Aggregator

Qilin

Dark Feed IO
1 month 3 weeks ago

You must login to view this content

cohenido

Noodlophile Malware Creators Evolve Tactics with Fake Job Postings and Phishing Lures

Cyber Security News
1 month 3 weeks ago

The Noodlophile information stealer, originally uncovered in May 2025, has significantly evolved its attack strategies to bypass security measures. Initially, this malware hid behind deceptive advertisements for fake AI video generation platforms on social media, tricking users into downloading malicious ZIP files. These early campaigns focused on harvesting credentials and cryptocurrency wallets, which were then […]

The post Noodlophile Malware Creators Evolve Tactics with Fake Job Postings and Phishing Lures appeared first on Cyber Security News.

Tushar Subhra Dutta

16th February – Threat Intelligence Report

Check Point Research
1 month 3 weeks ago

For the latest discoveries in cyber research for the week of 16th February, please download our Threat Intelligence Bulletin. TOP ATTACKS AND BREACHES Dutch telecom provider Odido was hit by a data breach following unauthorized access to its customer management system. Attackers extracted personal data of 6.2 million customers, including names, addresses, phone numbers, email […]

The post 16th February – Threat Intelligence Report appeared first on Check Point Research.

lorenf

CVE-2025-22004 | Linux Kernel up to 6.1.131/6.6.84/6.12.20/6.13.8 atm lec_send use after free (Nessus ID 234309 / WID-SEC-2025-0698)

Vuldb Updates
1 month 3 weeks ago
A vulnerability was found in Linux Kernel up to 6.1.131/6.6.84/6.12.20/6.13.8. It has been rated as critical. Impacted is the function lec_send of the component atm. This manipulation causes use after free. This vulnerability is handled as CVE-2025-22004. The attack can only be done within the local network. There is not any exploit available. Upgrading the affected component is advised.
vuldb.com

CVE-2025-22005 | Linux Kernel up to 6.1.131/6.6.84/6.12.20/6.13.8 ipv6 fib_check_nh_v6_gw memory leak (Nessus ID 234309 / WID-SEC-2025-0698)

Vuldb Updates
1 month 3 weeks ago
A vulnerability categorized as critical has been discovered in Linux Kernel up to 6.1.131/6.6.84/6.12.20/6.13.8. The affected element is the function fib_check_nh_v6_gw of the component ipv6. Such manipulation leads to memory leak. This vulnerability is uniquely identified as CVE-2025-22005. The attack can only be initiated within the local network. No exploit exists. It is advisable to upgrade the affected component.
vuldb.com

CVE-2025-22003 | Linux Kernel up to 6.6.84/6.12.20/6.13.8 ucan strscpy out-of-bounds (Nessus ID 241070 / WID-SEC-2025-0698)

Vuldb Updates
1 month 3 weeks ago
A vulnerability identified as problematic has been detected in Linux Kernel up to 6.6.84/6.12.20/6.13.8. The impacted element is the function strscpy of the component ucan. Performing a manipulation results in out-of-bounds read. This vulnerability was named CVE-2025-22003. The attack needs to be approached locally. There is no available exploit. You should upgrade the affected component.
vuldb.com

CVE-2025-22001 | Linux Kernel up to 6.6.84/6.12.20/6.13.8 qaic_validate_req integer overflow (Nessus ID 241070 / WID-SEC-2025-0698)

Vuldb Updates
1 month 3 weeks ago
A vulnerability was found in Linux Kernel up to 6.6.84/6.12.20/6.13.8. It has been declared as problematic. This issue affects the function qaic_validate_req. The manipulation results in integer overflow. This vulnerability is known as CVE-2025-22001. Access to the local network is required for this attack. No exploit is available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2025-22002 | Linux Kernel up to 6.12.20/6.13.8 netfs invalidate_cache null pointer dereference (Nessus ID 241070 / WID-SEC-2025-0698)

Vuldb Updates
1 month 3 weeks ago
A vulnerability classified as critical has been found in Linux Kernel up to 6.12.20/6.13.8. This affects the function invalidate_cache of the component netfs. The manipulation leads to null pointer dereference. This vulnerability is listed as CVE-2025-22002. The attack must be carried out from within the local network. There is no available exploit. It is recommended to upgrade the affected component.
vuldb.com

CVE-2025-22000 | Linux Kernel up to 6.12.20/6.13.8 huge_memory privilege escalation (Nessus ID 241070 / WID-SEC-2025-0698)

