Yordam Katalog 安全漏洞

Yordam Katalog is a library automation software from the Turkish company Yordam. A security vulnerability exists in Yordam Katalog versions prior to 21.7 that stems from vulnerability to path traversal attacks...

Malicious code in most-common-turkish-words (npm)

The package most-common-turkish-words was found to contain malicious code...

radio-paradise-api (0.0.1), turkish-synonyms-api (0.0.0) potentially affected by unknown CVE via memoize-with-leveldb (>=0.0.1, <=2.0.0)

memoize-with-leveldb NPM version =0.0.1, =2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on memoize-with-leveldb and may be impacted: - radio-paradise-api 0.0.1 - turkish-synonyms-api 0.0.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-261...

MAL-2025-37318 Malicious code in turkish-synonyms-api (npm)

The package turkish-synonyms-api was found to contain malicious code...

MAL-2025-37317 Malicious code in turkish-alphabet (npm)

The package turkish-alphabet was found to contain malicious code...

MAL-2025-26736 Malicious code in most-common-turkish-words (npm)

The package most-common-turkish-words was found to contain malicious code...

Malicious code in turkish-synonyms-api (npm)

The package turkish-synonyms-api was found to contain malicious code...

Malicious code in turkish-alphabet (npm)

The package turkish-alphabet was found to contain malicious code...

Ncvav Virtual PBX Software SQL注入漏洞

Ncvav Virtual PBX Software is a telephone exchange system from the Turkish company Ncvav. A SQL injection vulnerability exists in Ncvav Virtual PBX Software versions prior to 2025.07.09, which stems from improper neutralization of special elements and is susceptible to SQL injection attacks...

Patchwork Targets Turkish Defense Firms with Spear-Phishing Using Malicious LNK Files

The threat actor known as Patchwork has been attributed to a new spear-phishing campaign targeting Turkish defense contractors with the goal of gathering strategic intelligence. "The campaign employs a five-stage execution chain delivered via malicious LNK files disguised as conference invitation...

PTT HGS Mobile App 安全漏洞

PTT HGS Mobile App is a mobile application from PTT Turkey that is used to facilitate the management and payment of Highway Electronic Toll Collection System HGS fees. A security vulnerability exists in PTT HGS Mobile App versions prior to 6.5.0, which stems from the presence of a vulnerability...

Web Hacking Service ‘Araneida’ Tied to Turkish IT Firm

Cybercriminals are selling hundreds of thousands of credential sets stolen with the help of a cracked version of Acunetix , a powerful commercial web app vulnerability scanner, new research finds. The cracked software is being resold as a cloud-based attack tool by at least two different services...

Bitter APT Targets Turkish Defense Sector with WmRAT and MiyaRAT Malware

A suspected South Asian cyber espionage threat group known as Bitter targeted a Turkish defense sector organization in November 2024 to deliver two C++-malware families tracked as WmRAT and MiyaRAT. "The attack chain used alternate data streams in a RAR archive to deliver a shortcut LNK file that...

CosmicBeetle Deploys Custom ScRansom Ransomware, Partnering with RansomHub

The threat actor known as CosmicBeetle has debuted a new custom ransomware strain called ScRansom in attacks targeting small- and medium-sized businesses SMBs in Europe, Asia, Africa, and South America, while also likely working as an affiliate for RansomHub. "CosmicBeetle replaced its previously...

New Android Trojan "BlankBot" Targets Turkish Users' Financial Data

Cybersecurity researchers have discovered a new Android banking trojan called BlankBot targeting Turkish users with an aim to steal financial information. "BlankBot features a range of malicious capabilities, which include customer injections, keylogging, screen recording and it communicates with...

Hearing Tracking System Security Vulnerability

Simgesel Hearing Tracking System is a hearing tracking system from the Turkish company Simgesel. A security vulnerability exists in Hearing Tracking System that originated from allowing authorization bypass...

Turkish Hackers Exploiting Poorly Secured MS SQL Servers Across the Globe

Poorly secured Microsoft SQL MS SQL servers are being targeted in the U.S., European Union, and Latin American LATAM regions as part of an ongoing financially motivated campaign to gain initial access. "The analyzed threat campaign appears to end in one of two ways, either the selling of 'access'...

CVE-2023-6145

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in İstanbul Soft Informatics and Consultancy Limited Company Softomi Advanced C2C Marketplace Software allows SQL Injection.This issue affects Softomi Advanced C2C Marketplace Software: before 1212202...

turkishexporter.com.tr Cross Site Scripting vulnerability OBB-3805045

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Hacker Leaks Vaccination Records of Over 2 Million Turkish Citizens

By Waqas The database was leaked in September 2023; however, it is still accessible to individuals with forum access. This is a post from HackRead.com Read the original post: Hacker Leaks Vaccination Records of Over 2 Million Turkish Citizens...