{"metadata":{"generatedAt":"2026-10-20T03:01:48.951Z","reportDate":"2026-10-20","totalItems":5076,"sourceBreakdown":{"cisa-kev":7,"nvd":4259,"otx":29,"cisa-advisories":14,"vendor-blogs":627,"malware-bazaar":20,"abuse-ipdb":20,"threatfox":3,"general-news":110},"categoryBreakdown":{"vulnerability":4263,"advisory":634,"malware":20,"ip-reputation":20,"threat-intel":29,"news":110},"fetchErrors":[]},"highlights":[{"id":"nvd-CVE-2026-109432","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-109432 — Camunda 7.24.0 before 7.24.14 and 7.23.0 before 7.23.17 contains an expression injection vulnerabili…","description":"Camunda 7.24.0 before 7.24.14 and 7.23.0 before 7.23.17 contains an expression injection vulnerability where AdhocQueryValidator.validate() fails to check sub-query expression maps within the orQueries field exposed by TaskQueryDto, allowing authenticated users to bypass the enableExpressionsInAdhoc…","indicators":{"cves":["CVE-2026-109432"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T16:17:02.487Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://codeant.ai/security-research/camunda-adhoc-query-expression-rce-cve-2026-109432","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://docs.camunda.org/enterprise/download/","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/camunda-expression-injection-via-orqueries-rce","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111057","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-111057 — Mercury is a Python framework for sharing Jupyter notebooks as web applications and dashboards. From…","description":"Mercury is a Python framework for sharing Jupyter notebooks as web applications and dashboards. From 3.0.0 until 3.2.4, a missing comma in BLOCKED_PATTERNS concatenates the /lab and /api/terminals regular-expression literals. Requests to /api/terminals therefore bypass the anonymous endpoint blockli…","indicators":{"cves":["CVE-2026-111057","CVE-2026-111059"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T16:17:03.810Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://github.com/mljar/mercury/commit/8c467129037ee9df269d543ac217ffd33b97bf3f","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/mljar/mercury/releases/tag/v3.2.4","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/mljar/mercury/security/advisories/GHSA-f8c7-rwf9-fmgm","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/mljar/mercury/commit/c798a85924e6614c6fea7afe5a560e4554a1d09b","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/mljar/mercury/releases/tag/v3.2.11","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/mljar/mercury/security/advisories/GHSA-2658-85cv-9wwq","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-111058","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-111058 — Mercury is a Python framework for sharing Jupyter notebooks as web applications and dashboards. Prio…","description":"Mercury is a Python framework for sharing Jupyter notebooks as web applications and dashboards. Prior to 3.2.6, default tokenless deployments allow anonymous clients to create Jupyter kernels and send execute_request messages containing arbitrary Python. The endpoint blocklist does not cover /api/ke…","indicators":{"cves":["CVE-2026-111058"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T16:17:03.957Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://github.com/mljar/mercury/commit/73a40ceb0becf057f495a5738ad7f5a5222a53e1","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/mljar/mercury/releases/tag/3.2.6","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/mljar/mercury/security/advisories/GHSA-rv4m-xm3f-3ccq","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-107083","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-107083 — SENAYAN Library Management System (SLiMS) Bulian (slims9_bulian) 9.8.0 is vulnerable to SQL Injectio…","description":"SENAYAN Library Management System (SLiMS) Bulian (slims9_bulian) 9.8.0 is vulnerable to SQL Injection in admin/modules/reporting/customs/dl_detail.php via the parameter fileID.","indicators":{"cves":["CVE-2026-107083"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T17:17:00.690Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://github.com/Primandito/CVE-2026-107083","label":"cve@mitre.org","domainType":"primary"},{"url":"https://github.com/slims/slims9_bulian/issues/393","label":"cve@mitre.org","domainType":"primary"},{"url":"https://github.com/Primandito/CVE-2026-107083","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"},{"url":"https://github.com/slims/slims9_bulian/issues/393","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-107188","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-107188 — A user can upload export reports with any file contents and specify any contents. JSP code can be up…","description":"A user can upload export reports with any file contents and specify any contents. JSP code can be uploaded, JSPX can be specified as the file extension, and anyone can browse to the uploaded file, leading to command execution. The authentication bypass vulnerability can be chained with this vulnerab…","indicators":{"cves":["CVE-2026-107188"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T17:17:01.080Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://www.rapid7.com/blog/post/ve-authentication-bypass-remote-code-execution-and-database-read-in-eptura-archibus-fixed/","label":"cve@rapid7.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111862","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-111862 — Rank Math SEO PRO for WordPress is affected by a supply-chain compromise in a subset of version 3.0.…","description":"Rank Math SEO PRO for WordPress is affected by a supply-chain compromise in a subset of version 3.0.123 packages downloaded or updated between October 15, 2026 at 20:02 UTC and October 16, 2026 at 07:12 UTC. Rank Math states that the affected plugin files contained malware that could compromise a we…","indicators":{"cves":["CVE-2026-111862"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["supply-chain"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T17:17:04.507Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://rankmath.com/changelog/","label":"security@wordfence.com","domainType":"other"},{"url":"https://rankmath.com/kb/pro-3-0-123-security-incident/","label":"security@wordfence.com","domainType":"other"},{"url":"https://rdap.verisign.com/com/v1/domain/rank1cdn.com","label":"security@wordfence.com","domainType":"other"},{"url":"https://urlscan.io/result/01a145c2-8dc8-72ff-a65d-21209ca29c4f/","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/81cd7a2c-ad0c-4dbc-b5dc-07ec866d5c1f?source=cve","label":"security@wordfence.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109437","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-109437 — Cognition before 0.13.0 contains an unauthenticated remote code execution vulnerability due to defau…","description":"Cognition before 0.13.0 contains an unauthenticated remote code execution vulnerability due to defaulting its agent sandbox backend to local execution and shipping no authentication on its REST/SSE API. Attackers can create a session via POST /sessions and post a message via POST /sessions/{id}/mess…","indicators":{"cves":["CVE-2026-109437"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T19:17:19.807Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://github.com/CognicellAI/Cognition/releases/tag/v0.13.0","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.lasso.security/vulnerability-database/cve-2026-109437","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/cognition-unauthenticated-rce-via-local-shell-backend","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112776","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-112776 — Craft CMS from 5.0.0 before 5.11.0 contains an authorization bypass vulnerability that allows site-s…","description":"Craft CMS from 5.0.0 before 5.11.0 contains an authorization bypass vulnerability that allows site-scoped GraphQL tokens to mutate other sites' content because requireAllowedSite() is not enforced. Attackers holding a site-A token can create entries in site B via supplied siteId and delete entries,…","indicators":{"cves":["CVE-2026-112776"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T20:17:54.900Z","fetchedAt":"2026-10-20T03:01:48.466Z","references":[{"url":"https://github.com/craftcms/cms/security/advisories/GHSA-7rr3-4jcm-x526","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/craft-cms-5.0.0-before-5.11.0-graphql-site-scope-bypass-via-mutations","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112779","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-112779 — Grav API plugin (grav-plugin-api) 1.0.40 before 1.0.42 caches a full translation dictionary for ever…","description":"Grav API plugin (grav-plugin-api) 1.0.40 before 1.0.42 caches a full translation dictionary for every well-formed language code sent to the unauthenticated GET /api/v1/translations/{lang} endpoint, and 1.0.16 before 1.0.42 fails to check target and destination page rules in the sync and batch copy e…","indicators":{"cves":["CVE-2026-112779"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T20:17:55.323Z","fetchedAt":"2026-10-20T03:01:48.466Z","references":[{"url":"https://github.com/getgrav/grav/security/advisories/GHSA-8pcm-97fc-4xwh","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/grav-api-plugin-before-1.0.42-cache-exhaustion-and-page-permission-bypass","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112370","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-112370 — A vulnerability was found in H3C Magic NX15 100R017. This issue affects the function sub_416874 of t…","description":"A vulnerability was found in H3C Magic NX15 100R017. This issue affects the function sub_416874 of the file /usr/bin/usrlist. Performing a manipulation results in os command injection. Remote exploitation of the attack is possible. The exploit has been made public and could be used. The vendor was c…","indicators":{"cves":["CVE-2026-112370"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T23:17:35.817Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://github.com/XxingGoD/H3C-NX15-R017-Vulns/tree/main/H3C/NX15R017/usrlist_cmdi_root_rce","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/XxingGoD/H3C-NX15-R017-Vulns/tree/main/H3C/NX15R017/usrlist_cmdi_root_rce/poc","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-112370","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/983537","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/422416","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/422416/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null}],"items":[{"id":"nvd-CVE-2026-109432","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-109432 — Camunda 7.24.0 before 7.24.14 and 7.23.0 before 7.23.17 contains an expression injection vulnerabili…","description":"Camunda 7.24.0 before 7.24.14 and 7.23.0 before 7.23.17 contains an expression injection vulnerability where AdhocQueryValidator.validate() fails to check sub-query expression maps within the orQueries field exposed by TaskQueryDto, allowing authenticated users to bypass the enableExpressionsInAdhoc…","indicators":{"cves":["CVE-2026-109432"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T16:17:02.487Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://codeant.ai/security-research/camunda-adhoc-query-expression-rce-cve-2026-109432","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://docs.camunda.org/enterprise/download/","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/camunda-expression-injection-via-orqueries-rce","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111057","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-111057 — Mercury is a Python framework for sharing Jupyter notebooks as web applications and dashboards. From…","description":"Mercury is a Python framework for sharing Jupyter notebooks as web applications and dashboards. From 3.0.0 until 3.2.4, a missing comma in BLOCKED_PATTERNS concatenates the /lab and /api/terminals regular-expression literals. Requests to /api/terminals therefore bypass the anonymous endpoint blockli…","indicators":{"cves":["CVE-2026-111057","CVE-2026-111059"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T16:17:03.810Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://github.com/mljar/mercury/commit/8c467129037ee9df269d543ac217ffd33b97bf3f","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/mljar/mercury/releases/tag/v3.2.4","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/mljar/mercury/security/advisories/GHSA-f8c7-rwf9-fmgm","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/mljar/mercury/commit/c798a85924e6614c6fea7afe5a560e4554a1d09b","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/mljar/mercury/releases/tag/v3.2.11","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/mljar/mercury/security/advisories/GHSA-2658-85cv-9wwq","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-111058","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-111058 — Mercury is a Python framework for sharing Jupyter notebooks as web applications and dashboards. Prio…","description":"Mercury is a Python framework for sharing Jupyter notebooks as web applications and dashboards. Prior to 3.2.6, default tokenless deployments allow anonymous clients to create Jupyter kernels and send execute_request messages containing arbitrary Python. The endpoint blocklist does not cover /api/ke…","indicators":{"cves":["CVE-2026-111058"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T16:17:03.957Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://github.com/mljar/mercury/commit/73a40ceb0becf057f495a5738ad7f5a5222a53e1","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/mljar/mercury/releases/tag/3.2.6","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/mljar/mercury/security/advisories/GHSA-rv4m-xm3f-3ccq","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-107083","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-107083 — SENAYAN Library Management System (SLiMS) Bulian (slims9_bulian) 9.8.0 is vulnerable to SQL Injectio…","description":"SENAYAN Library Management System (SLiMS) Bulian (slims9_bulian) 9.8.0 is vulnerable to SQL Injection in admin/modules/reporting/customs/dl_detail.php via the parameter fileID.","indicators":{"cves":["CVE-2026-107083"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T17:17:00.690Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://github.com/Primandito/CVE-2026-107083","label":"cve@mitre.org","domainType":"primary"},{"url":"https://github.com/slims/slims9_bulian/issues/393","label":"cve@mitre.org","domainType":"primary"},{"url":"https://github.com/Primandito/CVE-2026-107083","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"},{"url":"https://github.com/slims/slims9_bulian/issues/393","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-107188","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-107188 — A user can upload export reports with any file contents and specify any contents. JSP code can be up…","description":"A user can upload export reports with any file contents and specify any contents. JSP code can be uploaded, JSPX can be specified as the file extension, and anyone can browse to the uploaded file, leading to command execution. The authentication bypass vulnerability can be chained with this vulnerab…","indicators":{"cves":["CVE-2026-107188"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T17:17:01.080Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://www.rapid7.com/blog/post/ve-authentication-bypass-remote-code-execution-and-database-read-in-eptura-archibus-fixed/","label":"cve@rapid7.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111862","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-111862 — Rank Math SEO PRO for WordPress is affected by a supply-chain compromise in a subset of version 3.0.…","description":"Rank Math SEO PRO for WordPress is affected by a supply-chain compromise in a subset of version 3.0.123 packages downloaded or updated between October 15, 2026 at 20:02 UTC and October 16, 2026 at 07:12 UTC. Rank Math states that the affected plugin files contained malware that could compromise a we…","indicators":{"cves":["CVE-2026-111862"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["supply-chain"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T17:17:04.507Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://rankmath.com/changelog/","label":"security@wordfence.com","domainType":"other"},{"url":"https://rankmath.com/kb/pro-3-0-123-security-incident/","label":"security@wordfence.com","domainType":"other"},{"url":"https://rdap.verisign.com/com/v1/domain/rank1cdn.com","label":"security@wordfence.com","domainType":"other"},{"url":"https://urlscan.io/result/01a145c2-8dc8-72ff-a65d-21209ca29c4f/","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/81cd7a2c-ad0c-4dbc-b5dc-07ec866d5c1f?source=cve","label":"security@wordfence.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109437","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-109437 — Cognition before 0.13.0 contains an unauthenticated remote code execution vulnerability due to defau…","description":"Cognition before 0.13.0 contains an unauthenticated remote code execution vulnerability due to defaulting its agent sandbox backend to local execution and shipping no authentication on its REST/SSE API. Attackers can create a session via POST /sessions and post a message via POST /sessions/{id}/mess…","indicators":{"cves":["CVE-2026-109437"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T19:17:19.807Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://github.com/CognicellAI/Cognition/releases/tag/v0.13.0","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.lasso.security/vulnerability-database/cve-2026-109437","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/cognition-unauthenticated-rce-via-local-shell-backend","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112776","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-112776 — Craft CMS from 5.0.0 before 5.11.0 contains an authorization bypass vulnerability that allows site-s…","description":"Craft CMS from 5.0.0 before 5.11.0 contains an authorization bypass vulnerability that allows site-scoped GraphQL tokens to mutate other sites' content because requireAllowedSite() is not enforced. Attackers holding a site-A token can create entries in site B via supplied siteId and delete entries,…","indicators":{"cves":["CVE-2026-112776"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T20:17:54.900Z","fetchedAt":"2026-10-20T03:01:48.466Z","references":[{"url":"https://github.com/craftcms/cms/security/advisories/GHSA-7rr3-4jcm-x526","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/craft-cms-5.0.0-before-5.11.0-graphql-site-scope-bypass-via-mutations","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112779","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-112779 — Grav API plugin (grav-plugin-api) 1.0.40 before 1.0.42 caches a full translation dictionary for ever…","description":"Grav API plugin (grav-plugin-api) 1.0.40 before 1.0.42 caches a full translation dictionary for every well-formed language code sent to the unauthenticated GET /api/v1/translations/{lang} endpoint, and 1.0.16 before 1.0.42 fails to check target and destination page rules in the sync and batch copy e…","indicators":{"cves":["CVE-2026-112779"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T20:17:55.323Z","fetchedAt":"2026-10-20T03:01:48.466Z","references":[{"url":"https://github.com/getgrav/grav/security/advisories/GHSA-8pcm-97fc-4xwh","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/grav-api-plugin-before-1.0.42-cache-exhaustion-and-page-permission-bypass","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112370","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-112370 — A vulnerability was found in H3C Magic NX15 100R017. This issue affects the function sub_416874 of t…","description":"A vulnerability was found in H3C Magic NX15 100R017. This issue affects the function sub_416874 of the file /usr/bin/usrlist. Performing a manipulation results in os command injection. Remote exploitation of the attack is possible. The exploit has been made public and could be used. The vendor was c…","indicators":{"cves":["CVE-2026-112370"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T23:17:35.817Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://github.com/XxingGoD/H3C-NX15-R017-Vulns/tree/main/H3C/NX15R017/usrlist_cmdi_root_rce","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/XxingGoD/H3C-NX15-R017-Vulns/tree/main/H3C/NX15R017/usrlist_cmdi_root_rce/poc","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-112370","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/983537","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/422416","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/422416/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112371","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-112371 — A vulnerability was determined in H3C Magic NX15 NX15V100R017. Impacted is the function write of the…","description":"A vulnerability was determined in H3C Magic NX15 NX15V100R017. Impacted is the function write of the file /api/esps of the component RPC Interface. Executing a manipulation of the argument path can lead to code injection. The attack can be executed remotely. The exploit has been publicly disclosed a…","indicators":{"cves":["CVE-2026-112371"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T23:17:36.000Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://github.com/XxingGoD/H3C-NX15-R017-Vulns/tree/main/H3C/NX15R017/file_write_root_rce","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-112371","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/983538","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/422417","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/422417/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109395","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-109395 — Ning compress-lzf before 1.2.0 contains an out-of-bounds memory access vulnerability in the sun.misc…","description":"Ning compress-lzf before 1.2.0 contains an out-of-bounds memory access vulnerability in the sun.misc.Unsafe based UnsafeChunkDecoder that fails to validate back-references and literal runs. Attackers can supply crafted LZF streams to applications using the default LZFDecoder to leak unrelated JVM he…","indicators":{"cves":["CVE-2026-109395"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-20T01:17:09.957Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://github.com/github/securitylab/discussions/970","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/ning/compress","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/ning/compress/blob/compress-lzf-1.1.3/src/main/java/com/ning/compress/lzf/impl/UnsafeChunkDecoder.java#L104","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/ning/compress/commit/06bdc3744a96b736a7118891f403e44c664f108b","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/ning/compress/pull/68","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/ning-compress-lzf-before-1.2.0-out-of-bounds-memory-access-via-unsafechunkdecoder","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109442","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-109442 — piflow 2.0.0 through 2.0.1 contains a remote code execution vulnerability in its DeepAgents chat age…","description":"piflow 2.0.0 through 2.0.1 contains a remote code execution vulnerability in its DeepAgents chat agent, whose POST /chat and POST /chat/stream endpoints lack authentication. Attackers can instruct the agent to call the exec_shell tool, which runs arbitrary commands via subprocess.run without human a…","indicators":{"cves":["CVE-2026-109442"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-20T01:17:10.383Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://github.com/cas-bigdatalab/piflow/blob/ad8d0108a54a4257307d4946dc9250e26f24c63f/agents/tools.py#L114","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/cas-bigdatalab/piflow/blob/ad8d0108a54a4257307d4946dc9250e26f24c63f/server.py#L615","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.lasso.security/vulnerability-database/cve-2026-109442","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/piflow-2.0.0-through-2.0.1-unauthenticated-rce-via-chat-agent-exec-shell","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-75128","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-75128 — Langchain-Chatchat through 0.3.1.3 exposes a POST /tools/call API endpoint that invokes any register…","description":"Langchain-Chatchat through 0.3.1.3 exposes a POST /tools/call API endpoint that invokes any registered tool by name without authentication, leaving the always-registered shell tool callable. Remote attackers can send a single request naming the shell tool to execute arbitrary OS commands as the serv…","indicators":{"cves":["CVE-2026-75128"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-20T01:17:19.063Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://github.com/chatchat-space/Langchain-Chatchat/blob/a6a9193b5002061719f0eee62c6310bd5b1b7f63/libs/chatchat-server/chatchat/server/api_server/tool_routes.py#L33","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.lasso.security/vulnerability-database/cve-2026-75128","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/langchain-chatchat-through-0.3.1.3-unauthenticated-rce-via-tools-call-endpoint","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-77932","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-77932 — DB-GPT through 0.8.2 contains an unauthenticated remote code execution vulnerability because the /ap…","description":"DB-GPT through 0.8.2 contains an unauthenticated remote code execution vulnerability because the /api/v1/chat/react-agent endpoint relies on a mock get_user_from_headers function that grants every caller the admin role. Unauthenticated attackers can send prompts that make the ReAct agent's unsandbox…","indicators":{"cves":["CVE-2026-77932"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-20T01:17:19.503Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://github.com/eosphoros-ai/DB-GPT/blob/83609c471266607490b24e72188311efa23a0d16/packages/dbgpt-app/src/dbgpt_app/openapi/api_v1/tools/code_interpreter.py#L39","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/eosphoros-ai/DB-GPT/blob/83609c471266607490b24e72188311efa23a0d16/packages/dbgpt-serve/src/dbgpt_serve/utils/auth.py#L25","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.lasso.security/vulnerability-database/cve-2026-77932","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/db-gpt-through-0.8.2-unauthenticated-rce-via-api-v1-chat-react-agent","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-77933","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-77933 — DB-GPT through 0.8.2 contains a hardcoded credentials vulnerability in its default docker-compose.ym…","description":"DB-GPT through 0.8.2 contains a hardcoded credentials vulnerability in its default docker-compose.yml that sets a static MYSQL_ROOT_PASSWORD and publishes port 3306 on all interfaces. Attackers reaching port 3306 or the shared dbgptnet network can authenticate as root@% to gain full database access…","indicators":{"cves":["CVE-2026-77933"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-20T01:17:19.670Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://github.com/eosphoros-ai/DB-GPT/blob/83609c471266607490b24e72188311efa23a0d16/docker-compose.yml#L9","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.lasso.security/vulnerability-database/cve-2026-77933","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/db-gpt-through-0.8.2-hardcoded-mysql-root-credentials-in-docker-compose-deployment","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-77936","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-77936 — Letta through 0.16.8 ships a compose.yaml that does not enable LETTA_SERVER_SECURE, so the password…","description":"Letta through 0.16.8 ships a compose.yaml that does not enable LETTA_SERVER_SECURE, so the password middleware is never added and all API routes are unauthenticated, and it exposes a superuser PostgreSQL port with default credentials. Remote attackers can execute arbitrary Python via POST /v1/tools/…","indicators":{"cves":["CVE-2026-77936"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-20T01:17:20.107Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://github.com/letta-ai/letta/blob/1131535716e8a31c9a437f8695e25ac98f203a24/compose.yaml#L17","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/letta-ai/letta/blob/1131535716e8a31c9a437f8695e25ac98f203a24/letta/server/rest_api/app.py#L799","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.lasso.security/vulnerability-database/cve-2026-77936","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/letta-through-0.16.8-insecure-default-configuration-unauthenticated-api-and-postgresql-access","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"abuseip-151.243.11.150","source":"abuse-ipdb","category":"ip-reputation","severity":"critical","title":"Malicious IP: 151.243.11.150","description":"Country: DE | ISP: unknown | Abuse score: 100%","indicators":{"cves":[],"ips":["151.243.11.150"],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":100,"publishedAt":"2026-10-20T02:17:01.000Z","fetchedAt":"2026-10-20T03:00:00.197Z","references":[{"url":"https://www.abuseipdb.com/check/151.243.11.150","label":"AbuseIPDB","domainType":"primary"}],"feedLabel":null},{"id":"abuseip-135.119.91.34","source":"abuse-ipdb","category":"ip-reputation","severity":"critical","title":"Malicious IP: 135.119.91.34","description":"Country: US | ISP: unknown | Abuse score: 100%","indicators":{"cves":[],"ips":["135.119.91.34"],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":100,"publishedAt":"2026-10-20T02:17:01.000Z","fetchedAt":"2026-10-20T03:00:00.197Z","references":[{"url":"https://www.abuseipdb.com/check/135.119.91.34","label":"AbuseIPDB","domainType":"primary"}],"feedLabel":null},{"id":"abuseip-57.131.50.86","source":"abuse-ipdb","category":"ip-reputation","severity":"critical","title":"Malicious IP: 57.131.50.86","description":"Country: IT | ISP: unknown | Abuse score: 100%","indicators":{"cves":[],"ips":["57.131.50.86"],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":100,"publishedAt":"2026-10-20T02:17:01.000Z","fetchedAt":"2026-10-20T03:00:00.197Z","references":[{"url":"https://www.abuseipdb.com/check/57.131.50.86","label":"AbuseIPDB","domainType":"primary"}],"feedLabel":null},{"id":"abuseip-109.160.32.123","source":"abuse-ipdb","category":"ip-reputation","severity":"critical","title":"Malicious IP: 109.160.32.123","description":"Country: DE | ISP: unknown | Abuse score: 100%","indicators":{"cves":[],"ips":["109.160.32.123"],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":100,"publishedAt":"2026-10-20T02:17:01.000Z","fetchedAt":"2026-10-20T03:00:00.197Z","references":[{"url":"https://www.abuseipdb.com/check/109.160.32.123","label":"AbuseIPDB","domainType":"primary"}],"feedLabel":null},{"id":"abuseip-185.223.235.46","source":"abuse-ipdb","category":"ip-reputation","severity":"critical","title":"Malicious IP: 185.223.235.46","description":"Country: NL | ISP: unknown | Abuse score: 100%","indicators":{"cves":[],"ips":["185.223.235.46"],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":100,"publishedAt":"2026-10-20T02:17:01.000Z","fetchedAt":"2026-10-20T03:00:00.197Z","references":[{"url":"https://www.abuseipdb.com/check/185.223.235.46","label":"AbuseIPDB","domainType":"primary"}],"feedLabel":null},{"id":"abuseip-13.140.80.140","source":"abuse-ipdb","category":"ip-reputation","severity":"critical","title":"Malicious IP: 13.140.80.140","description":"Country: FI | ISP: unknown | Abuse score: 100%","indicators":{"cves":[],"ips":["13.140.80.140"],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":100,"publishedAt":"2026-10-20T02:17:01.000Z","fetchedAt":"2026-10-20T03:00:00.197Z","references":[{"url":"https://www.abuseipdb.com/check/13.140.80.140","label":"AbuseIPDB","domainType":"primary"}],"feedLabel":null},{"id":"abuseip-14.51.12.142","source":"abuse-ipdb","category":"ip-reputation","severity":"critical","title":"Malicious IP: 14.51.12.142","description":"Country: KR | ISP: unknown | Abuse score: 100%","indicators":{"cves":[],"ips":["14.51.12.142"],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":100,"publishedAt":"2026-10-20T02:17:01.000Z","fetchedAt":"2026-10-20T03:00:00.197Z","references":[{"url":"https://www.abuseipdb.com/check/14.51.12.142","label":"AbuseIPDB","domainType":"primary"}],"feedLabel":null},{"id":"abuseip-43.135.144.81","source":"abuse-ipdb","category":"ip-reputation","severity":"critical","title":"Malicious IP: 43.135.144.81","description":"Country: US | ISP: unknown | Abuse score: 100%","indicators":{"cves":[],"ips":["43.135.144.81"],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":100,"publishedAt":"2026-10-20T02:17:01.000Z","fetchedAt":"2026-10-20T03:00:00.197Z","references":[{"url":"https://www.abuseipdb.com/check/43.135.144.81","label":"AbuseIPDB","domainType":"primary"}],"feedLabel":null},{"id":"abuseip-106.13.95.198","source":"abuse-ipdb","category":"ip-reputation","severity":"critical","title":"Malicious IP: 106.13.95.198","description":"Country: CN | ISP: unknown | Abuse score: 100%","indicators":{"cves":[],"ips":["106.13.95.198"],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":100,"publishedAt":"2026-10-20T02:17:01.000Z","fetchedAt":"2026-10-20T03:00:00.197Z","references":[{"url":"https://www.abuseipdb.com/check/106.13.95.198","label":"AbuseIPDB","domainType":"primary"}],"feedLabel":null},{"id":"abuseip-103.216.145.2","source":"abuse-ipdb","category":"ip-reputation","severity":"critical","title":"Malicious IP: 103.216.145.2","description":"Country: IN | ISP: unknown | Abuse score: 100%","indicators":{"cves":[],"ips":["103.216.145.2"],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":100,"publishedAt":"2026-10-20T02:17:01.000Z","fetchedAt":"2026-10-20T03:00:00.197Z","references":[{"url":"https://www.abuseipdb.com/check/103.216.145.2","label":"AbuseIPDB","domainType":"primary"}],"feedLabel":null},{"id":"abuseip-45.115.26.61","source":"abuse-ipdb","category":"ip-reputation","severity":"critical","title":"Malicious IP: 45.115.26.61","description":"Country: DE | ISP: unknown | Abuse score: 100%","indicators":{"cves":[],"ips":["45.115.26.61"],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":100,"publishedAt":"2026-10-20T02:17:00.000Z","fetchedAt":"2026-10-20T03:00:00.197Z","references":[{"url":"https://www.abuseipdb.com/check/45.115.26.61","label":"AbuseIPDB","domainType":"primary"}],"feedLabel":null},{"id":"abuseip-115.178.75.242","source":"abuse-ipdb","category":"ip-reputation","severity":"critical","title":"Malicious IP: 115.178.75.242","description":"Country: KR | ISP: unknown | Abuse score: 100%","indicators":{"cves":[],"ips":["115.178.75.242"],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":100,"publishedAt":"2026-10-20T02:17:00.000Z","fetchedAt":"2026-10-20T03:00:00.197Z","references":[{"url":"https://www.abuseipdb.com/check/115.178.75.242","label":"AbuseIPDB","domainType":"primary"}],"feedLabel":null},{"id":"abuseip-43.172.117.23","source":"abuse-ipdb","category":"ip-reputation","severity":"critical","title":"Malicious IP: 43.172.117.23","description":"Country: US | ISP: unknown | Abuse score: 100%","indicators":{"cves":[],"ips":["43.172.117.23"],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":100,"publishedAt":"2026-10-20T02:17:00.000Z","fetchedAt":"2026-10-20T03:00:00.197Z","references":[{"url":"https://www.abuseipdb.com/check/43.172.117.23","label":"AbuseIPDB","domainType":"primary"}],"feedLabel":null},{"id":"abuseip-172.209.208.96","source":"abuse-ipdb","category":"ip-reputation","severity":"critical","title":"Malicious IP: 172.209.208.96","description":"Country: ZA | ISP: unknown | Abuse score: 100%","indicators":{"cves":[],"ips":["172.209.208.96"],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":100,"publishedAt":"2026-10-20T02:17:00.000Z","fetchedAt":"2026-10-20T03:00:00.197Z","references":[{"url":"https://www.abuseipdb.com/check/172.209.208.96","label":"AbuseIPDB","domainType":"primary"}],"feedLabel":null},{"id":"abuseip-210.91.153.182","source":"abuse-ipdb","category":"ip-reputation","severity":"critical","title":"Malicious IP: 210.91.153.182","description":"Country: KR | ISP: unknown | Abuse score: 100%","indicators":{"cves":[],"ips":["210.91.153.182"],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":100,"publishedAt":"2026-10-20T02:17:00.000Z","fetchedAt":"2026-10-20T03:00:00.197Z","references":[{"url":"https://www.abuseipdb.com/check/210.91.153.182","label":"AbuseIPDB","domainType":"primary"}],"feedLabel":null},{"id":"abuseip-186.122.177.140","source":"abuse-ipdb","category":"ip-reputation","severity":"critical","title":"Malicious IP: 186.122.177.140","description":"Country: AR | ISP: unknown | Abuse score: 100%","indicators":{"cves":[],"ips":["186.122.177.140"],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":100,"publishedAt":"2026-10-20T02:17:00.000Z","fetchedAt":"2026-10-20T03:00:00.197Z","references":[{"url":"https://www.abuseipdb.com/check/186.122.177.140","label":"AbuseIPDB","domainType":"primary"}],"feedLabel":null},{"id":"abuseip-172.212.203.117","source":"abuse-ipdb","category":"ip-reputation","severity":"critical","title":"Malicious IP: 172.212.203.117","description":"Country: US | ISP: unknown | Abuse score: 100%","indicators":{"cves":[],"ips":["172.212.203.117"],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":100,"publishedAt":"2026-10-20T02:17:00.000Z","fetchedAt":"2026-10-20T03:00:00.197Z","references":[{"url":"https://www.abuseipdb.com/check/172.212.203.117","label":"AbuseIPDB","domainType":"primary"}],"feedLabel":null},{"id":"abuseip-122.170.99.195","source":"abuse-ipdb","category":"ip-reputation","severity":"critical","title":"Malicious IP: 122.170.99.195","description":"Country: IN | ISP: unknown | Abuse score: 100%","indicators":{"cves":[],"ips":["122.170.99.195"],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":100,"publishedAt":"2026-10-20T02:17:00.000Z","fetchedAt":"2026-10-20T03:00:00.197Z","references":[{"url":"https://www.abuseipdb.com/check/122.170.99.195","label":"AbuseIPDB","domainType":"primary"}],"feedLabel":null},{"id":"abuseip-2.57.217.229","source":"abuse-ipdb","category":"ip-reputation","severity":"critical","title":"Malicious IP: 2.57.217.229","description":"Country: GE | ISP: unknown | Abuse score: 100%","indicators":{"cves":[],"ips":["2.57.217.229"],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":100,"publishedAt":"2026-10-20T02:17:00.000Z","fetchedAt":"2026-10-20T03:00:00.197Z","references":[{"url":"https://www.abuseipdb.com/check/2.57.217.229","label":"AbuseIPDB","domainType":"primary"}],"feedLabel":null},{"id":"abuseip-77.239.124.77","source":"abuse-ipdb","category":"ip-reputation","severity":"critical","title":"Malicious IP: 77.239.124.77","description":"Country: NL | ISP: unknown | Abuse score: 100%","indicators":{"cves":[],"ips":["77.239.124.77"],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":100,"publishedAt":"2026-10-20T02:17:00.000Z","fetchedAt":"2026-10-20T03:00:00.197Z","references":[{"url":"https://www.abuseipdb.com/check/77.239.124.77","label":"AbuseIPDB","domainType":"primary"}],"feedLabel":null},{"id":"threatfox-1974957","source":"threatfox","category":"threat-intel","severity":"critical","title":"botnet_cc: undefined","description":"https://bazaar.abuse.ch/sample/58648467edabd8e8914b022a8d475bffc6db598086f4505e09815e9d02537f91/","indicators":{"cves":[],"ips":[""],"domains":[],"urls":[""],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["Vidar","AISURU","c2","Vshell","c7a50169dbc6d842a7e7d349513f88f1","Loader","stealer","ec141392be2e474ab700bf353b3b9f2c","njrat","remcos","REMOTEHOST","ac32fe0cdedaab512d4ba45a7cfcc26b","honeypot","f7e0bdc53604a00d861131d2693a943c","sliver c2","QuasarRAT","drb-ra","Mythic","Havoc","sliver","PureHVNC","PureRAT","RAT","CobaltStrike","JUNIO777","SERVER2405v2","GP","332ps1Ago","Star-Baby-27","RatonRAT","RemcosRAT","ValleyRAT","valleyrat_s2","trum","1718e0679220166cf123fbe6e40c635c","d85b02740b9fbbe0bc098debbc5a5109","moobot","Supershell","shodan","abe-bypass","ClickFix","com-hijacking","DesktopStreamClient","hermes","hermes-stealer","Hvnc","infostealer","loader-c2","Lold","MaaS","SyncService","exfil","FakeGit","LuaJIT","SmartLoader","Mirai","Remus","373d420e3c3e68da3a553422caafc283","1ca8afc0e9497e2ea687b455ff40cf1e","Adaptix","AdaptixC2","asyncrat","DinDoor","EvilGinx","EvilGoPhish","TRT UR BEST","XWorm","censys","exe","RevStealer","Android","GhostBat","mParivahan","veltrix","CantoIncognito","cryptomining","PoeLLM","Sektor7","elf","apix","fake-git","powershell","IRC","k4_irc_bot","onlycn","ROOTKIT","minefox","shellcode","stage2","fake-crack","Github","stager","IoT","Mozi","Romulus","ViriBack","6713982832fdd0efe07912b12c5c5b2b","c1399bfb1be0a51415613edd6f0068c5","5a4378fb90db39f09c7b18d1f314e645","945c9f3c8cddcb7f33efce50a9a949ad","modat","murdoc","Covenant","Antidot","dcrat","b9df72d092aeb25d8cb28d34cc4984de","guloader","NSIS","XtremeRAT","NanoCore","Arechclient2","SectopRAT","default-cert","mtls","tofsee","Port$$","codec-cache","cve-2026-96656","miner","plex","Huatai007","CHAOS","Viper","cs-watermark-666666666","cs-watermark-987654321","Gafgyt","CheatSheet","dead-drop","gitlab","pastebin","DPRK","etherhiding","polinrider","backdoor","bot","Sh","dump-yuv","PM-5766","ErrTraffic","Polygon","521048dd5a8917782e586ac60bc1eceb","WinWordl","botnet","CECbot","DDoS","host","go","legea","369b7d35486e31c3854c6efc823ab439","sliverc2","d42249d8b3409d0cd65c3cc7f8267ec0","dotNET","fake-cheat","Qt5Widgets","sideloading","TeamSpeak","NUEVAS4001","airashi","Jackskid","rctea","MicroUpdate","apk","GoPhish","BruteRatel","adf0aff417ab94ddd17c189420efb165","ab0a59f4970a96fd6e8daa4f6f8e22cd","b89d843f29af2eed09805e9767a1165f","379e62cc9396a8acb287a1e7d775797d","tor30fly","runelure","EyePyramid","f8358565e3d80fb9c69fcbe9d3349f1d","dongfeng","drifter","cryptominer","huggingface","MinerWars","GRIDTIDE","Stealc","potassium","woof","5c07e21ca557de9ff0ce91d009c62e00","5ecaf10790d5f89db8606b207b2143e4","625f32b674143ce7827477f4a5675dfe","Meterpreter","d852ede598d72f2b3a4050576466ec62","hook","DanBot","SAVED START","DIVINE","BL-Networks","cab","nginx","payload-delivery","pycached","operator-server","Aptos","blockchain-C2","ContagiousInterview","macOS","MacSync","Protrollzx","WIN","newfish","CK-099","c8ae9fc91602b6596ce53dffcd0c5146","19ccb70dbc12ef919d5869277e598933","tag","cs-watermark-391144938","inject-2","20473","Cobalt Strike","25820","210558","Oct-1-2026","RemcosAgent","Vjw0rm","WSHRAT","dc2e5904be10c1f064ddfc0f4cca6898","Nexus 31-08-2026","CLOUDHAZE","live-fire-detonation","UNC7072","newember","SUPERMARIO","quasar","Oct_Milli","e5c73f2f0e4a2909e7e914ac4e867b57","d813994ce1dbd4db71c3b48d6cf58bfc","shadowpad","2debf41cd243fa04fa0d0ba1afd03826","real","ONETOUCH","0f81469cc7638ba7c82eaddbd6b3c20a","staging","Oct-5-2026 exploit","Oct-14-2026 Frost","EMBER 64","WARDENStealer","injectus","Remcos32b","4040","RUST","URL","tauri","DarkSword","panel","Coruna","ios","MythicC2","Poseidon","KoiLoader","KoiStealer","BridgeAgent","hidden-desktop","dropped-by-amadey","Electron-ASAR","ExFiles","flomo-abuse","cowrie","dns-xor","OpenNIC","212317","202412","botnet_cc","config-server","Wicked Kryptex Test","cveil","NetSupport","poshc2","nuevos 