CVE-2017-14187

creationtimestamp| type| source ---|---|--- 2025-12-08 09:00:04+00:00| published-proof-of-concept| Telegram/HmU5z33cuHG2mX7FyWUOrrqLxPcpZ2hARPr8TDn9QyB7v9o...

EUVD-2025-201590

Malicious code in python-tg-bot PyPI...

MAL-2025-192365 Malicious code in python-tg-bot (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 5397ab6595b8237172e9a49952d092803e03526e3dda8277c64dc4d26ae45ff2 During importing, a dependency with infostealer is loaded and package attempts to exfiltrate credentials. --- Category: MALICIOUS - The campaign has clearly...

CVE-2025-65300

creationtimestamp| type| source ---|---|--- 2025-12-06 07:53:15+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/61880 2025-12-06 15:00:08+00:00| published-proof-of-concept| Telegram/uvU3gBnf9Z1WMovVGRRTdFZDjWMl1qRCMdPMKGqSGuqnW3I...

Malicious code in rendom (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 1effe6d94e0635864c22ea960a22b40294c3f2e510550046139bcd78f62a33fa The package contains a Telegram bot to perform remote control of the computer. The package name additionally suggests typosquatting against standard random...

MAL-2025-192323 Malicious code in rendom (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 1effe6d94e0635864c22ea960a22b40294c3f2e510550046139bcd78f62a33fa The package contains a Telegram bot to perform remote control of the computer. The package name additionally suggests typosquatting against standard random...

India Orders Messaging Apps to Work Only With Active SIM Cards to Prevent Fraud and Misuse

India's Department of Telecommunications DoT has issued directions to app-based communication service providers to ensure that the platforms cannot be used without an active SIM card linked to the user's mobile number. To that end, messaging apps like WhatsApp, Telegram, Snapchat, Arattai,...

CVE-2025-65806

creationtimestamp| type| source ---|---|--- 2025-12-02 11:45:45+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/61366 2025-12-02 15:00:08+00:00| published-proof-of-concept| Telegram/dX7Pwj7PqnF2da8IVWPgq-aFC6NZmOtStQ4m7OfqjtGR0Q...

CVE-2025-65321

creationtimestamp| type| source ---|---|--- 2025-12-02 09:00:05+00:00| published-proof-of-concept| Telegram/-j9GoQjMLfU83nNXg48f-GpPBYCZFQAe4vs-fv-sdiLYcz8...

Malicious code in telegram-api-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9de851a49849595878a33272868046f71f86d67b3664a73c4357dd58b2640fc The package telegram-api-test was found to contain malicious code...

MAL-2025-191596 Malicious code in telegram-api-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9de851a49849595878a33272868046f71f86d67b3664a73c4357dd58b2640fc The package telegram-api-test was found to contain malicious code...

CVE-2025-13796

creationtimestamp| type| source ---|---|--- 2025-12-01 03:00:07+00:00| published-proof-of-concept| Telegram/q7VD5LFLz0DQI0He0CdIi8UKDEAJAk3zBKou56yKpQVq99g...

CVE-2025-9435

creationtimestamp| type| source ---|---|--- 2025-11-30 14:31:12+00:00| seen| Telegram/AYjypq9TrL8W2-jaBfft0eKcopILEbguaFc8wRkNOIsbN0...

WordPress Notification for Telegram plugin <= 3.4.7 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Ahmad in WordPress Plugin Notification for Telegram versions = 3.4.7...

CVE-2025-59534

creationtimestamp| type| source ---|---|--- 2025-11-28 15:27:35+00:00| published-proof-of-concept| https://t.me/cKure/15756...

CVE-2025-65881

creationtimestamp| type| source ---|---|--- 2025-11-28 15:00:07+00:00| published-proof-of-concept| Telegram/lq4m-JYIdMsfIAsI3lNQ7LcrQOYDBCp5BuoQk99xpsmGKag...

Tomiris wreaks Havoc: New tools and techniques of the APT group

While tracking the activities of the Tomiris threat actor, we identified new malicious operations that began in early 2025. These attacks targeted foreign ministries, intergovernmental organizations, and government entities, demonstrating a focus on high-value political and diplomatic...

CVE-2025-59372

creationtimestamp| type| source ---|---|--- 2025-11-27 18:57:29+00:00| seen| https://t.me/notlukatsky/7751...

CVE-2025-65862

creationtimestamp| type| source ---|---|--- 2025-11-27 02:04:26+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/60896...

CVE-2025-13068

The Telegram Bot & Channel plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Telegram username in all versions up to, and including, 4.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web...