CVE-2025-62993 WordPress Notification for Telegram plugin <= 3.5.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in rainafarai Notification for Telegram notification-for-telegram allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Notification for Telegram: from n/a through = 3.5.1...

CVE-2025-62993 WordPress Notification for Telegram plugin <= 3.5.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in rainafarai Notification for Telegram notification-for-telegram allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Notification for Telegram: from n/a through = 3.5.1...

Goodbye, dark Telegram: Blocks are pushing the underground out

Telegram has won over users worldwide, and cybercriminals are no exception. While the average user chooses a messaging app based on convenience, user experience and stability and perhaps, cool stickers, cybercriminals evaluate platforms through a different lens. When it comes to anonymity, privac...

WordPress plugin Notification for Telegram 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin.... A security...

PT-2025-50019

Missing Authorization vulnerability in rainafarai Notification for Telegram notification-for-telegram allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Notification for Telegram: from n/a through = 3.4.7...

How phishers hide banking scams behind free Cloudflare Pages

During a recent investigation, we uncovered a phishing operation that combines free hosting on developer platforms with compromised legitimate websites to build convincing banking and insurance login portals. These fake pages don't just grab a username and password–they also ask for answers to...

CVE-2017-14187

creationtimestamp| type| source ---|---|--- 2025-12-08 09:00:04+00:00| published-proof-of-concept| Telegram/HmU5z33cuHG2mX7FyWUOrrqLxPcpZ2hARPr8TDn9QyB7v9o...

EUVD-2025-201590

Malicious code in python-tg-bot PyPI...

MAL-2025-192365 Malicious code in python-tg-bot (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 5397ab6595b8237172e9a49952d092803e03526e3dda8277c64dc4d26ae45ff2 During importing, a dependency with infostealer is loaded and package attempts to exfiltrate credentials. --- Category: MALICIOUS - The campaign has clearly...

CVE-2025-65300

creationtimestamp| type| source ---|---|--- 2025-12-06 07:53:15+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/61880 2025-12-06 15:00:08+00:00| published-proof-of-concept| Telegram/uvU3gBnf9Z1WMovVGRRTdFZDjWMl1qRCMdPMKGqSGuqnW3I...

Malicious code in rendom (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 1effe6d94e0635864c22ea960a22b40294c3f2e510550046139bcd78f62a33fa The package contains a Telegram bot to perform remote control of the computer. The package name additionally suggests typosquatting against standard random...

MAL-2025-192323 Malicious code in rendom (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 1effe6d94e0635864c22ea960a22b40294c3f2e510550046139bcd78f62a33fa The package contains a Telegram bot to perform remote control of the computer. The package name additionally suggests typosquatting against standard random...

India Orders Messaging Apps to Work Only With Active SIM Cards to Prevent Fraud and Misuse

India's Department of Telecommunications DoT has issued directions to app-based communication service providers to ensure that the platforms cannot be used without an active SIM card linked to the user's mobile number. To that end, messaging apps like WhatsApp, Telegram, Snapchat, Arattai,...

CVE-2025-65806

creationtimestamp| type| source ---|---|--- 2025-12-02 11:45:45+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/61366 2025-12-02 15:00:08+00:00| published-proof-of-concept| Telegram/dX7Pwj7PqnF2da8IVWPgq-aFC6NZmOtStQ4m7OfqjtGR0Q...

CVE-2025-65321

creationtimestamp| type| source ---|---|--- 2025-12-02 09:00:05+00:00| published-proof-of-concept| Telegram/-j9GoQjMLfU83nNXg48f-GpPBYCZFQAe4vs-fv-sdiLYcz8...

Malicious code in telegram-api-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9de851a49849595878a33272868046f71f86d67b3664a73c4357dd58b2640fc The package telegram-api-test was found to contain malicious code...

MAL-2025-191596 Malicious code in telegram-api-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9de851a49849595878a33272868046f71f86d67b3664a73c4357dd58b2640fc The package telegram-api-test was found to contain malicious code...

CVE-2025-13796

creationtimestamp| type| source ---|---|--- 2025-12-01 03:00:07+00:00| published-proof-of-concept| Telegram/q7VD5LFLz0DQI0He0CdIi8UKDEAJAk3zBKou56yKpQVq99g...

CVE-2025-9435

creationtimestamp| type| source ---|---|--- 2025-11-30 14:31:12+00:00| seen| Telegram/AYjypq9TrL8W2-jaBfft0eKcopILEbguaFc8wRkNOIsbN0...

WordPress Notification for Telegram plugin <= 3.4.7 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Ahmad in WordPress Plugin Notification for Telegram versions = 3.4.7...