07","SalatStealer","TON","webrat","fake-steam-client","phishing","Steam","Pass2","317106","Amadey","smokeloader","Cloudzy","fake-ai-tool","Melty","Bst","4bc2877d1ad24788eb5675dd034f5bad","f1f28418d97a5af5ae1f0ae2e29d2056","4039","BDmonies","Rem1","GomoRAT","Gh0stRAT","blizzard-net","8560","NMUOnAPUAPU"],"malwareFamily":"Vidar","confidence":100,"publishedAt":"2026-10-20T02:55:48Z","fetchedAt":"2026-10-20T03:00:02.155Z","references":[{"url":"https://bazaar.abuse.ch/sample/58648467edabd8e8914b022a8d475bffc6db598086f4505e09815e9d02537f91/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/1fa5a629fdc3033dc47b7de27924aaf02e37781bb8b0d281088100dd52ab6a8f/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/71d9c3ee5a1deab2f908c269b72242ea0820b69b871ad9ffe7d35f1091fdabd1/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/dc92065072ed7815c08f402351c3619c71345005aed0781abb9981559a6291c8/","label":"ThreatFox","domainType":"primary"},{"url":"https://github.com/Genusraphiahell447/gnoma","label":"ThreatFox","domainType":"primary"},{"url":"https://www.virustotal.com/gui/file/8f9b2ee97e673d73876abbc952ac533f881749baba69d07a493c3f66d802fae0/behavior","label":"ThreatFox","domainType":"other"},{"url":"https://bazaar.abuse.ch/sample/abe9fae9fc08460dad9e3101b5db9e1c873c1e14dd5c8f716dd19ef523b78b37/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/3d3362f1bd817c6c92aea1a2f3245ffa792c039803c0694319a8adcca57fbf0c/","label":"ThreatFox","domainType":"primary"},{"url":"https://www.virustotal.com/gui/file/ac62a1dfc283429341b99196d974da0a18ffe4f4e30ac28eb4e9583aed4b592f/behavior","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/90e5428595b72d0feba72204b5414349c553dea0e59fce5a1ef2580cfbbc03c4/behavior","label":"ThreatFox","domainType":"other"},{"url":"https://www.lumen.com/blog/en-us/canto-incognito-tracking-the-poellm-malware","label":"ThreatFox","domainType":"other"},{"url":"https://bazaar.abuse.ch/sample/4cae4c533e96cfa71e62966c8fa6339e1188629d2f0cfe86e040e733e10450e1/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/68805da92456eb377426f890b7f95fcd7d5552f148fe033827d67566027f4cd7/","label":"ThreatFox","domainType":"primary"},{"url":"https://honeylabs.net/lookup/153.117.40.26","label":"ThreatFox","domainType":"other"},{"url":"https://honeylabs.net/lookup/103.26.82.84","label":"ThreatFox","domainType":"other"},{"url":"https://tracker.viriback.com/index.php?q=23.94.252.153","label":"ThreatFox","domainType":"other"},{"url":"https://tracker.viriback.com/index.php?q=93.152.213.151","label":"ThreatFox","domainType":"other"},{"url":"https://tracker.viriback.com/index.php?q=91.92.43.242","label":"ThreatFox","domainType":"other"},{"url":"https://bazaar.abuse.ch/sample/57a23842ad1e35d74a7668ab2112de54d92b2a70f6949d7f892002aeb5d69db6/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/4421ccd153aa864e3eb4ac89044c92eba48a1ecca7efc759203368004a7ded05/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/8bf1aefe99486ba24e1bce15035046809d9af0d8d98e0b58c23c38456749b09e/","label":"ThreatFox","domainType":"primary"},{"url":"https://magnify.modat.io/hosts/223.206.137.140","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/91.208.206.98","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/50.6.7.9","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/89.44.80.7","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/89.169.47.107","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/89.124.109.73","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/85.234.100.6","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/87.97.106.161","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/87.97.106.16","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/82.131.202.123","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/77.42.88.18","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/68.64.178.130","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/65.87.7.171","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/5.253.17.131","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/47.85.195.225","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/82.131.154.234","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/79.7.84.77","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/47.111.93.184","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/45.9.150.244","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/45.61.164.176","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/45.192.98.195","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/45.133.73.47","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/38.54.117.91","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/45.13.237.148","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/45.12.114.252","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/38.134.189.93","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/31.56.228.136","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/36.90.146.86","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/36.85.85.9","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/27.77.190.214","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/23.94.252.26","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/217.60.38.147","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/216.152.147.94","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/27.74.232.241","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/190.34.248.222","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/190.32.14.227","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/2.56.245.38","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/199.188.201.197","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/203.117.231.234","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/2.182.230.122","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/196.65.222.84","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/181.178.81.36","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/181.178.169.163","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/205.209.110.158","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/185.165.171.21","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/182.126.209.7","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/182.126.208.234","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/189.243.254.53","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/189.158.8.140","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/189.153.155.63","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/180.183.166.8","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/180.183.141.125","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/155.103.71.194","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/155.103.71.190","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/155.103.71.171","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/104.243.248.63","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/178.208.94.116","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/178.208.92.7","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/176.65.144.91","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/175.139.167.153","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/175.139.167.128","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/169.58.32.48","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/169.58.190.186","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/172.111.139.184","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/171.5.38.70","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/171.4.14.109","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/167.160.186.200","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/162.35.101.111","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/159.75.81.58","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/156.238.123.83","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/161.49.132.132","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/161.142.171.191","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/151.243.225.118","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/150.40.117.172","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/144.202.31.39","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/143.246.202.52","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/130.94.41.76","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/130.94.1.66","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/130.94.66.86","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/123.4.42.216","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/123.4.42.188","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/123.4.35.210","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/123.4.35.150","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/123.11.54.51","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/123.11.50.93","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/123.11.254.208","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/125.167.173.215","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/117.72.8.112","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/123.11.167.35","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/123.11.162.164","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/123.11.141.186","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/123.11.120.163","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/118.200.217.121","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/118.170.209.247","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/115.76.96.61","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/103.83.86.48","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/113.44.94.49","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/115.76.105.249","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/111.250.7.232","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/111.248.229.150","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/111.248.221.15","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/111.248.215.221","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/111.248.199.9","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/111.248.194.101","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/109.199.122.80","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/107.173.244.57","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/107.173.226.190","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/103.83.86.40","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/103.83.86.126","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/111.223.131.214","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/1.162.228.144","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/1.162.212.127","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/107.172.3.44","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/104.168.115.69","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/102.220.160.198","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/1.162.245.87","label":"ThreatFox","domainType":"other"},{"url":"https://www.shodan.io/host/90.148.39.109","label":"ThreatFox","domainType":"other"},{"url":"https://www.shodan.io/host/47.252.13.1","label":"ThreatFox","domainType":"other"},{"url":"https://www.shodan.io/host/140.99.98.91","label":"ThreatFox","domainType":"other"},{"url":"https://www.shodan.io/host/188.25.15.70","label":"ThreatFox","domainType":"other"},{"url":"https://www.shodan.io/host/188.137.225.124","label":"ThreatFox","domainType":"other"},{"url":"https://www.shodan.io/host/80.200.202.102","label":"ThreatFox","domainType":"other"},{"url":"https://www.shodan.io/host/45.227.254.114","label":"ThreatFox","domainType":"other"},{"url":"https://www.shodan.io/host/212.118.39.90","label":"ThreatFox","domainType":"other"},{"url":"https://www.shodan.io/host/77.238.252.235","label":"ThreatFox","domainType":"other"},{"url":"https://www.shodan.io/host/5.8.248.204","label":"ThreatFox","domainType":"other"},{"url":"https://www.shodan.io/host/145.63.140.171","label":"ThreatFox","domainType":"other"},{"url":"https://www.shodan.io/host/140.143.193.143","label":"ThreatFox","domainType":"other"},{"url":"https://www.shodan.io/host/80.78.28.56","label":"ThreatFox","domainType":"other"},{"url":"https://bazaar.abuse.ch/sample/7a0b56bc2253ce40d2b04d48916ed239e5b9fc322d2a4628a681ac2b7f5b2cb0/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/e070ad0f5753a8b14c3990afa27130dfc16c55c2aeebf60f8807989e500f5034/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/d8f9200e8be8904e4da4e48c03b63d4c2d7aab624717c47f0892e61c09545be7/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/1fac02a405615d392e3ca0b0e706f3f27c5b64dcc1e690d175c37fe0f71742b3/","label":"ThreatFox","domainType":"primary"},{"url":"https://winslow1984.com/books/threat-intelligence/page/hey-you-hacked-a-hacker-are-you-ready-for-my-revenge","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/62c33fcb17ffc7396de62e00094d472463ef084c7141ba285db33310176a2fcb","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/lovingthejourneys.com","label":"ThreatFox","domainType":"other"},{"url":"https://github.com/deepfield/public-research/tree/main/cecbot","label":"ThreatFox","domainType":"primary"},{"url":"https://blog.efespain.com/en/chapter-32/","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/190.32.99.7","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/179.61.223.178","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/50.114.167.183","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/193.200.229.35","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/111.248.195.160","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/171.4.187.134","label":"ThreatFox","domainType":"other"},{"url":"https://x.com/orlof_v/status/2111396440815947970?s=20","label":"ThreatFox","domainType":"other"},{"url":"https://bazaar.abuse.ch/sample/823efb0d0247dd4d178f07e6ac7a564697ddac95036f311ef1beabd5f4cfd71e/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/e06be431a8d427579fec15f84bb152326953a7be7a4d20060c6317614ca27843/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/30fc0956603edd1949fc222b3278fbd5bc9de3cd799cba9379605537e8e4788c/","label":"ThreatFox","domainType":"primary"},{"url":"https://github.com/deepfield/public-research/tree/main/aisuru","label":"ThreatFox","domainType":"primary"},{"url":"https://github.com/deepfield/public-research/tree/main/jackskid","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/d76706ec1ef248c678aeb8bf6484e2f8f6822d0d537dbce2be1de23045e65ae6/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/2935b3d7fe05f60261e5a0d57f78f2b12961126ba4caee260f720d2f15f35d8f/","label":"ThreatFox","domainType":"primary"},{"url":"https://www.shodan.io/host/114.55.26.57#3333","label":"ThreatFox","domainType":"other"},{"url":"https://www.shodan.io/host/4.207.192.164#3333","label":"ThreatFox","domainType":"other"},{"url":"https://www.shodan.io/host/47.97.206.32#50050","label":"ThreatFox","domainType":"other"},{"url":"https://www.shodan.io/host/106.55.253.229#50050","label":"ThreatFox","domainType":"other"},{"url":"https://www.shodan.io/host/106.12.61.28#50050","label":"ThreatFox","domainType":"other"},{"url":"https://www.shodan.io/host/169.58.53.135#8081","label":"ThreatFox","domainType":"other"},{"url":"https://www.shodan.io/host/41.232.4.27#1177","label":"ThreatFox","domainType":"other"},{"url":"https://www.shodan.io/host/54.199.35.147#80","label":"ThreatFox","domainType":"other"},{"url":"https://www.shodan.io/host/20.111.19.203#4321","label":"ThreatFox","domainType":"other"},{"url":"https://www.shodan.io/host/47.237.253.174#10443","label":"ThreatFox","domainType":"other"},{"url":"https://bazaar.abuse.ch/sample/843cdaf3fd24c4c227f37b0ac5dc69ee66e06b3e346cb45b99c11baf81c36a10/","label":"ThreatFox","domainType":"primary"},{"url":"https://github.com/deepfield/public-research/tree/main/drifter","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/41662daeb91040d14e6c727b7444652cc5f6473a1645b6e63f8d6c8df30ae4f9/","label":"ThreatFox","domainType":"primary"},{"url":"https://www.virustotal.com/gui/file/95b5c650d9a1d3276cc3a3f7e3ee6f110fafef59015174e665349ba5c6a3368b/behavior","label":"ThreatFox","domainType":"other"},{"url":"https://bazaar.abuse.ch/sample/3d0de9899f6e979091a1b2b620ece811472ce8ea44650ce341597eb17a566cf6/","label":"ThreatFox","domainType":"primary"},{"url":"https://www.shodan.io/host/107.172.22.3","label":"ThreatFox","domainType":"other"},{"url":"https://www.shodan.io/host/129.121.62.230","label":"ThreatFox","domainType":"other"},{"url":"https://www.shodan.io/host/45.207.219.249","label":"ThreatFox","domainType":"other"},{"url":"https://www.shodan.io/host/188.190.9.250","label":"ThreatFox","domainType":"other"},{"url":"https://www.shodan.io/host/64.227.97.214","label":"ThreatFox","domainType":"other"},{"url":"https://www.shodan.io/host/173.249.24.135","label":"ThreatFox","domainType":"other"},{"url":"https://urlhaus.abuse.ch/host/185.113.10.26/","label":"ThreatFox","domainType":"primary"},{"url":"https://www.shodan.io/host/44.214.239.245","label":"ThreatFox","domainType":"other"},{"url":"https://bazaar.abuse.ch/sample/2a9d70d79cf080d7037f624722d40c4f39374f2a4459d3331ed608c293b0176e/","label":"ThreatFox","domainType":"primary"},{"url":"https://github.com/deepfield/public-research/tree/main/potassium","label":"ThreatFox","domainType":"primary"},{"url":"https://any.run/report/9b43bb4e22b438ef28ea41f29c755d71a825950c70a11fa9c569dd02bca91129/2af2b954-72a8-475d-b94c-a726d8ded008","label":"ThreatFox","domainType":"other"},{"url":"https://hybrid-analysis.com/sample/e6b0de2d1e40e60fe6aa94621e4bf33e567657f13b178da9744c6b04894fea86","label":"ThreatFox","domainType":"other"},{"url":"https://www.shodan.io/host/203.98.68.25","label":"ThreatFox","domainType":"other"},{"url":"https://www.shodan.io/host/45.86.86.12#3333","label":"ThreatFox","domainType":"other"},{"url":"https://www.shodan.io/host/165.245.152.105#3333","label":"ThreatFox","domainType":"other"},{"url":"https://www.shodan.io/host/159.198.41.184#443","label":"ThreatFox","domainType":"other"},{"url":"https://www.shodan.io/host/115.190.130.221#9433","label":"ThreatFox","domainType":"other"},{"url":"https://www.shodan.io/host/103.20.235.143#3333","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/164.90.149.44","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/165.227.201.98","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/165.154.227.150","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/181.235.13.54","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/198.54.125.193","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/218.255.11.218","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/187.194.135.186","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/103.120.175.59","label":"ThreatFox","domainType":"other"},{"url":"https://bazaar.abuse.ch/sample/af919251deffa6c7a9ff6f2f88a38ae982b365823e13f814a4c73cbb67a30de3/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/e32e83e12401c61c64f37e682864b4db40987aa06ae6ca29e951e100f55f4619/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/633700324ad7abdf0fcaee0498e4d3bef9093c51ee4d611e02303e0f8f1a58e2/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/7a208815a33bd0cdd8c17129108e55bf1a49e8a57846bc53135759bd045bf9e0/","label":"ThreatFox","domainType":"primary"},{"url":"https://magnify.modat.io/hosts/188.119.149.238","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/2.27.248.209","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/216.107.136.85","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/171.227.32.90","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/144.91.93.188","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/82.131.156.235","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/120.26.248.222","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/130.49.213.223","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/111.248.217.214","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/45.56.76.53","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/154.213.191.161","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/171.4.194.58","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/94.125.101.85","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/102.220.163.36","label":"ThreatFox","domainType":"other"},{"url":"https://bazaar.abuse.ch/sample/c66f94f6f054c6ca06e6561aed88fe54d1ea76bfeb8b5cd8a97c71590f08b063/","label":"ThreatFox","domainType":"primary"},{"url":"https://vx-underground.org","label":"ThreatFox","domainType":"other"},{"url":"https://bazaar.abuse.ch/sample/e7a8b3df8b07fb6b0262ad835e0c42933339067bf450edd3f4bfae9d3d9fd42a/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/a44c6ec422496a206cc382544413dbd9bdf293a07ff60fe32dfd2055f357bd31/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/785de4b2439f127566906ab1abbaa80562fdb730bc0e5c3f4d0d0c6a5af5330f/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/2b71cb025eb40b04a2c1932aecf970370260a7d4174b4d08aff1ae7196bc8d25/","label":"ThreatFox","domainType":"primary"},{"url":"https://www.shodan.io/host/211.22.95.122#31337","label":"ThreatFox","domainType":"other"},{"url":"https://www.shodan.io/host/185.193.126.216#31337","label":"ThreatFox","domainType":"other"},{"url":"https://www.shodan.io/host/158.94.208.218#31337","label":"ThreatFox","domainType":"other"},{"url":"https://www.shodan.io/host/148.113.174.77#31337","label":"ThreatFox","domainType":"other"},{"url":"https://www.shodan.io/host/122.114.12.102#12340","label":"ThreatFox","domainType":"other"},{"url":"https://www.shodan.io/host/122.114.10.134#12340","label":"ThreatFox","domainType":"other"},{"url":"https://bazaar.abuse.ch/sample/b505b754a4a8323a8aa680c15e00b1141405e7112a3260b6770dbc7ff55ed1a6/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/80966dd91fb4f2b41cc4303f334e83bd9065266b99faaa58ef00357e5a5dd1b0/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