Cybersecurity researchers are calling attention to a series of cyber attacks that have targeted Chinese-speaking regions like Hong Kong, Taiwan, and Mainland China with a known malware called ValleyRAT.
The attacks leverage a multi-stage loader dubbed …
A vulnerability was found in vim up to 9.1.1042. It has been classified as critical. This affects an unknown part of the component Silent Ex Mode. The manipulation leads to out-of-bounds write.
This vulnerability is uniquely identified as CVE-2025-240…
A vulnerability was found in IBM UrbanCode Deploy up to 7.0.5.24/7.1.2.10/7.2.3.13 and classified as problematic. Affected by this issue is some unknown functionality of the component HTTP Request Handler. The manipulation leads to sensitive informatio…
The Computer Emergency Response Team of Ukraine (CERT-UA) is warning of ongoing attempts by unknown threat actors to impersonate the cybersecurity agency by sending AnyDesk connection requests.
The AnyDesk requests claim to be for conducting an audit t…
A vulnerability has been found in OpenVPN Easy-RSA up to 3.1.7 and classified as problematic. Affected by this vulnerability is an unknown functionality of the component Private CA Key Handler. The manipulation leads to inadequate encryption strength.
…
I am adding to my web app the ability for a user to log in using their Google or Microsoft account. The default way the ASP.NET Identity Library implements this is on the first use, when they get registered, it prompts for their email with…
A vulnerability, which was classified as critical, was found in String Locator Plugin up to 2.6.6 on WordPress. Affected is an unknown function. The manipulation leads to code injection.
This vulnerability is traded as CVE-2024-10936. It is possible t…
A vulnerability, which was classified as problematic, has been found in IBM UrbanCode Velocity and DevOps Velocity. This issue affects some unknown processing. The manipulation leads to use of web browser cache containing sensitive information.
The id…
A vulnerability classified as problematic was found in azukaar Cosmos-Server up to 0.17.6. This vulnerability affects unknown code. The manipulation leads to observable response discrepancy.
This vulnerability was named CVE-2025-23214. The attack can …
A vulnerability classified as problematic has been found in dahlia fedify up to 1.0.13/1.1.10/1.2.10/1.3.3. This affects an unknown part. The manipulation leads to infinite loop.
This vulnerability is uniquely identified as CVE-2025-23221. It is possi…
