EUVD-2003-0387

Malware in sbrugna...

EUVD-2025-8254

Malicious code in bioql PyPI...

Malicious code in soracom-xmas-pi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 409a66069270c0626a428339c624520ef13c0cd1b1a96b7068da663ba96c065d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4886 Malicious code in soracom-xmas-pi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 409a66069270c0626a428339c624520ef13c0cd1b1a96b7068da663ba96c065d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

AMSITrigger - The Hunt For Malicious Strings

Hunting for Malicious Strings Usage: AMSI calls xmas tree mode -d, --debug Show Debug Info -m, --maxsiglength=VALUE Maximum signature Length to cater for, default=2048 -c, --chunksize=VALUE Chunk size to send to AMSIScanBuffer, default=4096 -h, -?, --help Show Help " -i, --inputfile=VALUE...

h1-ctf: Stopping Grinch to ruin XMas!

Hello, Gonna just submit flags first then will send my write up later tomorrow. flag1: flag48104912-28b0-494a-9995-a203d1e261e7 https://hackyholidays.h1ctf.com/robots.txt recon revealing hidden endpoint flag2: flagb7ebcb75-9100-4f91-8454-cfb9574459f7 https://hackyholidays.h1ctf.com/s3cr3t-ar3a...

Xmas Light Security Improves… a bit

We've looked at smart Xmas lights before; whilst they were vulnerable, there was no consequence to the hack other than making them flash in a different order! In 2018 we looked at the all-new Twinkly smart festive lights. We found a number of security issues, reported them to the vendor and to a...

Xmas - Christmas run game - Native code usage, SD-card access, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application Xmas - Christmas run game published at the 'play' market has multiple vulnerabilities...

My Charlie Brown Xmas Tree - Base64 encoded String, External URLs, KeyStore usage vulnerabilities

HackApp vulnerability scanner discovered that application My Charlie Brown Xmas Tree published at the 'play' market has multiple vulnerabilities...

New Year: Xmas Tree Puzzle - Exported ContentProvider, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application New Year: Xmas Tree Puzzle published at the 'play' market has multiple vulnerabilities...

Little Commander 2 Xmas - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Little Commander 2 Xmas published at the 'play' market has multiple vulnerabilities...

My Newborn Sister-Xmas Miracle - WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application My Newborn Sister-Xmas Miracle published at the 'play' market has multiple vulnerabilities...

Santa Runner :Xmas Subway Surf - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Santa Runner :Xmas Subway Surf published at the 'play' market has multiple vulnerabilities...

How to Crack GCHQ Crypto Puzzle? — Here's the Solution

GCHQ has finally released the solution to their head spinning Xmas Puzzle, after all, the participants failed to reach the final answer. GCHQ had released a crypto puzzle, dubbed Xmas Puzzle, on 9th December in the form of a Christmas Card that went viral online soon after its release. Nearly...

WordPress Xmas Theme - Email Spoofing

Because of this vulnerability, the attackers can send email from your server without authorization. Solution Disable this theme...

Koobface Stocking Stuffer Malware

The Koobface botnet, one of the most efficient social engineering driven botnets, is entering the Xmas season with a newly introduced template spoofing a YouTube video page, in between enticing the visitor into installing a bogus Adobe Flash Player Update New Koobface campaign spoofs Adobe’s Flas...