Vuldb Updates
1 month 3 weeks ago
A vulnerability was found in Linux Kernel up to 6.12.20/6.13.8. It has been classified as problematic. This vulnerability affects unknown code of the component huge_memory. The manipulation leads to privilege escalation. This vulnerability is traded as CVE-2025-22000. Access to the local network is required for this attack to succeed. There is no exploit available. Upgrading the affected component is recommended.
vuldb.com

CVE-2025-21998 | Linux Kernel up to 6.12.20/6.13.8 Efivars Service null pointer dereference (Nessus ID 241070 / WID-SEC-2025-0698)

Vuldb Updates
1 month 3 weeks ago
A vulnerability, which was classified as critical, has been found in Linux Kernel up to 6.12.20/6.13.8. Affected is an unknown function of the component Efivars Service. This manipulation causes null pointer dereference. This vulnerability is registered as CVE-2025-21998. The attack requires access to the local network. No exploit is available. It is advisable to upgrade the affected component.
vuldb.com

CVE-2025-21996 | Linux Kernel up to 6.1.131/6.6.84/6.12.20/6.13.8 radeon_vce_cs_parse uninitialized pointer (Nessus ID 234309 / WID-SEC-2025-0698)

Vuldb Updates
1 month 3 weeks ago
A vulnerability classified as critical was found in Linux Kernel up to 6.1.131/6.6.84/6.12.20/6.13.8. This impacts the function radeon_vce_cs_parse. The manipulation results in uninitialized pointer. This vulnerability is cataloged as CVE-2025-21996. The attack must originate from the local network. There is no exploit available. Upgrading the affected component is advised.
vuldb.com

CVE-2025-21997 | Linux Kernel up to 6.1.131/6.6.84/6.12.20/6.13.8 xp_create_and_assign_umem chunk_size integer overflow (Nessus ID 234309 / WID-SEC-2025-0698)

Vuldb Updates
1 month 3 weeks ago
A vulnerability has been found in Linux Kernel up to 6.1.131/6.6.84/6.12.20/6.13.8 and classified as problematic. Affected by this issue is the function xp_create_and_assign_umem. Performing a manipulation of the argument chunk_size results in integer overflow. This vulnerability is reported as CVE-2025-21997. The attacker must have access to the local network to execute the attack. No exploit exists. The affected component should be upgraded.
vuldb.com

CVE-2025-21999 | Linux Kernel up to 6.1.131/6.6.84/6.12.20/6.13.8 proc_get_inode use after free (EUVD-2025-9588 / Nessus ID 234309)

Vuldb Updates
1 month 3 weeks ago
A vulnerability was found in Linux Kernel up to 6.1.131/6.6.84/6.12.20/6.13.8 and classified as critical. This affects the function proc_get_inode. Executing a manipulation can lead to use after free. This vulnerability appears as CVE-2025-21999. The attacker needs to be present on the local network. There is no available exploit. It is suggested to upgrade the affected component.
vuldb.com

CVE-2025-21995 | Linux Kernel up to 6.6.84/6.12.20/6.13.8 dma_fence_add_callback reference count (Nessus ID 241070 / WID-SEC-2025-0698)

Vuldb Updates
1 month 3 weeks ago
A vulnerability, which was classified as critical, was found in Linux Kernel up to 6.6.84/6.12.20/6.13.8. Affected by this vulnerability is the function dma_fence_add_callback. Such manipulation leads to improper update of reference count. This vulnerability is documented as CVE-2025-21995. The attack requires being on the local network. There is not any exploit available. You should upgrade the affected component.
vuldb.com

CVE-2026-2564 | Intelbras VIP 3260 Z IA 2.840.00IB005.0.T /OutsideCmd password recovery

Vuldb Updates
1 month 3 weeks ago
A vulnerability was found in Intelbras VIP 3260 Z IA 2.840.00IB005.0.T. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /OutsideCmd. The manipulation results in weak password recovery. This vulnerability is known as CVE-2026-2564. It is possible to launch the attack remotely. No exploit is available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2026-2565 | Wavlink WL-NU516U1 20251208 /cgi-bin/adm.cgi sub_40785C time_zone stack-based overflow

Vuldb Updates
1 month 3 weeks ago
A vulnerability was found in Wavlink WL-NU516U1 20251208. It has been rated as critical. Affected by this issue is the function sub_40785C of the file /cgi-bin/adm.cgi. This manipulation of the argument time_zone causes stack-based buffer overflow. This vulnerability is handled as CVE-2026-2565. The attack can be initiated remotely. Additionally, an exploit exists. The vendor was contacted early about this disclosure but did not respond in any way.
vuldb.com

Managed ad