87531 matches found
CVE-2025-5634
creationtimestamp| type| source ---|---|--- 2025-06-05 05:01:52+00:00| published-proof-of-concept| Telegram/oX1vYS7fbSJ0h1a0bZEPYKBgYMMh1l1U07HgwogbL2WglU...
CVE-2025-5631
creationtimestamp| type| source ---|---|--- 2025-06-05 04:00:35+00:00| published-proof-of-concept| Telegram/zv9JWZhXyWGVTukOVqho47sHM0os5LdGN6IAfmTAUbcmk...
CVE-2025-5626
creationtimestamp| type| source ---|---|--- 2025-06-05 02:00:22+00:00| published-proof-of-concept| Telegram/euXhbHsGx015k54gDP7v4lysNN30IVq03uDJTCPpV2PP448...
Demystifying Myth Stealer: A Rust Based InfoStealer
Demystifying Myth Stealer: A Rust Based InfoStealer By Niranjan Hegde, Vasantha Lakshmanan Ambasankar and Adarsh S · June 5, 2025 Introduction During regular proactive threat hunting, the Trellix Advanced Research Center identified a fully undetected infostealer malware sample written in Rust. Up...
Malicious PyPI, npm, and Ruby Packages Exposed in Ongoing Open-Source Supply Chain Attacks
Several malicious packages have been uncovered across the npm, Python, and Ruby package repositories that drain funds from cryptocurrency wallets, erase entire codebases after installation, and exfiltrate Telegram API tokens, once again demonstrating the variety of supply chain threats lurking in...
CVE-2025-5576
creationtimestamp| type| source ---|---|--- 2025-06-04 08:33:58+00:00| published-proof-of-concept| Telegram/JORd5OezDY3YsiR-DAhtuPFE5h5v2OCRMz2Z1Evvjd5Hz4...
CVE-2025-5560
creationtimestamp| type| source ---|---|--- 2025-06-04 04:30:25+00:00| published-proof-of-concept| Telegram/5MAouqYuwJRn-HWB5GQvxH0ZU-Ppluq5BBjqGoXd7N0SAe8...
GHSA-8CJ5-5RVV-WF4V
creationtimestamp| type| source ---|---|--- 2025-06-02 20:00:25+00:00| published-proof-of-concept| Telegram/M9ruxIqfssiRmufIiVDPBVG9309mAKgr9KyLQBBOZAkMKU...
CVE-2025-0819
creationtimestamp| type| source ---|---|--- 2025-06-02 15:01:46+00:00| seen| Telegram/7xIhyJO7ZWQeZYOmdLINMZ9FIiDPF6RfLVlvHuHgi-enE...
CVE-2025-1246
creationtimestamp| type| source ---|---|--- 2025-06-02 15:01:46+00:00| seen| Telegram/7xIhyJO7ZWQeZYOmdLINMZ9FIiDPF6RfLVlvHuHgi-enE...
GHSA-JVVH-FP57-2P32
creationtimestamp| type| source ---|---|--- 2025-06-02 12:01:30+00:00| published-proof-of-concept| Telegram/rXYL1lXWkEU6X4s-B12vmJDiUkp3J5RpkWN8Rf8Wlc0XZWI...
GHSA-J972-J939-P2V3
creationtimestamp| type| source ---|---|--- 2025-06-02 12:01:30+00:00| published-proof-of-concept| Telegram/rXYL1lXWkEU6X4s-B12vmJDiUkp3J5RpkWN8Rf8Wlc0XZWI...
CVE-2025-5434
creationtimestamp| type| source ---|---|--- 2025-06-02 08:01:07+00:00| published-proof-of-concept| Telegram/MNJNzGAF9bpm-8pO2mYbfB9j1qFTK3WJrzpGubMjm4ci4gI...
CVE-2025-5236
The CVE concerns the NinjaTeam Chat for Telegram WordPress plugin (≤1.1). The root cause is insufficient input sanitization and output escaping for the username parameter, leading to Stored Cross-Site Scripting. Exploitation requires an authenticated attacker with Contributor-level access or high...
WordPress plugin NinjaTeam Chat for Telegram 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...
WordPress NinjaTeam Chat for Telegram plugin <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via username Parameter vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting via username Parameter vulnerability discovered by Peter Thaleikis in WordPress Plugin NinjaTeam Chat for Telegram versions = 1.1...
CVE-2025-46204
creationtimestamp| type| source ---|---|--- 2025-05-29 19:36:32+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/38577...
From Infection to Access: A 24-Hour Timeline of a Modern Stealer Campaign
Stealer malware no longer just steals passwords. In 2025, it steals live sessions—and attackers are moving faster and more efficiently than ever. While many associate account takeovers with personal services, the real threat is unfolding in the enterprise. Flare's latest research, The Account and...