CVE-2018-8172

creationtimestamp| type| source ---|---|--- 2026-09-18 04:00:05+00:00| published-proof-of-concept| Telegram/NayOVZjVJC06L-b7r9PCl1kQpZR0WXnoIQBtAMCRTFS6vQI 2026-09-19 00:00:49+00:00| published-proof-of-concept| Telegram/NayOVZjVJC06L-b7r9PCl1kQpZR0WXnoIQBtAMCRTFS6vQI...

CVE-2026-88533

creationtimestamp| type| source ---|---|--- 2026-09-17 22:00:04+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/102606 2026-09-18 00:00:05+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/102606 2026-09-18 04:00:05+00:00| published-proof-of-concept|...

Malicious code in aiosendletter (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29baa6f2cbfb2ef9907be7830505e33e82b5a1e6a45eb7f995022d09f5841f09 The package advertises itself as a 'safe bug reporter' but its init function archives the contents of %LOCALAPPDATA%\logs with shutil.makearchive and...

MAL-2026-16264 Malicious code in aiosendletter (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29baa6f2cbfb2ef9907be7830505e33e82b5a1e6a45eb7f995022d09f5841f09 The package advertises itself as a 'safe bug reporter' but its init function archives the contents of %LOCALAPPDATA%\logs with shutil.makearchive and...

CVE-2026-78424

creationtimestamp| type| source ---|---|--- 2026-09-17 16:00:04+00:00| seen| https://t.me/techb0ltGenona/7003 2026-09-18 00:00:05+00:00| seen| https://t.me/techb0ltGenona/7003 2026-09-28 13:15:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/jfpz2wxp4zocg 2026-09-28 18:38:06+00:00|...

Iran-Linked Handala Hack Tied to HEAVYGRAM Telegram Backdoor That Can Steal Passwords

The Iran-linked "hacktivist" persona known as Handala Hack has been attributed to a Telegram-based surveillance backdoor called HEAVYGRAM and a Delphi-based utility known as CRUDEEXCLUDE. "HEAVYGRAM offers builtin commands supporting remote command execution, system, network and process informati...

CVE-2026-92162

creationtimestamp| type| source ---|---|--- 2026-09-17 09:00:03+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/102547 2026-09-18 00:00:09+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/102547 2026-10-20 14:51:16+00:00| seen|...

CVE-2026-89147

creationtimestamp| type| source ---|---|--- 2026-09-16 16:00:03+00:00| seen| https://t.me/bdufstecru/3457 2026-09-17 01:00:03+00:00| seen| https://t.me/bdufstecru/3457...

CVE-2026-92247

creationtimestamp| type| source ---|---|--- 2026-09-16 12:00:04+00:00| seen| https://t.me/GithubRedTeam/102453 2026-09-17 01:00:04+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/102453...

CVE-2026-79630

creationtimestamp| type| source ---|---|--- 2026-09-16 12:00:04+00:00| published-proof-of-concept| https://t.me/hackingAttack/194431 2026-09-16 12:00:05+00:00| published-proof-of-concept| https://t.me/hackingAttack/194429 2026-09-17 01:00:04+00:00| published-proof-of-concept|...

Malicious code in discord-resolvers (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6aa01ed90340a9458c2906ec74fd9277bb7d0e4da48ef09487639aa6c45e6791 The package published as discord-resolvers is unrelated to Discord. On require, index.js invokes startBackupLoop at top level, which recursively...

MAL-2026-16214 Malicious code in discord-resolvers (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6aa01ed90340a9458c2906ec74fd9277bb7d0e4da48ef09487639aa6c45e6791 The package published as discord-resolvers is unrelated to Discord. On require, index.js invokes startBackupLoop at top level, which recursively...

MAL-2026-16213 Malicious code in discord-players (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3eadb25768efba4ff9dc9170a838f90f6572993195d37e526543fa956e65faa2 index.js is the package main and unconditionally starts a backup loop at module top level. On require, BackupManager zips process.cwd excluding...

CVE-2026-92814: Improper Neutralization of Input During Web Page Generation

changedetection.io through 0.60.6 fails to escape the scraped page title in HTML notifications, allowing arbitrary markup injection. Attackers can place malicious markup in monitored page titles that reaches notification channels like email and Telegram as live content when the watchtitle token i...

Iranian Hackers Use Telegram-Controlled Malware to Spy on Dissidents and Journalists

Cybersecurity agencies in the United States, the United Kingdom, and the Netherlands have detailed a Windows malware that they say Iran's intelligence service uses to spy on dissidents, journalists, and activists around the world. The malware is controlled via the Telegram messaging app and can...

GHSA-72VJ-PVM4-MM7X

creationtimestamp| type| source ---|---|--- 2026-09-15 15:00:05+00:00| seen| https://t.me/bdufstecru/3445 2026-09-16 00:00:30+00:00| published-proof-of-concept| https://t.me/bdufstecru/3445...

CVE-2026-85586

creationtimestamp| type| source ---|---|--- 2026-09-15 15:00:05+00:00| seen| https://t.me/bdufstecru/3445 2026-09-16 00:00:30+00:00| published-proof-of-concept| https://t.me/bdufstecru/3445...

CVE-2026-12518

creationtimestamp| type| source ---|---|--- 2026-09-15 07:00:06+00:00| seen| https://t.me/RussianOSINT/7901 2026-09-15 13:30:07+00:00| seen| https://bsky.app/profile/cyberveille-ch.bsky.social/post/3mvkqachepv2u 2026-09-16 00:00:32+00:00| seen| https://t.me/RussianOSINT/7901...

CVE-2026-61578

creationtimestamp| type| source ---|---|--- 2026-09-14 20:00:06+00:00| published-proof-of-concept| Telegram/1Vwrq603LNSzLjTsf8z6M76upo6xgVWjVAK5cahZOMce6I 2026-09-15 00:00:10+00:00| published-proof-of-concept| Telegram/1Vwrq603LNSzLjTsf8z6M76upo6xgVWjVAK5cahZOMce6I...

CVE-2026-70648

creationtimestamp| type| source ---|---|--- 2026-09-14 20:00:06+00:00| published-proof-of-concept| Telegram/1Vwrq603LNSzLjTsf8z6M76upo6xgVWjVAK5cahZOMce6I 2026-09-15 00:00:10+00:00| published-proof-of-concept| Telegram/1Vwrq603LNSzLjTsf8z6M76upo6xgVWjVAK5cahZOMce6I...