/39d76b97f4b74e65a8285a3b273926dff27af56a42408e5f4d98c202a6f35514/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/84390d22be07c796cd67d1f8e83a5c298a045eea938c5062267b5d8a1730ca67/","label":"ThreatFox","domainType":"primary"},{"url":"https://www.joesandbox.com/analysis/1985204/1/html","label":"ThreatFox","domainType":"other"},{"url":"https://censys.com/blog/darkswords-panel-sprawl/","label":"ThreatFox","domainType":"other"},{"url":"https://censys.com/blog/darksword-coruna-open-directory-finding-report/","label":"ThreatFox","domainType":"other"},{"url":"https://bazaar.abuse.ch/sample/92054967598e5fb72431383cfbb4b295d42abbde1a2a3ab157326d12ed065218/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/209a201ff990f670277ecac05dfdd47df6e4994eafb5edc951063793dd5e1631/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/3d5e248553560ac79b13e46bf8928a9832ea9a782c973d1c303f5236c427158b/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/b90d79d2a054eddec4439c9821c4ea1a20cb674200315ea772e47419649a45b4/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/98ae4104c3c89c8cf226f46c63ef6ee6a827f6cf48819a1691aba974128fd1b7/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/a2c657d444e0eb521fe607bc9ab8b1973c6dfb2491e38ec7af1ba0e11e3d2cd9/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/4a5ebb6b3a57d38caecb10cd82b8858e384a44875eefdba10cb8b478527fe264/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/ff9199f95e971bb88346a2e6cdff81a7bd89d4b99ea46be005e32ff85606c8da/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/fafde0e22150c3eba1eb48ea2a64d6708e9a53f0e9eb1b6eda249deca64a74f9/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/a25c2f61baffb62e56e161682a8fae587e2ff853d47c2b4a8d1564fb7ed93327/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/6df8ffa08152c1ef097a2caa52675c4085cc459d1d7e28053cfc8a451a8432aa/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/dbe192ea36ed20f78c54b322bda0bab81f647c4bb7df42cdad3ef74ebb8f56bc/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/a5f381d3fae86aa9b0f3a22aa7ce23594461eb635efa9a638132bcf5bb86db53/","label":"ThreatFox","domainType":"primary"},{"url":"https://github.com/dominion2/reverse-engineering-and-malware-analysis/blob/master/report/bridge-agent-hidden-desktop.md","label":"ThreatFox","domainType":"primary"},{"url":"https://blueteam.cool/posts/flomo-onedrive-sideload/","label":"ThreatFox","domainType":"other"},{"url":"https://bazaar.abuse.ch/sample/417b59d97637d2b392b1704a7b5fc59a18a1dfcc13287466ca7707b1a32b4bf6/","label":"ThreatFox","domainType":"primary"},{"url":"https://github.com/ksi-digital/threat-research/tree/main/mirai-dns-xor-c2","label":"ThreatFox","domainType":"primary"},{"url":"https://polygonscan.com/address/0x1823A9a0Ec8e0C25dD957d0841e3D41a4474bAdc","label":"ThreatFox","domainType":"other"},{"url":"https://bazaar.abuse.ch/sample/7a2feccbbd016be9a383025f686c8fc44bcdbb7a175b9591cf743bca7bafd82f/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/531540654836a5e5add5fe08432bc17c3582c1b0692b411278b1c96a3e5fe8db/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/913792a7cec3a062742f3390d7941a7e95aeeb7e1537e4a52590049d54c5c5e8/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/3461b395a20846cefef84d6f7ddcbd7aff2209423eaaf74925ab70b0038e160a/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/1af9bf77ddd6ad2d6dc263abf4b64f9ff72b1d5a73ed54c79e5482f2841c7ccf/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/76b419ca169209c43d52d1e3e9c6c34801e9afac9af5c3066713bc8b048a7487/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/891eb71eb33f8b02a97c80a3c003ea7d53f4552e63f81f0c6dad073960695d79/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/bb37893f7690e7ad8ce3a5aa33e8fd922475baf1c02e28b1c54c45f4c9343cc3/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/09da45e7bcee737ec3814e3b90dcad2fe4151e6871a92526cb182ced38ef638e/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/403e48b84d746dd2f6772ed63679acea36508e9bee762049431117a214537932/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/6311ea78a411b08f1939924028fae1f3f63943aa9a3dd08f319ec244a4bcf997/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/a15f30f20e3df05032445697c906c3a2accf576ecef5da7fad3730ca5f9c141c/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/c373be374ca2e92cb015dca9e571f89103be65d12e6af224c94ac033c208761e/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/bbb93295a53d22150eef772cc4ab5436e769f97041e741d6377c9373468c03ad/","label":"ThreatFox","domainType":"primary"}],"feedLabel":null},{"id":"threatfox-1974933","source":"threatfox","category":"threat-intel","severity":"critical","title":"payload_delivery: undefined","description":"https://bscscan.com/address/0xBA8B70D5B15cFbFD628F71560aAb996356c0fa84","indicators":{"cves":[],"ips":[],"domains":[""],"urls":[""],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["Cloudflare","gif","PHP","webshell","WordPress","workers.dev","wp-admin","BSC","dead-drop","etherhiding","smart-contract","freight-lure","panel","RAT","NodeJS","Vidar","c2","ec141392be2e474ab700bf353b3b9f2c","Loader","stealer","ClearFake","ClickFix","EtherHidingMagecart","mac-0x68dc","macOS","HadesStealer","HadeStealer","elf","IoT","Mozi","46ffc506f663afc29ff2cb6c97f94000","mac-0xdcf2","mac-0x0f14","AUR","CHAOS","DirtyBlanket","linux","onion","systemd-fontd","gitflic","wayback","SocGholish","55001da20373e92a4261b69e9f1087ac","btrf36","Coruna","DarkSword","ios","SilentNet","SmartApeSG","error524","fedex","PhaaS","smishing","1718e0679220166cf123fbe6e40c635c","d852ede598d72f2b3a4050576466ec62","DHT","protokol","Mac","Kongtuke","Amos","Foxveil","ErrTraffic","Polygon","remcos","moobot","asyncrat","Remus","MacSync","ZigClipper","quasar","Android","GhostBat","ghostx-panel","mParivahan","veltrix","apix","fake-git","powershell","IRC","k4_irc_bot","jar","minecraft","abe-bypass","com-hijacking","hermes","hermes-stealer","infostealer","6713982832fdd0efe07912b12c5c5b2b","379e62cc9396a8acb287a1e7d775797d","c7a50169dbc6d842a7e7d349513f88f1","Mirai","DCHOST","guloader","exe","RevStealer","OffLoader","codec-cache","cve-2026-96656","miner","plex","funrat","MaksRAT","PussyRAT","TON","auditpolcore","DLL-sideloading","OVH","CLOUDHAZE","UNC7072","DIVINEX","DvnX","WARDENStealer","YapStealer","ContagiousInterview","DPRK","fake-recruitment","RuntimeBroker","Websocket","DDoS","garble","golang","minefox","ab0a59f4970a96fd6e8daa4f6f8e22cd","b9df72d092aeb25d8cb28d34cc4984de","fallback","go","legea","fabric","java","DGA","Amadey","SalatStealer","xmrig","dropped-by-OffLoader","gamaredon","GammaSteel","CobaltStrike","drb-ra","modat","b89d843f29af2eed09805e9767a1165f","d85b02740b9fbbe0bc098debbc5a5109","sepolia","AppSheet share.google zip PureRAT","runelure","validin","valleyrat_s2","f7e0bdc53604a00d861131d2693a943c","huggingface","SpacesForRent","Stresser","Github","Stealc","RemusStealer","c1399bfb1be0a51415613edd6f0068c5","d42249d8b3409d0cd65c3cc7f8267ec0","1ca8afc0e9497e2ea687b455ff40cf1e","zero stealer","cab","Certum","Dropper","EV-signed","payload-delivery","pycached","python","signed","socketio","skimming","victim","5ecaf10790d5f89db8606b207b2143e4","compromised","etherhide","fakeupdates","PayloadDelivery","stager","botnet","malware","XWorm","cracked-software","RUST","staging","vscode","vscode-tasks-folderOpen","PLASMAGRID","GHOSTBLADE","supply-chain","web-drive-by","Mythic","MythicC2","Poseidon","ScreenConnect","msi","cowrie","dns-xor","honeypot","OpenNIC","tauri","fake-steam-client","phishing","Steam","Magecart","fake-ai-tool","Overlord","SloppyRAT","GomoRAT","GhostRAT","Gh0stRAT","FakeLogin","YoungLotus","applescript","ValleyRAT","dcrat"],"malwareFamily":"php.shin_webshell","confidence":100,"publishedAt":"2026-10-20T02:44:31Z","fetchedAt":"2026-10-20T03:00:02.155Z","references":[{"url":"https://bscscan.com/address/0xBA8B70D5B15cFbFD628F71560aAb996356c0fa84","label":"ThreatFox","domainType":"other"},{"url":"https://bscscan.com/address/0xfb9B234CdcE6dd9E0Eb4895b5682eBebE0b3D277","label":"ThreatFox","domainType":"other"},{"url":"https://bscscan.com/address/0xCc4BCd51e0eA7E254b0F30044538F6Cb86a4E61b","label":"ThreatFox","domainType":"other"},{"url":"https://app.any.run/tasks/3537575f-fe86-40ee-b50a-f40498e5cfb5","label":"ThreatFox","domainType":"other"},{"url":"https://honeylabs.net/lookup/139.135.43.143","label":"ThreatFox","domainType":"other"},{"url":"https://honeylabs.net/lookup/59.96.138.199","label":"ThreatFox","domainType":"other"},{"url":"https://www.bleepingcomputer.com/news/security/fake-arch-linux-packages-push-malware-with-root-privileges/","label":"ThreatFox","domainType":"media"},{"url":"https://infosec.exchange/@monitorsg/117469525952388245","label":"ThreatFox","domainType":"other"},{"url":"https://x.com/vxunderground/status/2112234562805739834","label":"ThreatFox","domainType":"other"},{"url":"https://www.group-ib.com/blog/error-524-decoy-smishing/","label":"ThreatFox","domainType":"other"},{"url":"https://honeylabs.net/lookup/153.117.37.137","label":"ThreatFox","domainType":"other"},{"url":"https://honeylabs.net/lookup/111.92.157.249","label":"ThreatFox","domainType":"other"},{"url":"https://bazaar.abuse.ch/sample/4cae4c533e96cfa71e62966c8fa6339e1188629d2f0cfe86e040e733e10450e1/","label":"ThreatFox","domainType":"primary"},{"url":"https://www.virustotal.com/gui/file/08e7c04e22c51313e5095f2db39e11fcc59adf56a63481ae92d8730e2788edc7","label":"ThreatFox","domainType":"other"},{"url":"https://bazaar.abuse.ch/sample/84cd8bf6fa43ffc59f3fb3046933be0c650ef063a106b92b020580b51bdc9288/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/dc92065072ed7815c08f402351c3619c71345005aed0781abb9981559a6291c8/","label":"ThreatFox","domainType":"primary"},{"url":"https://app.any.run/tasks/7fe90473-d0aa-439d-b0b4-18aa3019f8a4","label":"ThreatFox","domainType":"other"},{"url":"https://bazaar.abuse.ch/sample/fc255863ceab40f2510ddf29801e583015505861777f1c5d7e72ec164920f075/","label":"ThreatFox","domainType":"primary"},{"url":"https://honeylabs.net/lookup/124.29.247.45","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/8f9b2ee97e673d73876abbc952ac533f881749baba69d07a493c3f66d802fae0/behavior","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/b05f89e41ee8a6613461bdd57362772258f7fd8383a5d013a7965f3fd8f08eb0","label":"ThreatFox","domainType":"other"},{"url":"https://bazaar.abuse.ch/sample/ab95aaad2d69b0d587edd35cad42e3c13012a43ecd614da6b50a632c4d25a8ad/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/b44d8553cf97dfde3046e3c55e73bb68e7666c057bdd89f2c6528f7f8269deae/","label":"ThreatFox","domainType":"primary"},{"url":"https://honeylabs.net/lookup/100.165.0.207","label":"ThreatFox","domainType":"other"},{"url":"https://honeylabs.net/lookup/119.73.19.84","label":"ThreatFox","domainType":"other"},{"url":"https://honeylabs.net/lookup/43.230.94.184","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/b5d4aba0fe4004e851756d0329f0c165db2c1667c7c73516e0f1537c9afd3298","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/61f8e4e3e263934a04d18e29fd5edaa0840b1a8137b649e8241e5bae013f200d","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/reketepizza.com","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/qualicost.com","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/www.ufa365.academy","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/sexstories.beauty","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/warpfins.com","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/temdetudoecommerce.com","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/zenithcomputers.com","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/xocdiapro.co","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/zmops.io","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/www.yumweb.com","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/visadubai.com.vn","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/sandandgarden.com.mx","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/tuasesorcontable.com.co","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/ufakick.group","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/v2.bulwarrestauracja.pl","label":"ThreatFox","domainType":"other"},{"url":"https://honeylabs.net/lookup/176.65.139.76","label":"ThreatFox","domainType":"other"},{"url":"https://honeylabs.net/lookup/190.196.253.19","label":"ThreatFox","domainType":"other"},{"url":"https://honeylabs.net/lookup/124.29.251.100","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/ngob.co.za","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/photographicmemories.uk.com","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/milestonedentalassisting.com","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/www.nurmas.com.tr","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/rtpibetslot4.co","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/prefirobh.com.br","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/roadracerx.com","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/produtecnicaagro.com.br","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/pofcolombia.com.co","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/moncler-outletjackets.us.com","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/nwfc.io","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/e395c5343703a570d12620c81b9593ea6117d2f57c95bd8247704d9dbd256ce6","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/leo88vn.vip","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/www.izmirtaskaplama.com","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/iberian-trade.com","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/megacricketworld.me","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/machinegame.com.tw","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/luiseduardo.net","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/lightmagazines.com","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/lamiradadelotroediciones.com","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/www.kurashitalia.com","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/lottovip.lease","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/intechpol.pl","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/www.guncelbetvoygiris.com","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/i1-social.com","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/85fce9826974549c2dd4c92a3207cf2543e10676ad2dfad7c8ea429f616cdf21","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/rosales20bar.com","label":"ThreatFox","domainType":"other"},{"url":"https://bazaar.abuse.ch/sample/dcdfb5866c594ee0f92149fed4efcc2b243bf4da1f747a3b2e0b680fdd483df8/","label":"ThreatFox","domainType":"primary"},{"url":"https://honeylabs.net/lookup/182.117.28.216","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/ucerma.sk","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/meritadlaw.com","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/2b66b4b8780569cd63159360fbc53761d6ba15c7635c977976d55c77d1d93079","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/8ad8e7b22405a2368fe8b4a71c85311ed6846a159c911d6d068bd06e6c29ec6d/behavior","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/www.nomadblends.com","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/sinosprint.com.br","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/www.reginaldtjackson.com","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/tecnobrasautomacao.com.br","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/shinemusic.ca","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/orofranspain.com","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/joknsdfgjojipogfdfgsjksf.icu","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/89a25311145ada1664428064bc5b4ae16ec3e322b1399f3d4e753de8aba3ea06","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/megacool.co.za","label":"ThreatFox","domainType":"other"},{"url":"https://winslow1984.com/books/threat-intelligence/page/hey-you-hacked-a-hacker-are-you-ready-for-my-revenge","label":"ThreatFox","domainType":"other"},{"url":"https://honeylabs.net/lookup/153.117.32.82","label":"ThreatFox","domainType":"other"},{"url":"https://bazaar.abuse.ch/sample/5d123596bdc088235282a1eea5431bac06440d7dded87a8ea6e8af2ac4707144/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/7c997959c5f233b07bed777d6477ad2cee3c316447dd4bff3ed77f952211d70d/","label":"ThreatFox","domainType":"primary"},{"url":"https://www.virustotal.com/gui/file/4d05b7ecd6db6ed76e6e5597f4e8a3f36ac3b55dd16874977b4b0db365291e6c","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/domain/maximalmaxing.com/relations","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/2077b5bf06f645fa7d299f0bec157a160f1ecd8b3865c820e981a70c44aed9c3","label":"ThreatFox","domainType":"other"},{"url":"https://bazaar.abuse.ch/sample/5d025ebb863503212582370793259517992800c729c3a25f1d452e161b6c5bf4/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/adf75ee42b2de8321da9260725792634c912cf682301a4e405873242555be33e/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/315e87a089566ffdeeb7df30152bb00001e3dd496f55fa0f2c0b7b72b5be38c6/","label":"ThreatFox","domainType":"primary"},{"url":"https://urlhaus.abuse.ch/url/3951406/","label":"ThreatFox","domainType":"primary"},{"url":"https://clickfix.carsonww.com/domains/naharamritshakti.com","label":"ThreatFox","domainType":"other"},{"url":"https://honeylabs.net/lookup/190.196.253.85","label":"ThreatFox","domainType":"other"},{"url":"https://honeylabs.net/lookup/175.107.228.54","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/spruillcapital.com","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/bj66vn.com","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/www.teamcase.it","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/www.ucerma.sk","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/v4travels.com","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/tryggtkapital.se","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/liftsystemssolutions.com","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/wetzelmassage.com","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/livebj66.com","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/wr2.com.br","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/webbet168.net","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/monstago.com","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/theyouthtakeoverproject.org","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/valoconsulting.net","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/www.paolayenay.com","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/nitcoenergy.com","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/realstrikklyhiphop.com","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/www.lovingthejourneys.com","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/scentury.vn","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/reynolds.mw","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/slotlink.co.uk","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/sbokubet.com","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/www.sportmusicplay.com","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/bj66viet.com","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/www.synergysparq.com","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/streamlineagencies.co.za","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/www.smartchild.sk","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/cfpj.tg","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/creeyacht.pl","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/cricketpuns.com","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/cie-felicettechazerand.be","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/charlemagne.ma","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/grupojecam.com.br","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/www.iusversilia.it","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/www.espacesante-suisse.ch","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/bentleyg.com","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/pigeonsafaris.com","label":"ThreatFox","domainType":"other"},{"url":"https://honeylabs.net/lookup/113.238.162.54","label":"ThreatFox","domainType":"other"},{"url":"https://honeylabs.net/lookup/190.196.253.82","label":"ThreatFox","domainType":"other"},{"url":"https://honeylabs.net/lookup/190.196.253.121","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/www.welderswelfare.com","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/tjcreative.org.za","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/topendtacticalstore.com","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/www.verttige.tn","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/volana.io","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/www.vidieckymakler.sk","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/www.sardantinfortunistica.it","label":"ThreatFox","domainType":"other"},{"url":"https://blog.efespain.com/en/chapter-32/","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/www.spanishlessonslosangeles.com","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/yelphelper.com","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/sskdesign.com","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/zlab.it","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/therapyclinic.online","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/thetutimutabazi.org","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/zenequitycapital.com","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/personalgym.in","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/pizza-primavera-wiesbaden.de","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/traceembrace.co.za","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/www.ufa007.tv","