Aggregator

CastleLoader Unleashed: New Stealthy Malware Loader Leverages ClickFix & Fake GitHub for Widespread Infections

Penetration Testing Tools - Metepreter.org
1 month 3 weeks ago

In the first half of 2025, researchers observed the active exploitation of a new malware loader known as CastleLoader. Since its emergence, this tool has become a central element in the distribution infrastructure for...

The post CastleLoader Unleashed: New Stealthy Malware Loader Leverages ClickFix & Fake GitHub for Widespread Infections appeared first on Penetration Testing Tools.

ddos

TerraformGoat: “Vulnerable by Design” multi cloud deployment tool

Penetration Testing Tools - Metepreter.org
1 month 3 weeks ago

TerraformGoat TerraformGoat is HuoCorp research lab’s “Vulnerable by Design” multi-cloud deployment tool. Currently, supported cloud vendors include Alibaba Cloud, Tencent Cloud, Huawei Cloud, Amazon Web Services, Google Cloud Platform, and Microsoft Azure. Scenarios ID...

The post TerraformGoat: “Vulnerable by Design” multi cloud deployment tool appeared first on Penetration Testing Tools.

ddos

Leak Zone Forum’s Own Elasticsearch Database Exposed, Revealing 22M+ User Records

Penetration Testing Tools - Metepreter.org
1 month 3 weeks ago

The Leak Zone forum — widely known as a hub for publishing and distributing hacked databases, stolen credentials, and pirated software — has ironically become the source of a major data breach. According to...

The post Leak Zone Forum’s Own Elasticsearch Database Exposed, Revealing 22M+ User Records appeared first on Penetration Testing Tools.

ddos

US Woman Jailed 8.5 Years for Running “Laptop Farm” That Enabled North Korean IT Spies to Infiltrate 300+ US Firms

Penetration Testing Tools - Metepreter.org
1 month 3 weeks ago

An Arizona woman has been sentenced to eight and a half years in prison for operating a covert “laptop farm” from her home, which enabled North Korean IT operatives to impersonate American tech professionals...

The post US Woman Jailed 8.5 Years for Running “Laptop Farm” That Enabled North Korean IT Spies to Infiltrate 300+ US Firms appeared first on Penetration Testing Tools.

ddos

CVE-2024-58263 | CosmWasm cosmwasm-std Crate up to 1.4.3/1.5.3/2.0.1 on Rust integer overflow (RUSTSEC-2024-0338 / EUVD-2024-54822)

VulDB Recent Entries
1 month 3 weeks ago
A vulnerability was found in CosmWasm cosmwasm-std Crate up to 1.4.3/1.5.3/2.0.1 on Rust. It has been declared as problematic. Affected by this vulnerability is an unknown functionality. The manipulation leads to integer overflow. This vulnerability is known as CVE-2024-58263. The attack can be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2023-53156 | ejmahler transpose Crate up to 0.2.2 on Rust input_width/input_height integer overflow (RUSTSEC-2023-0080 / EUVD-2023-59767)

VulDB Recent Entries
1 month 3 weeks ago
A vulnerability was found in ejmahler transpose Crate up to 0.2.2 on Rust. It has been classified as problematic. Affected is an unknown function. The manipulation of the argument input_width/input_height leads to integer overflow. This vulnerability is traded as CVE-2023-53156. Attacking locally is a requirement. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2024-58264 | CosmWasm serde-json-wasm Crate up to 1.0.0 on Rust Deeply Nested JSON Data recursion (RUSTSEC-2024-0012 / EUVD-2024-54825)

VulDB Recent Entries
1 month 3 weeks ago
A vulnerability was found in CosmWasm serde-json-wasm Crate up to 1.0.0 on Rust and classified as problematic. This issue affects some unknown processing of the component Deeply Nested JSON Data Handler. The manipulation leads to uncontrolled recursion. The identification of this vulnerability is CVE-2024-58264. Local access is required to approach this attack. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2025-7624

CVE Trends
1 month 3 weeks ago
Currently trending CVE - Hype Score: 3 - An SQL injection vulnerability in the legacy (transparent) SMTP proxy of Sophos Firewall versions older than 21.0 MR2 (21.0.2) can lead to remote code execution, if a quarantining policy is active for Email and SFOS was upgraded from a version older than 21.0 GA.

Managed ad