1440 Malicious code in telegram-bot-host (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7bfce13be8a817c4f8165b600702f49df73736a44741857d560aab26bfa00162 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1442 Malicious code in telegram-bot-hoster2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4f0cd2b5b45da2e84d95f63a130c4c69abcf83af2365c6a45ab3a60b6a61fc41 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1441 Malicious code in telegram-bot-hoster (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c3b1f6f7d44822f546914ae3155fe660229e8ccb900d78e88fe8dfa32aa1ae90 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in telegram-bot-hoster (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c3b1f6f7d44822f546914ae3155fe660229e8ccb900d78e88fe8dfa32aa1ae90 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in telegram-bot-host (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7bfce13be8a817c4f8165b600702f49df73736a44741857d560aab26bfa00162 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in node-tg-bot-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aa25c03f22731cf537fcef307f4a17c8cde7f9e55ec3fbd4e39168cb337ceccd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...