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/www.penyabarcelonistavilanova.cat","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/podhomestasmania.com","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/www.vasservending.com","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/www.reliancegranito.com","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/realblessingpro.com","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/samratech.com","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/samsunsesisik.com","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/www.ridgelineroofingandgeneralbuilding.co.uk","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/olivercash.co.uk","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/nlspronos.fr","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/namhuzz.com","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/manamas.com","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/www.sicilyfoodmannino.it","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/mediaindustry.org","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/kinpms.com","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/falaqnurserybd.com","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/geometre-simon.com","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/osolalkhebra.com","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/inversionesaltasizhan.com","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/isifarmer.es","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/www.jacarandabymar.com","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/www.iuriqa.legal","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/jsa-koffer.de","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/just-foryou.fr","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/jauntygroup.com","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/jozsefpizza.hu","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/konfiableplus.com","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/fxplus.com.tr","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/gconsulting-ci.com","label":"ThreatFox","domainType":"other"},{"url":"https://honeylabs.net/lookup/153.117.15.186","label":"ThreatFox","domainType":"other"},{"url":"https://honeylabs.net/lookup/39.34.191.156","label":"ThreatFox","domainType":"other"},{"url":"https://honeylabs.net/lookup/153.117.13.10","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/0667e459fd54a7467f91ef82d5ed580f80e8887e344035abeb748b8c68298802/behavior","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/df23fcc6c9b57d69983761adb3977da6f6d0c35a81503bb17d9d94f92146353c/behavior","label":"ThreatFox","domainType":"other"},{"url":"https://modrinth.com/plugin/universetiertagger","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/efc0f30e9b1c8e4b1479006ecdcc95d5d4fa0627af8b294a6babe57da17b58d3","label":"ThreatFox","domainType":"other"},{"url":"https://honeylabs.net/lookup/153.117.50.215","label":"ThreatFox","domainType":"other"},{"url":"https://honeylabs.net/lookup/190.196.253.52","label":"ThreatFox","domainType":"other"},{"url":"https://honeylabs.net/lookup/111.92.157.206","label":"ThreatFox","domainType":"other"},{"url":"https://hybrid-analysis.com/sample/104a6e4b1da8f7b42bdaf887b82f2c12348c6b1ffe52d1de2d964b6329492ad7","label":"ThreatFox","domainType":"other"},{"url":"https://bazaar.abuse.ch/sample/8360a40c7eb801b653b9f2180c9b3dc49fb9c6ed139f98e2491aa031f69052a8/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/fb799fbe2729fa88358d32375c15aa41b2de62e981655e60d4f53efb4e4fee73/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/463f56104d5b9459918a39fd23d28937c1c7a1f88d8c3b6e48d6755fc0bbb7c7/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/e5b790c3a237edc2c55f01a7c648d0eaf8e969a1a9223aff605a90a1d42900b7/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/a16051a12512942c311bbaa96fb31bbe1fe56568ef879d238395d498cdbd2f2d/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/3874acb3e5c6f472da7df4ed3dd354c882ada48dd7838ec6c54ef2628d204389/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/d5a8157be3b6069a336087b0611e266ddfcd062d5c2674bc8f16d754ea017169/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/44272f1f153709662b3b973e7b4a601df852e7eae3dd9a22661860394889b1eb/","label":"ThreatFox","domainType":"primary"},{"url":"https://honeylabs.net/lookup/125.26.175.150","label":"ThreatFox","domainType":"other"},{"url":"https://honeylabs.net/lookup/124.29.194.167","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/www.diginas.fr","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/www.cloudguild.tn","label":"ThreatFox","domainType":"other"},{"url":"https://hybrid-analysis.com/sample/cefb465886bc813ac91e9ad5b1835eefe9828f251b58eb0da012ee4022ff6d98","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/bhumivista.com","label":"ThreatFox","domainType":"other"},{"url":"https://honeylabs.net/lookup/42.230.35.117","label":"ThreatFox","domainType":"other"},{"url":"https://honeylabs.net/lookup/223.123.43.62","label":"ThreatFox","domainType":"other"},{"url":"https://bazaar.abuse.ch/sample/ae6e815981ca4ef79e01a1bbaf3927bfc557192c288cb31436ffb9366ef03077/","label":"ThreatFox","domainType":"primary"},{"url":"https://clickfix.carsonww.com/domains/tools.lumma.cy","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/admin.msxfweb.net","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/clevershop.nl","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/ntrw.nl","label":"ThreatFox","domainType":"other"},{"url":"https://infosec.exchange/@monitorsg/117450999763033246","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/mooimanmode.nl","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/uzickanedelja.com","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/tradecorp.com.de","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/googlegemini-earlyaccess.com","label":"ThreatFox","domainType":"other"},{"url":"https://bazaar.abuse.ch/sample/32dcaf5c4f41dbdaddeee5fd64dacb290f81655a37ea10beaeca1a369a80c7f0/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/ebb2f6d9ee6731d87d430b7c9114d4fa02ffb5adba565da3ffda7cca0afb2353/","label":"ThreatFox","domainType":"primary"},{"url":"https://honeylabs.net/lookup/153.117.15.107","label":"ThreatFox","domainType":"other"},{"url":"https://honeylabs.net/lookup/223.123.43.133","label":"ThreatFox","domainType":"other"},{"url":"https://honeylabs.net/lookup/202.47.55.3","label":"ThreatFox","domainType":"other"},{"url":"https://bazaar.abuse.ch/sample/b08bff811d20fb95abbb8a09175f33a749c1dff6967b86e583ba5f5ee08872e5/","label":"ThreatFox","domainType":"primary"},{"url":"https://clickfix.carsonww.com/domains/report.cyberwatcher.de","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/te1egsdxinn.top","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/qmyinyueqishui.icu","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/qaswedcameitu01.top","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/lbbsxwangyiyun.icu","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/qmswsdayiwaiwai.top","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/bsadxgugefy.top","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/wuyexuyiwaiwai.top","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/xsdianzqmguge.top","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/ngjhgghdsftujfdshdhsguge.top","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/qmbsaasdzaqishui.top","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/qazxswdguge02.top","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/qmsdazsliuguge03.top","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/sdfaswasleidian01.top","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/lbbzadcfssdxxtg.icu","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/asxcdskdwedgugefy.top","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/bsdaxguge.top","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/wuyexufanyi.top","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/sadsxsayiwaiwai.icu","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/lbbssougoushurufa.icu","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/lbbsxdmeituxiu.icu","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/disnasaskdjaxksjgg01.top","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/lbbsxdsougouliulanqi.icu","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/asajkdjkxsiasdjaguge.top","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/bostaiwanline.top","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/wsadaxiangrikui.icu","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/lbbsedxyifanyi.icu","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/sdxfdabiteliuanqi.icu","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/xsskjhjawsdjhfggfanyi.top","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/bssdazguge.top","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/hbwney.com","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/qmasxwedmeitu.top","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/qmqxzasqishui.top","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/kajskdwekdxchsdgugefy02.top","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/xslaksdjkalkssdguge11.top","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/cadsacdsguge02.top","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/sdxcsdeaguge.top","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/wuyexumeitu.top","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/ytzsadguge1.top","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/wuyqxuguge.top","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/wuyexuyoudao.top","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/ssdjskdcasdjafdfkgugellq01.top","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/wuyexuleidian.top","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/qmyinyueaaqishui.top","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/aswdczayiwaiwi.top","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/wuyexuxiangrikui.top","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/qmdadxiangrikui.top","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/wsasaklsdkjasgugeliulan.top","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/qmbsadxdyiwaiwai.top","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/sansdesougou.top","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/dsaxsaddfanyi.top","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/qmazsdqatd.top","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/dsxaszxleidian.top","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/bsasdxdaqguge.top","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/daasxzdwqaguge01.top","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/ggcheonegoovnfgg.top","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/saswsasyifanyi.icu","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/xskjaaisdkajsxcgugefy.top","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/qmbszasdqyoudao.top","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/wassksdyiwaiwai01.top","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/yiygdfanwesyi.top","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/te1eguuxsnrnn.top","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/xsazqdfaafeiji.top","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/qmzsxdmeitu.top","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/wuyexuqishui.top","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/samsdqafeiji.top","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/qmsdsaaguge.top","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/yiyuxxfanyi.top","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/qmswedyoudao.top","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/cdngsnsaassefgagugefanyi.top","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/lbbsedxyiwaiwai.icu","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/202.146.222.253","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/xsaindazguge1.top","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/192.253.229.191","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/xsjazscedguge03.top","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/qmasedfxleidian.top","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/qmyxdfsyoudao.top","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/c3b8375f092798ac851bfacdb94310ccabfebcbe106f6e7324764a0e4fd4ea57","label":"ThreatFox","domainType":"other"},{"url":"https://bazaar.abuse.ch/sample/457574b398a56d96c0427bed59bf2606aec1766e4613d2dc2b838a198e72ded4/","label":"ThreatFox","domainType":"primary"},{"url":"https://clickfix.carsonww.com/domains/pxb7.online","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/95b5c650d9a1d3276cc3a3f7e3ee6f110fafef59015174e665349ba5c6a3368b/behavior","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/e472cd7cb92d7e00bc46eef47b0a06e194329c8ef52acb7a7749b86d661cc054/behavior","label":"ThreatFox","domainType":"other"},{"url":"https://honeylabs.net/lookup/43.230.94.187","label":"ThreatFox","domainType":"other"},{"url":"https://honeylabs.net/lookup/153.117.1.182","label":"ThreatFox","domainType":"other"},{"url":"https://bazaar.abuse.ch/sample/2a9d70d79cf080d7037f624722d40c4f39374f2a4459d3331ed608c293b0176e/","label":"ThreatFox","domainType":"primary"},{"url":"https://clickfix.carsonww.com/domains/48mko9hrqrdwuvj.icu","label":"ThreatFox","domainType":"other"},{"url":"https://honeylabs.net/lookup/124.6.167.113","label":"ThreatFox","domainType":"other"},{"url":"https://honeylabs.net/lookup/125.47.84.76","label":"ThreatFox","domainType":"other"},{"url":"https://honeylabs.net/lookup/124.29.224.45","label":"ThreatFox","domainType":"other"},{"url":"https://honeylabs.net/lookup/42.227.203.38","label":"ThreatFox","domainType":"other"},{"url":"https://bazaar.abuse.ch/sample/c25ead077458ff215c8ef109b2c86e9b8a3c2a63f6d229b721382b035816633e/","label":"ThreatFox","domainType":"primary"},{"url":"https://any.run/report/9b43bb4e22b438ef28ea41f29c755d71a825950c70a11fa9c569dd02bca91129/2af2b954-72a8-475d-b94c-a726d8ded008","label":"ThreatFox","domainType":"other"},{"url":"https://infosec.exchange/@monitorsg/117446039197587616","label":"ThreatFox","domainType":"other"},{"url":"https://hybrid-analysis.com/sample/e6b0de2d1e40e60fe6aa94621e4bf33e567657f13b178da9744c6b04894fea86","label":"ThreatFox","domainType":"other"},{"url":"https://honeylabs.net/lookup/139.135.46.97","label":"ThreatFox","domainType":"other"},{"url":"https://honeylabs.net/lookup/41.216.225.80","label":"ThreatFox","domainType":"other"},{"url":"https://bazaar.abuse.ch/sample/3e4313662c1ef316bb7095b4f8f9b47c9d0b2b7050ec6d3a1ac4440d43fb2d1b/","label":"ThreatFox","domainType":"primary"},{"url":"https://honeylabs.net/lookup/45.171.124.23","label":"ThreatFox","domainType":"other"},{"url":"https://bazaar.abuse.ch/sample/6b68a1f5df0a2e64d8d5092dacf355a35bbab4e7d5d6c193234a05bc5037dcbc/","label":"ThreatFox","domainType":"primary"},{"url":"https://www.virustotal.com/gui/file/d5c773e139cfc3eae4d811b8782758c14899d262256cfc29fd0f8ac69fd6949e/detection","label":"ThreatFox","domainType":"other"},{"url":"https://x.com/vxunderground/status/2110222399241126337","label":"ThreatFox","domainType":"other"},{"url":"https://bazaar.abuse.ch/sample/4cd3529fc035c278beb7474fd6e78aa6316bc908e105f8e12bb6ab0e79a2bc55/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/1d9c00c7e9e917b91a1070249c9278ad033d2c834637a081bf66d0e6533504c0/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/8fcedb21d6f2fa9ab3e01ba27cb004aa57cf637eb85b25d2f7de1abf8f57d4e1/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/bdb41086f3b18563b26594aecff13548ef42978a55218f6baebe0041f78ac3d0/","label":"ThreatFox","domainType":"primary"},{"url":"https://x.com/orlof_v/status/2110308506255417764?s=20","label":"ThreatFox","domainType":"other"},{"url":"https://hybrid-analysis.com/sample/499cb7ae6c385c77d3eb663394e552626621ecac74d86c8dc392f4098886927d","label":"ThreatFox","domainType":"other"},{"url":"https://infosec.exchange/@monitorsg/117441801105382312","label":"ThreatFox","domainType":"other"},{"url":"https://honeylabs.net/lookup/176.65.139.40","label":"ThreatFox","domainType":"other"},{"url":"https://honeylabs.net/lookup/182.190.212.190","label":"ThreatFox","domainType":"other"},{"url":"https://honeylabs.net/lookup/190.196.253.64","label":"ThreatFox","domainType":"other"},{"url":"https://bazaar.abuse.ch/sample/976aff8d066d00667f9ebeea846c87fb0f7a6d86aaca725ae06242a6b43ef6d9/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/85bbb20814fb9989803918ae9771cfba9cde599d93924f54c41f008b1996a5fb/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/152d4753839330b04a221d9e97093de27dcf5a4231fbd948940da26d909dd5b1/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/4cea8fa258183dcb8a7d4276291b800de7cd50207c273c2c78551afedb1fd91c/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/88c5cf4e9d867c792efdc8cadac668b864a632deb887cf6d7d97a1cb79cd8dfd/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/0b19b12b0919cf3bb6904355593948a5077f23f81aca05ffebf60f81eb860ea2/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/ff113135f91e732050a8cba3281dd73926f356d6021e55019c3b3fa2ee5d9b60/","label":"ThreatFox","domainType":"primary"},{"url":"https://honeylabs.net/lookup/196.190.157.180","label":"ThreatFox","domainType":"other"},{"url":"https://honeylabs.net/lookup/39.34.164.239","label":"ThreatFox","domainType":"other"},{"url":"https://www.threatlocker.com/blog/malicious-vs-code-tasks-json-abuse-enables-multi-stage-infostealer-deployment","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/6a8328485672fbe0505095daf01ffcbfb6b9fd6b5efe788e4ebb523257418513","label":"ThreatFox","domainType":"other"},{"url":"https://www.clickfixed.uk/intel/20145","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/open.lzgqin.cc.cd","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/new.lzgqin.cc.cd","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/llm.lzgqin.cc.cd","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/hk.lzgqin.cc.cd","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/fast.lzgqin.cc.cd","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/code.lzgqin.cc.cd","label":"ThreatFox","domainType":"other"},{"url":"https://github.com/dominion2/reverse-engineering-and-malware-analysis/blob/master/report/darksword-coruna-implants-and-dga.md","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/2e5a56beb63f21d9347310412ae6efb29fd3db2d3a3fc0798865a29a3c578d35/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/e02855a0c4e27b793644eaf6446da9596ed8d2d3c37b580beb111738010de441/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/64c52a52d64ea44a8b8e1a9fa367e37a9940f847fcd142182711b1b862efb8a2/","label":"ThreatFox","domainType":"primary"},{"url":"https://censys.com/blog/darkswords-panel-sprawl/","label":"ThreatFox","domainType":"other"},{"url":"https://censys.com/blog/darksword-coruna-open-directory-finding-report/","label":"ThreatFox","domainType":"other"},{"url":"https://bazaar.abuse.ch/sample/e0bbae0176649920bdeb0dc5a16cf71e010550e711e4c400d2f72cb83db5451b/","label":"ThreatFox","domainType":"primary"},{"url":"https://github.com/dominion2/reverse-engineering-and-malware-analysis/blob/master/report/warden-stealer-static-unpacking.md","label":"ThreatFox","domainType":"primary"},{"url":"https://www.gendigital.com/blog/insights/research/warden-stealer-rust-infostealer-analysis","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/a1efcf4e1c2ee9a4a887ec9208a7f69c0bc360677db147161cad1e54520780fd","label":"ThreatFox","domainType":"other"},{"url":"https://github.com/ksi-digital/threat-research/tree/main/mirai-dns-xor-c2","label":"ThreatFox","domainType":"primary"},{"url":"https://www.clickfixed.uk/intel/20115","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/ibespai.es","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/api.lzgqin.cc.cd","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/admin.lzgqin.cc.cd","label":"ThreatFox","domainType":"other"},{"url":"https://honeylabs.net/lookup/202.47.48.49","label":"ThreatFox","domainType":"other"},{"url":"https://honeylabs.net/lookup/144.48.132.30","label":"ThreatFox","domainType":"other"},{"url":"https://honeylabs.net/lookup/144.48.132.100","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/juplterairdrop.cfd","label":"ThreatFox","domainType":"other"},{"url":"https://honeylabs.net/lookup/124.29.226.98","label":"ThreatFox","domainType":"other"},{"url":"https://honeylabs.net/lookup/139.135.43.98","label":"ThreatFox","domainType":"other"},{"url":"https://honeylabs.net/lookup/172.168.163.83","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/486277d29cbefcbd321d7c7ad5d72bf1983c110206ed607c6c371af7f7741308","label":"ThreatFox","domainType":"other"},{"url":"https://www.clickfixed.uk/intel/19999","label":"ThreatFox","domainType":"other"},{"url":"https://bazaar.abuse.ch/sample/913792a7cec3a062742f3390d7941a7e95aeeb7e1537e4a52590049d54c5c5e8/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/cdd73b09c6ebb602b7939fb55bcb663ff93fb844cf7b291e5ed635f9fc69db61/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/7f1db334fd3302cf98dd4afddf6f90e98e2a496fe7e86bf1832b89d02f3d73c3/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/5e3811b8de57be355ed6d51518502b070e63afd7bc0f33d49298bd5c94ed245b/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/abc19d78d94158d057220187860ce7781187c9a74667e34689b46637f86684d7/","label":"ThreatFox","domainType":"primary"},{"url":"https://honeylabs.net/lookup/105.186.85.167","label":"ThreatFox","domainType":"other"},{"url":"https://honeylabs.net/lookup/100.165.7.37","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/karmazarbaza.com","label":"ThreatFox","domainType":"other"},{"url":"https://www.clickfixed.uk/intel/19957","label":"ThreatFox","domainType":"other"},{"url":"https://www.clickfixed.uk/intel/19959","label":"ThreatFox","domainType":"other"},{"url":"https://www.clickfixed.uk/intel/19961","label":"ThreatFox","domainType":"other"},{"url":"https://www.clickfixed.uk/intel/19962","label":"ThreatFox","domainType":"other"},{"url":"https://www.clickfixed.uk/intel/19964","label":"ThreatFox","domainType":"other"},{"url":"https://bazaar.abuse.ch/sample/2baaf219716c21543de54c9e51802b4e9970ea8bf43bbb01537abe15f4dd7e7d/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/84025cfdc41458df372f199ce64cced15e9925a5b70cfeef77e64bd2df8df07d/","label":"ThreatFox","domainType":"primary"},{"url":"https://clickfix.carsonww.com/domains/ecodation.com","label":"ThreatFox","domainType":"other"},{"url":"https://bazaar.abuse.ch/sample/a37845bf7a3b2d27154fdf24dfa147b1f4e97e6a710123cdb5f1f88bd3299074/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/c66116cfe82dc563239bfbd7ac4f91e1e9af966f7729212a3c9f32d197bf0985/","label":"ThreatFox","domainType":"primary"},{"url":"https://honeylabs.net/lookup/39.34.188.177","label":"ThreatFox","domainType":"other"},{"url":"https://honeylabs.net/lookup/39.34.143.221","label":"ThreatFox","domainType":"other"},{"url":"https://honeylabs.net/lookup/103.203.88.64","label":"ThreatFox","domainType":"other"},{"url":"https://bazaar.abuse.ch/sample/4777c49910b352e3c0eedd6ae9e5a74e1c68fe80e09e42fdb0622a1f74835e79/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/76b419ca169209c43d52d1e3e9c6c34801e9afac9af5c3066713bc8b048a7487/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/2f1236fc3d15bbb9d43554a058e1bf6d63a2ee3e05ac4ff5277d824bd881dfbf/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/1327c0684c8341d3d17b035c63315df93d6315b97b9484f1075b9bf251485e15/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/d0a798b5e7ef375f640e4f4f2329a8e40c6ea4d9f65ce63d513fc1b00ad1da71/","label":"ThreatFox","domainType":"primary"},{"url":"https://polygonscan.com/address/0xA3a603F8a454a9c905b4c579Bb72628F7C15C2A0","label":"ThreatFox","domainType":"other"},{"url":"https://bazaar.abuse.ch/sample/e0e218a1ce45c5a7c2e777f52d466334671c583469c6d489a94275c5a3341ab2/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/c50aaeeb818ba3fd2ff56ff05702286ee3700461f84d2b499a0de2a4c99f5cdc/","label":"ThreatFox","domainType":"primary"}],"feedLabel":null},{"id":"news-drupal-warns-of-fast-exploitation-risk-for-critical-core-rce-flaw","source":"general-news","category":"news","severity":"critical","title":"Drupal Warns of Fast Exploitation Risk for Critical Core RCE Flaw","description":"Critical flaws impact the Entity List and Field UI modules, and exploit paths exist with contributed modules.