New PXA Stealer Malware Targets Banks, Uses Telegram to Exfiltrate Data

CyberProof researchers have detected a 10% surge in PXA Stealer attacks targeting financial institutions in Q1 2026. Learn…...

CVE-2026-30039

creationtimestamp| type| source ---|---|--- 2026-03-26 03:00:04+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/77241...

CVE-2025-52204

creationtimestamp| type| source ---|---|--- 2026-03-25 20:02:55+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/77212...

EUVD-2026-15543

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Socio WP Telegram Widget and Join Link wptelegram-widget allows Reflected XSS.This issue affects WP Telegram Widget and Join Link: from n/a through = 2.2.13...

CVE-2026-23807

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Socio WP Telegram Widget and Join Link wptelegram-widget allows Reflected XSS.This issue affects WP Telegram Widget and Join Link: from n/a through = 2.2.13...

CVE-2026-34041

creationtimestamp| type| source ---|---|--- 2026-03-25 16:46:05+00:00| published-proof-of-concept| https://github.com/nektos/act/security/advisories/GHSA-xmgr-9pqc-h5vw 2026-03-31 05:17:29+00:00| published-proof-of-concept| Telegram/84MSU-hIhNrWnS8A8cOqhlUxSHC6aqIIGr26pihaT5cA3PI...

CVE-2026-23807 WordPress WP Telegram Widget and Join Link plugin <= 2.2.13 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Socio WP Telegram Widget and Join Link wptelegram-widget allows Reflected XSS.This issue affects WP Telegram Widget and Join Link: from n/a through = 2.2.13...

CVE-2026-23807 WordPress WP Telegram Widget and Join Link plugin <= 2.2.13 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Socio WP Telegram Widget and Join Link wptelegram-widget allows Reflected XSS.This issue affects WP Telegram Widget and Join Link: from n/a through = 2.2.13...

CVE-2026-23807

The CVE-2026-23807 entry concerns the WordPress WP Telegram Widget and Join Link plugin up to version 2.2.13, which is affected by a Reflected Cross-Site Scripting (XSS) vulnerability caused by improper neutralization of input during web page generation. The issue affects WP Telegram Widget and J...

CVE-2026-34036

creationtimestamp| type| source ---|---|--- 2026-03-25 13:49:24+00:00| published-proof-of-concept| https://github.com/Dolibarr/dolibarr/security/advisories/GHSA-2mfj-r695-5h9r 2026-03-31 23:00:10+00:00| published-proof-of-concept| Telegram/P0Q0ZCX8Ywjq9vjEgqv2AzrjbsHPHPXVA5rNa0Ss-R1H3I 2026-04-01...

PT-2026-27842

Name of the Vulnerable Software and Affected Versions WP Telegram Widget and Join Link versions through 2.2.13 Description The software contains a flaw related to improper handling of user-supplied data during web page creation, which can lead to reflected cross-site scripting XSS. This allows an...

WordPress plugin WP Telegram Widget and Join Link 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows users to create personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be installed t...

Ghost Campaign Uses 7 npm Packages to Steal Crypto Wallets and Credentials

Cybersecurity researchers have uncovered a new set of malicious npm packages that are designed to steal cryptocurrency wallets and sensitive data. The activity is being tracked by ReversingLabs as the Ghost campaign. The list of identified packages, all published by a user named mikilanjillo, is...

CVE-2026-30655

creationtimestamp| type| source ---|---|--- 2026-03-24 02:00:04+00:00| seen| https://t.me/GithubRedTeam/76903 2026-08-27 15:00:11+00:00| seen| https://t.me/cve0day/303 2026-08-28 00:00:41+00:00| seen| https://t.me/cve0day/303 2026-08-29 00:00:30+00:00| published-proof-of-concept|...

CVE-2026-30498

creationtimestamp| type| source ---|---|--- 2026-03-23 18:00:04+00:00| seen| https://t.me/GithubRedTeam/76860...

CVE-2026-33693

creationtimestamp| type| source ---|---|--- 2026-03-23 15:39:21+00:00| published-proof-of-concept| https://github.com/LemmyNet/lemmy/security/advisories/GHSA-q537-8fr5-cw35 2026-03-23 23:02:30+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/76888...

Malicious code in hash-utils-py (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 4177b7c46ecbfa35116b35a2a491107d0514cd6551a447b7213ef6e097172939 During importing the module, the code attempts to exfiltrate sensitive Telegram's client session files. --- Category: MALICIOUS - The campaign has clearly...

MAL-2026-2118 Malicious code in hash-utils-py (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 4177b7c46ecbfa35116b35a2a491107d0514cd6551a447b7213ef6e097172939 During importing the module, the code attempts to exfiltrate sensitive Telegram's client session files. --- Category: MALICIOUS - The campaign has clearly...

WordPress WP Telegram Widget and Join Link plugin <= 2.2.13 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by johska in WordPress Plugin WP Telegram Widget and Join Link versions = 2.2.13...

CVE-2026-24516

creationtimestamp| type| source ---|---|--- 2026-03-22 21:00:03+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/76685 2026-04-03 09:00:05+00:00| published-proof-of-concept| Telegram/iJe41NTkZQJK4wFVG9OP9y2V0JVLEcjlDCmGEFn1YNc-zvI...