\nThe post Drupal Warns of Fast Exploitation Risk for Critical Core RCE Flaw appeared first on SecurityWeek.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T15:47:50.000Z","fetchedAt":"2026-10-20T03:00:04.645Z","references":[{"url":"https://www.securityweek.com/drupal-warns-of-fast-exploitation-risk-for-critical-core-rce-flaw/","label":"SecurityWeek","domainType":"media"}],"feedLabel":null},{"id":"nvd-CVE-2026-112149","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-112149 — A vulnerability was identified in vraj404 Criminal-Management-System up to 2808d057e7ddc5295519a4873…","description":"A vulnerability was identified in vraj404 Criminal-Management-System up to 2808d057e7ddc5295519a487365b0cacfd0ba8c4. This impacts the function move_uploaded_file of the file home.php. The manipulation of the argument my_img leads to unrestricted upload. Remote exploitation of the attack is possible.…","indicators":{"cves":["CVE-2026-112149"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T15:17:03.943Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://github.com/vraj404/Criminal-Management-System/","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/vraj404/Criminal-Management-System/issues/1","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-112149","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/1014014","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/422256","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/422256/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112150","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-112150 — A security flaw has been discovered in vraj404 Criminal-Management-System up to 2808d057e7ddc5295519…","description":"A security flaw has been discovered in vraj404 Criminal-Management-System up to 2808d057e7ddc5295519a487365b0cacfd0ba8c4. Affected is an unknown function of the file search.php. The manipulation of the argument Search results in sql injection. The attack can be executed remotely. The exploit has bee…","indicators":{"cves":["CVE-2026-112150"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T15:17:05.033Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://github.com/vraj404/Criminal-Management-System/","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/vraj404/Criminal-Management-System/issues/2","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-112150","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/1014016","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/422257","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/422257/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112151","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-112151 — A weakness has been identified in vraj404 Criminal Management System up to 2808d057e7ddc5295519a4873…","description":"A weakness has been identified in vraj404 Criminal Management System up to 2808d057e7ddc5295519a487365b0cacfd0ba8c4. Affected by this vulnerability is an unknown functionality of the file home.php of the component Submission Form. This manipulation of the argument id/name/offName/crime/dob/arrDate/c…","indicators":{"cves":["CVE-2026-112151"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T15:17:05.207Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://github.com/vraj404/Criminal-Management-System/issues/3","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-112151","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/1014017","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/422258","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/422258/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-107567","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-107567 — Use of a less trusted source in the DKIM signing of Progressive Robot hMailServer 6.0.0 through 6.3.…","description":"Use of a less trusted source in the DKIM signing of Progressive Robot hMailServer 6.0.0 through 6.3.6 allows a remote unauthenticated attacker to have mail they write signed with the DKIM key of a domain the server hosts, so that it passes DKIM and DMARC for that domain at other receivers. With DKIM…","indicators":{"cves":["CVE-2026-107567"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T16:17:01.587Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://gitlab.com/hmailserver/hmailserver/-/releases/v6.3.7","label":"cve@gitlab.com","domainType":"other"},{"url":"https://gitlab.com/hmailserver/hmailserver/-/work_items/84","label":"cve@gitlab.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-107569","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-107569 — Unchecked input for a loop condition in Progressive Robot hMailServer 6.0.0 through 6.3.6 allows a r…","description":"Unchecked input for a loop condition in Progressive Robot hMailServer 6.0.0 through 6.3.6 allows a remote unauthenticated attacker to stop the server carrying mail. The server bounds the mail it generates in response to a message - a rule forward, reply or copy, an account forward, a Sieve redirect,…","indicators":{"cves":["CVE-2026-107569"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T16:17:01.830Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://gitlab.com/hmailserver/hmailserver/-/releases/v6.3.7","label":"cve@gitlab.com","domainType":"other"},{"url":"https://gitlab.com/hmailserver/hmailserver/-/work_items/81","label":"cve@gitlab.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-107571","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-107571 — Incorrect default permissions in the Windows installer of Progressive Robot hMailServer 6.0.0 throug…","description":"Incorrect default permissions in the Windows installer of Progressive Robot hMailServer 6.0.0 through 6.3.6 allow a local authenticated user to run code as the mail server's high-privileged accounts when the product is installed in a folder whose permissions are inherited from a writable parent, suc…","indicators":{"cves":["CVE-2026-107571"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T16:17:01.970Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://gitlab.com/hmailserver/hmailserver/-/releases/v6.3.7","label":"cve@gitlab.com","domainType":"other"},{"url":"https://gitlab.com/hmailserver/hmailserver/-/work_items/78","label":"cve@gitlab.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109431","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-109431 — Camunda 7.24.0 before 7.24.14 and 7.23.0 before 7.23.17 contains a missing authorization check vulne…","description":"Camunda 7.24.0 before 7.24.14 and 7.23.0 before 7.23.17 contains a missing authorization check vulnerability in engine-rest task sub-resources that allows authenticated attackers with no permission grants to access task comments and attachments by calling singular read and delete endpoints that lack…","indicators":{"cves":["CVE-2026-109431"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T16:17:02.337Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://codeant.ai/security-research/camunda-task-attachment-authorization-cve-2026-109431","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://docs.camunda.org/enterprise/download/","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/camunda-missing-authorization-in-task-sub-resources","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111045","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-111045 — CLI Bridge provides filesystem access within a workspace root. Prior to 0.0.2, a dangling symlink po…","description":"CLI Bridge provides filesystem access within a workspace root. Prior to 0.0.2, a dangling symlink pointing outside the workspace root bypasses resolveSafePath when fs.realpathSync throws ENOENT for a nonexistent target. The fallback resolves only the parent directory and returns the symlink path as…","indicators":{"cves":["CVE-2026-111045"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T16:17:03.183Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://github.com/anshupriyan/cli-bridge/commit/284a84c5ac4db8dd0e1bc9db81bd15bdc83fcb38","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/anshupriyan/cli-bridge/pull/3","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/anshupriyan/cli-bridge/releases/tag/v0.0.2","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/anshupriyan/cli-bridge/security/advisories/GHSA-8jc4-x8v7-2q9r","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-112152","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-112152 — A security vulnerability has been detected in vraj404 Criminal-Management-System up to 2808d057e7ddc…","description":"A security vulnerability has been detected in vraj404 Criminal-Management-System up to 2808d057e7ddc5295519a487365b0cacfd0ba8c4. Affected by this issue is the function mysqli_query of the file Officers/searchOff.php of the component Search Page. Such manipulation of the argument Search leads to sql…","indicators":{"cves":["CVE-2026-112152"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T16:17:05.403Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://github.com/vraj404/Criminal-Management-System/","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/vraj404/Criminal-Management-System/issues/4","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-112152","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/1014022","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/422259","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/422259/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112153","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-112153 — A vulnerability was detected in vraj404 Criminal-Management-System up to 2808d057e7ddc5295519a487365…","description":"A vulnerability was detected in vraj404 Criminal-Management-System up to 2808d057e7ddc5295519a487365b0cacfd0ba8c4. This affects the function mysqli_error of the file Officers/addOfficer.php of the component Officer Registration Form. Performing a manipulation of the argument offName/offID/ID/contact…","indicators":{"cves":["CVE-2026-112153"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T16:17:05.567Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://github.com/vraj404/Criminal-Management-System/","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/vraj404/Criminal-Management-System/issues/5","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-112153","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/1014023","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/422260","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/422260/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112304","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-112304 — docTR through 1.1.0 contains an unsafe deserialization vulnerability in load_pretrained_params() tha…","description":"docTR through 1.1.0 contains an unsafe deserialization vulnerability in load_pretrained_params() that loads checkpoints with torch.load without weights_only=True. Attackers who control a local or URL-supplied checkpoint can embed a malicious pickle payload to execute Python code with the loading pro…","indicators":{"cves":["CVE-2026-112304"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T16:17:06.257Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://github.com/mindee/doctr/blob/v1.1.0/doctr/models/utils/pytorch.py","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/mindee/doctr/commit/687503dd15592483c4699ee51280b41938579a9e","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/mindee/doctr/issues/2175","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/doctr-through-1.1.0-unsafe-deserialization-rce-via-load-pretrained-params","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112305","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-112305 — Semaphore UI through 2.19.16 contains a remote code execution vulnerability that allows users with t…","description":"Semaphore UI through 2.19.16 contains a remote code execution vulnerability that allows users with the task_runner role to override protected Ansible variables by supplying arbitrary keys in the task environment JSON. Attackers can POST tasks setting ansible_ssh_common_args with a ProxyCommand or an…","indicators":{"cves":["CVE-2026-112305"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T16:17:06.400Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://github.com/semaphoreui/semaphore","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/semaphoreui/semaphore/blob/v2.19.16/api/projects/tasks.go#L39-L75","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/semaphoreui/semaphore/blob/v2.19.16/services/tasks/TaskRunner.go#L395-L431","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/semaphoreui/semaphore/pull/3888","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/semaphore-ui-through-2.19.16-rce-via-task-environment-ansible-variable-override","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112306","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-112306 — NocoBase @nocobase/plugin-collection-sql through 2.2.28 contains an SQL injection vulnerability that…","description":"NocoBase @nocobase/plugin-collection-sql through 2.2.28 contains an SQL injection vulnerability that allows privileged users to store unvalidated SQL by bypassing checkSQL() through the sqlCollection:setFields action. Attackers holding the collection-sql snippet can replace a benign collection query…","indicators":{"cves":["CVE-2026-112306"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T16:17:06.570Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://github.com/nocobase/nocobase","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/nocobase/nocobase/blob/v2.2.28/packages/plugins/@nocobase/plugin-collection-sql/src/server/resources/sql.ts#L14-L104","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/nocobase/nocobase/issues/10629","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/nocobase-plugin-collection-sql-through-2.2.28-sql-injection-via-sqlcollection-setfields","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112307","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-112307 — sqlparse through 0.6.0 contains a PHP code injection vulnerability that allows attackers to inject P…","description":"sqlparse through 0.6.0 contains a PHP code injection vulnerability that allows attackers to inject PHP expressions by supplying SQL text containing unescaped dollar signs. Attackers can embed ${expr} or {${expr}} sequences that OutputPHPFilter places in double-quoted strings, executing arbitrary PHP…","indicators":{"cves":["CVE-2026-112307"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T16:17:06.727Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://github.com/andialbrecht/sqlparse/blob/0.6.0/sqlparse/filters/output.py","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/andialbrecht/sqlparse/pull/930","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/sqlparse-through-0.6.0-php-code-injection-via-output-format-php","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112308","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-112308 — crewai-tools through 1.15.28 contains a server-side request forgery vulnerability in SeleniumScrapin…","description":"crewai-tools through 1.15.28 contains a server-side request forgery vulnerability in SeleniumScrapingTool that allows attackers to fetch internal resources because it never applies the validate_url private-address check. Attackers influencing agent tool input through prompt injection can direct head…","indicators":{"cves":["CVE-2026-112308"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T16:17:06.887Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://github.com/crewAIInc/crewAI/blob/1.15.28/lib/crewai-tools/src/crewai_tools/tools/selenium_scraping_tool/selenium_scraping_tool.py","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/crewAIInc/crewAI/pull/6870","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/crewai-tools-through-1.15.28-ssrf-via-seleniumscrapingtool","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112309","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-112309 — @rvf/set-get before 7.0.4 contains a prototype pollution vulnerability in setPath that allows unauth…","description":"@rvf/set-get before 7.0.4 contains a prototype pollution vulnerability in setPath that allows unauthenticated attackers to overwrite properties of shared built-in functions via inherited Object.prototype methods. Attackers can submit a form field named hasOwnProperty.call through @rvf/core form pars…","indicators":{"cves":["CVE-2026-112309"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T16:17:07.050Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://github.com/airjp73/rvf/blob/61172ff01bf1250893108e5c80f35b5ac0388ecb/packages/core/src/native-form-data/flatten.ts","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/airjp73/rvf/blob/61172ff01bf1250893108e5c80f35b5ac0388ecb/packages/set-get/src/setPath.ts","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/airjp73/rvf/commit/4a5e118667549ac41f065b4cfa80b995841c3811","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/rvf-set-get-before-7.0.4-prototype-pollution-via-setpath-inherited-methods","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112366","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-112366 — Picomatch through 4.0.7 contains a regular expression denial of service vulnerability that allows at…","description":"Picomatch through 4.0.7 contains a regular expression denial of service vulnerability that allows attackers to block the event loop by supplying single-branch repeated extglob patterns. Attackers can provide globs like +(*) or +(*a), which analyzeRepeatedExtglob in lib/parse.js skips, causing expone…","indicators":{"cves":["CVE-2026-112366"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T16:17:07.500Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://github.com/micromatch/picomatch/blob/4.0.7/lib/parse.js#L287-L307","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/micromatch/picomatch/pull/194","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/picomatch-through-4.0.7-redos-via-single-branch-repeated-extglob-patterns","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112368","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-112368 — An uncontrolled recursion weakness in the BSON decoding logic of the MongoDB PHP driver may allow an…","description":"An uncontrolled recursion weakness in the BSON decoding logic of the MongoDB PHP driver may allow an unauthenticated party who can supply crafted binary document data to the decoder to exhaust the process stack. This may cause the PHP process using the driver to terminate unexpectedly, resulting in…","indicators":{"cves":["CVE-2026-112368"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T16:17:07.650Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://jira.mongodb.org/browse/PHPC-276","label":"cna@mongodb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2025-10149","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2025-10149 — The SCIM endpoint does not sufficiently validate authorization for federated users when performing o…","description":"The SCIM endpoint does not sufficiently validate authorization for federated users when performing operations against the local user store. This occurs when a local and a federated user share the same username, allowing a federated user to perform actions intended for a local user, including arbitra…","indicators":{"cves":["CVE-2025-10149"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T17:16:59.007Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://security.docs.wso2.com/en/latest/security-announcements/security-advisories/2026/WSO2-2025-4438/","label":"ed10eef1-636d-4fbe-9993-6890dfa878f8","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-107186","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-107186 — An unauthenticated user can send a DWR request with isPasswordUppercase as one call method and the n…","description":"An unauthenticated user can send a DWR request with isPasswordUppercase as one call method and the next call method can be set to a run workflow rule. This allows for workflow rules to be run without authentication.","indicators":{"cves":["CVE-2026-107186"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T17:17:00.827Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://www.rapid7.com/blog/post/ve-authentication-bypass-remote-code-execution-and-database-read-in-eptura-archibus-fixed/","label":"cve@rapid7.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-107187","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-107187 — A user can access any database details, such as usernames and passwords by sending a DWR request wit…","description":"A user can access any database details, such as usernames and passwords by sending a DWR request with a specified workflow rule. The authentication bypass vulnerability can be chained with this vulnerability to perform database reads without authentication. Database write and delete operations may a…","indicators":{"cves":["CVE-2026-107187"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T17:17:00.967Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://www.rapid7.com/blog/post/ve-authentication-bypass-remote-code-execution-and-database-read-in-eptura-archibus-fixed/","label":"cve@rapid7.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-10572","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-10572 — IBM MQ could allow an authenticated attacker to cause a denial of service or potentially execute arb…","description":"IBM MQ could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code due to a heap buffer overflow when processing MQPUT operations with malformed message options.","indicators":{"cves":["CVE-2026-10572","CVE-2026-10574"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T17:17:01.440Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://www.ibm.com/support/pages/node/7292667","label":"psirt@us.ibm.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-10743","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-10743 — IBM MQ could allow an authenticated attacker to cause a denial of service or corrupt memory due to i…","description":"IBM MQ could allow an authenticated attacker to cause a denial of service or corrupt memory due to improper validation of buffer sizes in MQOPEN operations.","indicators":{"cves":["CVE-2026-10743"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T17:17:02.107Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://www.ibm.com/support/pages/node/7292667","label":"psirt@us.ibm.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-12148","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-12148 — IBM MQ Operator could allow an authenticated attacker to cause a denial of service or potentially ex…","description":"IBM MQ Operator could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code due to unrestricted Java deserialization in the MQ Classes for Java.","indicators":{"cves":["CVE-2026-12148"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T17:17:17.120Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://www.ibm.com/support/pages/node/7292667","label":"psirt@us.ibm.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-12665","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-12665 — IBM MQ could allow a remote attacker to execute arbitrary code due to a stack buffer overflow when p…","description":"IBM MQ could allow a remote attacker to execute arbitrary code due to a stack buffer overflow when processing TLS certificates with malformed distinguished names during channel connection establishment.","indicators":{"cves":["CVE-2026-12665"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T17:17:18.773Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://www.ibm.com/support/pages/node/7292667","label":"psirt@us.ibm.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-6930","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-6930 — IBM Concert 1.0 through 3.0.0 uses weaker than expected cryptographic algorithms that could allow an…","description":"IBM Concert 1.0 through 3.0.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.","indicators":{"cves":["CVE-2026-6930","CVE-2026-6719"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T17:17:21.757Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://www.ibm.com/support/pages/node/7292374","label":"psirt@us.ibm.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2025-52290","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2025-52290 — A NULL pointer dereference in the avpriv_h264_has_num_reorder_frames function of Ffmpeg version N-11…","description":"A NULL pointer dereference in the avpriv_h264_has_num_reorder_frames function of Ffmpeg version N-119856-gbe46370941 allows attackers to cause a Denial of Service (DoS) via processing a crafted media file.","indicators":{"cves":["CVE-2025-52290"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T18:16:58.040Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://ffmpeg.org","label":"cve@mitre.org","domainType":"other"},{"url":"https://infosec.exchange/@sigdevel/116733488628458667","label":"cve@mitre.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111759","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-111759 — markdown-it is a Markdown parser. Prior to 14.3.2 and 15.0.2, when typographer: true is enabled, spe…","description":"markdown-it is a Markdown parser. Prior to 14.3.2 and 15.0.2, when typographer: true is enabled, specially crafted Markdown can cause quadratic processing time in the smartquotes rule, potentially leading to denial of service in applications processing untrusted input. Many opening double quotes fol…","indicators":{"cves":["CVE-2026-111759"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T18:17:00.570Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://github.com/markdown-it/markdown-it/commit/1b379c1b6d0522421bd1a51b77337c79af2c8670","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/markdown-it/markdown-it/commit/cf27366035edf9196667110c47d9d67b030a4152","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/markdown-it/markdown-it/commit/daf5a3c32303e5d9de01b12eeb725fb5990b8162","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/markdown-it/markdown-it/releases/tag/14.3.2","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/markdown-it/markdown-it/releases/tag/15.0.2","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/markdown-it/markdown-it/security/advisories/GHSA-r7fv-28h4-cvq7","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/markdown-it/markdown-it/security/advisories/GHSA-r7fv-28h4-cvq7","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-112377","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-112377 — CCC Attestation SIG attested-tls-poc through commit 731ca82 fails to bind early attestation Evidence…","description":"CCC Attestation SIG attested-tls-poc through commit 731ca82 fails to bind early attestation Evidence to the TLS connection, allowing attackers to relay valid Evidence from a genuine attester. Attackers holding an extracted attested TLS private key can forward the relying party's nonce to a genuine a…","indicators":{"cves":["CVE-2026-112377"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["ransomware"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T18:17:05.490Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://datatracker.ietf.org/doc/draft-intra-handshake-fail/","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://github.com/CCC-Attestation/attested-tls-poc","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/CCC-Attestation/attested-tls-poc/pull/58","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/CCC-Attestation/attested-tls-poc/tree/5b6c5374b3fe8b671906c8ab32f6134d9c3da26d/relay-attacks-formal","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/ionut-arm/mbedtls/blob/f4ac7593826a506fc509c83cad73786acab1d442/library/ssl_tls13_generic.c#L430-L436","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/muhammad-usama-sardar/intra-handshake.fail","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/ccc-attestation-sig-attested-tls-poc-through-commit-731ca82-attestation-relay-attack","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-3295","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-3295 — IBM Cloud Pak System 2.3.6.0, and 2.3.6.1 is vulnerable to cross site scripting. The web app user‑su…","description":"IBM Cloud Pak System 2.3.6.0, and 2.3.6.1 is vulnerable to cross site scripting. The web app user‑supplied input is not properly sanitized or HTML‑encoded before being stored and rendered. An authenticated attacker could exploit this vulnerability by entering specially crafted payloads containing ma…","indicators":{"cves":["CVE-2026-3295"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T18:17:07.263Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://www.ibm.com/support/pages/node/7290183","label":"psirt@us.ibm.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112252","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-112252 — A vulnerability has been found in Wuxi Wubang Security Software Wubang Five-in-One Safety Production…","description":"A vulnerability has been found in Wuxi Wubang Security Software Wubang Five-in-One Safety Production Management Information System up to 3.5. Affected is the function xp_cmdshell of the file /ws.asmx. The manipulation of the argument sql leads to sql injection. The attack may be initiated remotely.…","indicators":{"cves":["CVE-2026-112252"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T19:17:27.157Z","fetchedAt":"2026-10-20T03:01:48.466Z","references":[{"url":"https://github.com/Rookie506/CVE/issues/2","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-112252","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/986410","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/422334","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/422334/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112260","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-112260 — A flaw was found in GIMP. Opening a crafted XCF with a malformed text-layer parasite can cause a hea…","description":"A flaw was found in GIMP. Opening a crafted XCF with a malformed text-layer parasite can cause a heap out-of-bounds read, disclosing adjacent heap data into layer text and causing denial of service.","indicators":{"cves":["CVE-2026-112260"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T20:17:52.970Z","fetchedAt":"2026-10-20T03:01:48.466Z","references":[{"url":"https://access.redhat.com/security/cve/CVE-2026-112260","label":"secalert@redhat.com","domainType":"other"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2555730","label":"secalert@redhat.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112770","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-112770 — Craft CMS 4.x before 4.18.8 and 5.x before 5.11.0 contains a remote code execution vulnerability in…","description":"Craft CMS 4.x before 4.18.8 and 5.x before 5.11.0 contains a remote code execution vulnerability in the Twig group filter, which invokes non-string arrow arguments as callables without the checkArrow guard used by other arrow-accepting filters. Authenticated control panel users can pass an array-cal…","indicators":{"cves":["CVE-2026-112770"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T20:17:54.060Z","fetchedAt":"2026-10-20T03:01:48.466Z","references":[{"url":"https://github.com/craftcms/cms/security/advisories/GHSA-xmwr-88vw-5ghh","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/craft-cms-before-4.18.8-and-5.11.0-authenticated-rce-via-twig-group-filter-array-callable","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112772","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-112772 — Craft CMS from 5.0.0 before 5.11.0 contains a remote code execution vulnerability that allows authen…","description":"Craft CMS from 5.0.0 before 5.11.0 contains a remote code execution vulnerability that allows authenticated Control Panel users to escape the Twig sandbox via Asset::getMimeType transforms. Attackers can supply 'as' or 'on' keys passed unfiltered to Craft::createObject, attaching malicious behaviors…","indicators":{"cves":["CVE-2026-112772","CVE-2026-112773"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T20:17:54.340Z","fetchedAt":"2026-10-20T03:01:48.466Z","references":[{"url":"https://github.com/craftcms/cms/security/advisories/GHSA-qm9x-rmcj-h2rc","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/craft-cms-5.0.0-before-5.11.0-rce-via-asset-getmimetype-transform-injection","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://github.com/craftcms/cms/security/advisories/GHSA-wr79-9v6x-5rfq","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/craft-cms-5.0.0-before-5.11.0-rce-via-twig-sandbox-behavior-injection","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112774","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-112774 — Craft CMS from 5.8.0 before 5.11.0 contains a remote code execution vulnerability that allows authen…","description":"Craft CMS from 5.8.0 before 5.11.0 contains a remote code execution vulnerability that allows authenticated administrators to inject Yii behaviors by supplying a JSON-string field layout to ContentBlock::setFieldLayout(). Attackers with allowAdminChanges enabled can include 'as X' or 'on X' keys tha…","indicators":{"cves":["CVE-2026-112774"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T20:17:54.620Z","fetchedAt":"2026-10-20T03:01:48.466Z","references":[{"url":"https://github.com/craftcms/cms/security/advisories/GHSA-j6r9-fxgv-j7x5","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/craft-cms-5.8.0-before-5.11.0-admin-rce-via-contentblock-field-layout","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112775","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-112775 — Craft CMS from 5.0.0 before 5.11.0 contains an authentication bypass vulnerability that allows attac…","description":"Craft CMS from 5.0.0 before 5.11.0 contains an authentication bypass vulnerability that allows attackers to reuse verification codes because users/verify-email does not invalidate them for active users. Attackers who obtain a victim's emailed code can submit it to users/set-password after the victim…","indicators":{"cves":["CVE-2026-112775"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T20:17:54.757Z","fetchedAt":"2026-10-20T03:01:48.466Z","references":[{"url":"https://github.com/craftcms/cms/security/advisories/GHSA-xh42-494x-2xgv","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/craft-cms-5.0.0-before-5.11.0-verification-code-reuse-via-users-set-password","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112777","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-112777 — Craft CMS 4.x before 4.18.8 and 5.x before 5.11.0 contains a blocklist bypass in the Twig create() f…","description":"Craft CMS 4.x before 4.18.8 and 5.x before 5.11.0 contains a blocklist bypass in the Twig create() function because its class-name checks are case-sensitive while PHP class resolution is not. Attackers with template-execution rights, such as Control Panel administrators, can instantiate SplFileObjec…","indicators":{"cves":["CVE-2026-112777"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T20:17:55.043Z","fetchedAt":"2026-10-20T03:01:48.466Z","references":[{"url":"https://github.com/craftcms/cms/security/advisories/GHSA-w643-x88w-6wcm","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/craft-cms-before-4.18.8-and-5.11.0-twig-create-blocklist-bypass-leading-to-rce","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112780","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-112780 — Grav from 2.0.15 before 2.2.2 contains an allowlist bypass vulnerability that allows page editors to…","description":"Grav from 2.0.15 before 2.2.2 contains an allowlist bypass vulnerability that allows page editors to call arbitrary public static methods by renaming Flex form fields with replace-name@. Attackers with page-edit permission can smuggle data-*@ directives past the callable check to invoke Folder::dele…","indicators":{"cves":["CVE-2026-112780"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T20:17:55.473Z","fetchedAt":"2026-10-20T03:01:48.466Z","references":[{"url":"https://github.com/getgrav/grav/security/advisories/GHSA-9rq7-4cch-f22j","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/grav-2.0.15-before-2.2.2-arbitrary-static-method-call-via-flex-form-replace-name","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112782","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-112782 — Grav 1.7.53 before 1.7.53.5 and 2.0.0-rc.8 before 2.2.2 contains a resource exhaustion vulnerability…","description":"Grav 1.7.53 before 1.7.53.5 and 2.0.0-rc.8 before 2.2.2 contains a resource exhaustion vulnerability that allows anonymous visitors to bypass the system.images.max_pixels limit when system.images.url_actions is enabled. Attackers can send single-dimension or percentage forceResize, zoomCrop, or chai…","indicators":{"cves":["CVE-2026-112782"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T20:17:55.787Z","fetchedAt":"2026-10-20T03:01:48.466Z","references":[{"url":"https://github.com/getgrav/grav/security/advisories/GHSA-8gr9-59p6-r488","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/grav-before-1.7.53.5-and-2.2.2-image-pixel-limit-bypass-denial-of-service","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-71169","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-71169 — Dell Application Store, versions prior to 26.05.0.7, contain an Incorrect Permission Assignment for…","description":"Dell Application Store, versions prior to 26.05.0.7, contain an Incorrect Permission Assignment for Critical Resource vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Disclosure of sensitive information","indicators":{"cves":["CVE-2026-71169"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T20:20:03.053Z","fetchedAt":"2026-10-20T03:01:48.466Z","references":[{"url":"https://www.dell.com/support/kbdoc/en-us/000506927/dsa-2026-411-security-update-for-dell-application-store-for-multiple-vulnerabilities","label":"security_alert@emc.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-71170","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-71170 — Dell Application Store, versions prior to 26.05.0.7, contains an Uncontrolled Path Element vulnerabi…","description":"Dell Application Store, versions prior to 26.05.0.7, contains an Uncontrolled Path Element vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to an Elevation of Privilege and arbitrary code execution.","indicators":{"cves":["CVE-2026-71170"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T20:20:03.693Z","fetchedAt":"2026-10-20T03:01:48.466Z","references":[{"url":"https://www.dell.com/support/kbdoc/en-us/000506927/dsa-2026-411-security-update-for-dell-application-store-for-multiple-vulnerabilities","label":"security_alert@emc.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-82166","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-82166 — Dell Application Store, versions prior to 26.05.0.7, contain a Missing Authentication for Critical F…","description":"Dell Application Store, versions prior to 26.05.0.7, contain a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to arbitrary code execution.","indicators":{"cves":["CVE-2026-82166"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T20:20:06.313Z","fetchedAt":"2026-10-20T03:01:48.466Z","references":[{"url":"https://www.dell.com/support/kbdoc/en-us/000506927/dsa-2026-411-security-update-for-dell-application-store-for-multiple-vulnerabilities","label":"security_alert@emc.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112301","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-112301 — A security flaw has been discovered in orbitale imagemagick-php up to 3.3.5. Affected by this issue…","description":"A security flaw has been discovered in orbitale imagemagick-php up to 3.3.5. Affected by this issue is the function Command::font of the file src/Command.php. The manipulation of the argument fontFile results in os command injection. The attack can be executed remotely. The exploit has been released…","indicators":{"cves":["CVE-2026-112301"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T21:17:06.863Z","fetchedAt":"2026-10-20T03:01:48.466Z","references":[{"url":"https://gist.github.com/0xSebin/834b7ab2e72d68be51d204193f427a20","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-112301","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/987724","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/422347","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/422347/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-76788","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-76788 — The OSDP Control Panel reply parser cp_decode_response() in subsys/mgmt/osdp/src/osdp_cp.c decodes r…","description":"The OSDP Control Panel reply parser cp_decode_response() in subsys/mgmt/osdp/src/osdp_cp.c decodes replies from a Peripheral Device into a stack-allocated struct osdp_event. For the REPLY_KEYPPAD and REPLY_RAW reply types, the payload length is taken from the received frame and the only validation p…","indicators":{"cves":["CVE-2026-76788"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T21:18:01.380Z","fetchedAt":"2026-10-20T03:01:48.466Z","references":[{"url":"https://github.com/zephyrproject-rtos/zephyr/commit/f10d55f47c6970e95d3a7c6ba08e6adec3c79acd","label":"vulnerabilities@zephyrproject.org","domainType":"primary"},{"url":"https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-fgg7-h8p9-9q3w","label":"vulnerabilities@zephyrproject.org","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-105814","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-105814 — TP-Link Tapo C210 V3.60 contains an authentication bypass vulnerability in the DS JSON API. A crafte…","description":"TP-Link Tapo\nC210 V3.60 contains an authentication bypass vulnerability in the DS JSON API.\nA crafted JSON request containing both a protected operation and public\nonboarding-related fields may cause module-level authorization checks to be\napplied inconsistently, allowing protected camera operations…","indicators":{"cves":["CVE-2026-105814"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["botnet"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T22:17:03.027Z","fetchedAt":"2026-10-20T03:01:48.466Z","references":[{"url":"https://www.tp-link.com/us/support/download/tapo-c210/#Firmware-Release-Notes","label":"f23511db-6c3e-4e32-a477-6aa17d310630","domainType":"other"},{"url":"https://www.tp-link.com/us/support/faq/5352/","label":"f23511db-6c3e-4e32-a477-6aa17d310630","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-105815","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-105815 — TP-Link Tapo C210 V3.60 may expose shared credential material and cryptographic metadata through una…","description":"TP-Link Tapo\nC210 V3.60 may expose shared credential material and cryptographic metadata\nthrough unauthenticated DS JSON API requests. The exposed shared credential can\nbe accepted by the Streamd Digest authentication mechanism as an administrative\npassword, allowing an unauthenticated adjacent-netw…","indicators":{"cves":["CVE-2026-105815"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["botnet"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T22:17:03.153Z","fetchedAt":"2026-10-20T03:01:48.466Z","references":[{"url":"https://www.tp-link.com/us/support/download/tapo-c210/#Firmware-Release-Notes","label":"f23511db-6c3e-4e32-a477-6aa17d310630","domainType":"other"},{"url":"https://www.tp-link.com/us/support/faq/5352/","label":"f23511db-6c3e-4e32-a477-6aa17d310630","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112257","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-112257 — A flaw was found in GIMP. The PSD thumbnail resource loader performs a BGR-to-RGB channel swap with…","description":"A flaw was found in GIMP. The PSD thumbnail resource loader performs a BGR-to-RGB channel swap with a fixed 3-byte stride and does not verify that the JPEG thumbnail is RGB. A crafted grayscale PSD thumbnail can cause a heap out-of-bounds read and write in the plug-in process, leading to a crash and…","indicators":{"cves":["CVE-2026-112257"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T22:17:05.420Z","fetchedAt":"2026-10-20T03:01:48.466Z","references":[{"url":"https://access.redhat.com/security/cve/CVE-2026-112257","label":"secalert@redhat.com","domainType":"other"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2555574","label":"secalert@redhat.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112258","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-112258 — A flaw was found in GIMP. The XCF loader can leave a dangling pointer in the linked-channels list wh…","description":"A flaw was found in GIMP. The XCF loader can leave a dangling pointer in the linked-channels list when a linked channel is later destroyed via a selection property. Opening a crafted XCF file can cause a use-after-free in the main GIMP process, leading to a crash and potentially arbitrary code execu…","indicators":{"cves":["CVE-2026-112258"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T22:17:05.543Z","fetchedAt":"2026-10-20T03:01:48.466Z","references":[{"url":"https://access.redhat.com/security/cve/CVE-2026-112258","label":"secalert@redhat.com","domainType":"other"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2555588","label":"secalert@redhat.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112261","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-112261 — A flaw was found in GIMP. Opening a crafted XCF that selects a path and then fails to load that path…","description":"A flaw was found in GIMP. Opening a crafted XCF that selects a path and then fails to load that path can cause a use-after-free in the main process, leading to a crash and potentially arbitrary code execution.","indicators":{"cves":["CVE-2026-112261"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T22:17:05.767Z","fetchedAt":"2026-10-20T03:01:48.466Z","references":[{"url":"https://access.redhat.com/security/cve/CVE-2026-112261","label":"secalert@redhat.com","domainType":"other"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2555748","label":"secalert@redhat.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112360","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-112360 — A security vulnerability has been detected in Netis EAP930 1.250905.115454. This issue affects the f…","description":"A security vulnerability has been detected in Netis EAP930 1.250905.115454. This issue affects the function return200 of the file /cgi-bin/debug of the component CGI Endpoint. The manipulation of the argument SIGNATURE leads to backdoor. The attack may be initiated remotely. A high degree of complex…","indicators":{"cves":["CVE-2026-112360"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T22:17:06.217Z","fetchedAt":"2026-10-20T03:01:48.466Z","references":[{"url":"https://vuldb.com/cve/CVE-2026-112360","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/990050","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/422394","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/422394/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-53995","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-53995 — MLflow 3.17.1 and earlier contains a path traversal vulnerability in the FileStore tracking backend…","description":"MLflow 3.17.1 and earlier contains a path traversal vulnerability in the FileStore tracking backend that allows unauthenticated attackers to control filesystem paths by submitting a crafted trace ID containing traversal sequences to the POST /api/3.0/mlflow/traces endpoint. Attackers can exploit Fil…","indicators":{"cves":["CVE-2026-53995"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T22:17:11.013Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://github.com/SaiTeja-Erukude/CVE-2026-53995-mlflow-path-traversal","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/mlflow/mlflow/pull/26842","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/mlflow-path-traversal-via-trace-id-api","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-105453","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-105453 — IBM Sterling Connect Direct for Unix 6.3.0.0 through 6.3.0.7 and 6.4.0.0 through 6.4.0.6 could allow…","description":"IBM Sterling Connect Direct for Unix 6.3.0.0 through 6.3.0.7 and 6.4.0.0 through 6.4.0.6 could allow a local attacker to gain elevated privileges due to improper privilege management.","indicators":{"cves":["CVE-2026-105453"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-20T00:17:23.400Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://www.ibm.com/support/pages/node/7292735","label":"psirt@us.ibm.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-107366","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-107366 — IBM Langflow OSS 1.0.0 through 1.12.4 contains three message endpoints that perform no ownership ver…","description":"IBM Langflow OSS 1.0.0 through 1.12.4 contains three message endpoints that perform no ownership verification. Any authenticated user can bulk-delete another user's messages, overwrite message content to inject malicious prompts, or hijack an entire conversation session by reassigning its session ID…","indicators":{"cves":["CVE-2026-107366"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-20T00:17:25.640Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://www.ibm.com/support/pages/node/7293016","label":"psirt@us.ibm.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-107400","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-107400 — IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to…","description":"IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to execute arbitrary code due to improper authentication.","indicators":{"cves":["CVE-2026-107400"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-20T00:17:25.790Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://www.ibm.com/support/pages/node/7292418","label":"psirt@us.ibm.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109126","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-109126 — IBM Verify Identity Access 11.0.3.1 and IBM Security Verify Access 10.0.9.3 Appliance could allow a…","description":"IBM Verify Identity Access 11.0.3.1 and IBM Security Verify Access 10.0.9.3 Appliance could allow a physically proximate attacker to gain elevated privileges due to the use of hard-coded credentials.","indicators":{"cves":["CVE-2026-109126"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-20T00:17:30.370Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://www.ibm.com/support/pages/node/7292606","label":"psirt@us.ibm.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-105297","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-105297 — Summary Before version 0.8.1, Pingora's HTTP/2 server used the h2 crate's default limits unless the…","description":"Summary\n\n\n\nBefore version 0.8.1, Pingora's HTTP/2 server used the h2 crate's default limits unless the application set its own 16 MiB decoded header-list size and no limit on concurrent streams. A remote, unauthenticated client can send 1-byte HPACK references to a near-empty header, making the serv…","indicators":{"cves":["CVE-2026-105297"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-20T01:17:09.613Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://github.com/cloudflare/pingora","label":"cna@cloudflare.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-109440","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-109440 — LangAlpha through 2026.09.07 contains an indirect prompt injection vulnerability that allows remote…","description":"LangAlpha through 2026.09.07 contains an indirect prompt injection vulnerability that allows remote attackers to execute shell commands or Python by planting instructions in web content retrieved by the agent. Because Bash and ExecuteCode lack an allow-list and human-in-the-loop approval, attackers…","indicators":{"cves":["CVE-2026-109440"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-20T01:17:10.103Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://github.com/ginlix-ai/LangAlpha/blob/435a5a44fabdeb33e409a62d233a936d96241c86/src/ptc_agent/agent/agent.py#L524","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.lasso.security/vulnerability-database/cve-2026-109440","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/langalpha-through-2026.09.07-indirect-prompt-injection-rce-via-bash-and-executecode","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109443","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-109443 — JoySafeter through 1.0.0 contains a remote code execution vulnerability that allows authenticated us…","description":"JoySafeter through 1.0.0 contains a remote code execution vulnerability that allows authenticated users to run operating system commands via an unsandboxed execute tool in Copilot standard mode. Attackers can self-register, select standard mode in the WebSocket chat.start extension, and have the age…","indicators":{"cves":["CVE-2026-109443"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-20T01:17:10.527Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://github.com/jd-opensource/JoySafeter/blob/12234a11a9d96acef85577afb1fa5682169d6171/backend/app/core/agent/backends/utils/command_executor.py#L110","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/jd-opensource/JoySafeter/blob/12234a11a9d96acef85577afb1fa5682169d6171/backend/app/services/copilot_service.py#L106","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.lasso.security/vulnerability-database/cve-2026-109443","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/joysafeter-through-1.0.0-authenticated-rce-via-copilot-standard-mode-shell","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109444","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-109444 — OpenSRE through 0.1.2026.10.19 contains an approval gate bypass vulnerability that allows attackers…","description":"OpenSRE through 0.1.2026.10.19 contains an approval gate bypass vulnerability that allows attackers to execute shell_run commands without confirmation because the headless presenter's execution_allowed() always returns True. Attackers can inject instructions into alerts or Slack messages triaged by…","indicators":{"cves":["CVE-2026-109444"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-20T01:17:10.673Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://github.com/Tracer-Cloud/opensre/blob/8eba8c9301fa954d9eecb1693b7e2021215ec2ec/gateway/transports/slack/processing/dispatcher.py#L276","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/Tracer-Cloud/opensre/blob/8eba8c9301fa954d9eecb1693b7e2021215ec2ec/tools/interactive_shell/subprocess_presenter.py#L41","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.lasso.security/vulnerability-database/cve-2026-109444","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/opensre-through-0.1.2026.10.19-approval-gate-bypass-via-shell-run-prompt-injection","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-77926","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-77926 — Aix-DB 1.2.4 contains a remote code execution vulnerability that allows authenticated non-admin user…","description":"Aix-DB 1.2.4 contains a remote code execution vulnerability that allows authenticated non-admin users to run operating system commands through the ChatBI common agent's ungated deepagents execute tool. Attackers can send crafted chat input to POST /dify/get_answer or upload documents with malicious…","indicators":{"cves":["CVE-2026-77926"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-20T01:17:19.213Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://github.com/apconw/Aix-DB/blob/5d370adf3e695fc8b11137e5beeb01973cb46810/agent/common/enhanced_common_agent.py#L237","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.lasso.security/vulnerability-database/cve-2026-77926","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/aix-db-1.2.4-authenticated-rce-via-chatbi-common-agent-execute-tool","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-77930","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-77930 — EvoScientist 0.1.0 before 0.2.5 contains an approval bypass vulnerability that allows attackers to r…","description":"EvoScientist 0.1.0 before 0.2.5 contains an approval bypass vulnerability that allows attackers to run host shell commands by delegating them to async sub-agents lacking an interrupt_on gate. Attackers can plant instructions in ingested content such as fetched web pages, so the agent calls start_asy…","indicators":{"cves":["CVE-2026-77930"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-20T01:17:19.360Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://github.com/EvoScientist/EvoScientist/blob/ac58caab7bdd1706f3fee55891f611cd175d05b0/EvoScientist/subagents/_factory.py#L116","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/EvoScientist/EvoScientist/commit/d249e320bd856a7d31d859cfbb2bf75bab6c8686","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/EvoScientist/EvoScientist/issues/387","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/EvoScientist/EvoScientist/releases/tag/v0.2.5","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.lasso.security/vulnerability-database/cve-2026-77930","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/evoscientist-0.1.0-before-0.2.5-human-approval-bypass-via-async-sub-agents","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-77934","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-77934 — Coze Studio before 0.5.0 contains an insecure default configuration that allows any registered user…","description":"Coze Studio before 0.5.0 contains an insecure default configuration that allows any registered user to execute commands by running workflow code nodes in an unsandboxed python3 subprocess. Attackers can bypass the regex import filter with __import__('subprocess') to run commands, stealing environmen…","indicators":{"cves":["CVE-2026-77934"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-20T01:17:19.823Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://github.com/coze-dev/coze-studio/blob/ffec252d9e2600f61d49b8228a642335e84d5496/docker/.env.example#L234","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/coze-dev/coze-studio/commit/fcf40d1008c100108c23be051a49950283f2c2cf","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.lasso.security/vulnerability-database/cve-2026-77934","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/coze-studio-before-0.5.0-rce-via-unsandboxed-local-python-code-runner","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-77935","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-77935 — Coze Studio through 0.5.1 contains an insecure direct object reference vulnerability in workflow.go…","description":"Coze Studio through 0.5.1 contains an insecure direct object reference vulnerability in workflow.go that allows authenticated users to access other spaces' workflows by supplying foreign workflowIDs. Attackers can pair their own spaceID with another tenant's workflowID in save, update_meta, batch_de…","indicators":{"cves":["CVE-2026-77935"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-20T01:17:19.970Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://github.com/coze-dev/coze-studio/blob/72cecff858a5a18662c5d9d1a4764c53ebc98317/backend/application/workflow/workflow.go#L303","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.lasso.security/vulnerability-database/cve-2026-77935","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/coze-studio-through-0.5.1-cross-space-workflow-idor-via-workflow-api-handlers","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-77937","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-77937 — Letta through 0.16.8 contains an authentication bypass vulnerability that allows API callers to impe…","description":"Letta through 0.16.8 contains an authentication bypass vulnerability that allows API callers to impersonate other users by supplying a self-asserted user_id HTTP header. Attackers can set user_id to another tenant's ID, even with LETTA_SERVER_SECURE enabled, to read and modify that user's agents, me…","indicators":{"cves":["CVE-2026-77937"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-20T01:17:20.263Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://github.com/letta-ai/letta/blob/1131535716e8a31c9a437f8695e25ac98f203a24/letta/server/rest_api/dependencies.py#L39","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.lasso.security/vulnerability-database/cve-2026-77937","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/letta-through-0.16.8-cross-tenant-impersonation-via-user-id-header","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-105299","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-105299 — Summary Before version 0.9.0, the HTTP/1 upstream path in pingora-proxy passed the downstream reques…","description":"Summary\n\n\n\nBefore version 0.9.0, the HTTP/1 upstream path in pingora-proxy passed the downstream request through upstream_request_filter and wrote it to the upstream without removing the client's Connection header, other hop-by-hop headers, or the headers Connection nominated, although RFC 9110 Sect…","indicators":{"cves":["CVE-2026-105299"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-20T02:17:08.703Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://github.com/cloudflare/pingora","label":"cna@cloudflare.com","domainType":"primary"}],"feedLabel":null},{"id":"malbaz-911b4fe6d1761eed5bc7ade69ac55b3c8f726cbd7e3d613ea34bd2bbf107e9c6","source":"malware-bazaar","category":"malware","severity":"high","title":"Price Request List  #GSGPRO202600197.exe","description":"File type: exe | Reporter: threatcat_ch","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":"3538ff52e4bd1fb7c700d3a68a4d7c2b","sha1":"f5709ca7b5cb96bb8cc574b6cd7154cab8de80b6","sha256":"911b4fe6d1761eed5bc7ade69ac55b3c8f726cbd7e3d613ea34bd2bbf107e9c6"}},"tags":["exe"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-20T02:57:45Z","fetchedAt":"2026-10-20T03:00:00.996Z","references":[{"url":"https://bazaar.abuse.ch/sample/911b4fe6d1761eed5bc7ade69ac55b3c8f726cbd7e3d613ea34bd2bbf107e9c6/","label":"MalwareBazaar","domainType":"primary"}],"feedLabel":null},{"id":"malbaz-80330f59bad607ce2d4918b2da68c01a3a6bdbb79ba4427fa49f96ae3b80839c","source":"malware-bazaar","category":"malware","severity":"high","title":"80330f59bad607ce.js","description":"File type: js | Reporter: Tuxxin","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":"41df9baa7e7384c28d39b3bef659b4f4","sha1":"eded65f06b92938b46746c90eb01ef23d50c7d08","sha256":"80330f59bad607ce2d4918b2da68c01a3a6bdbb79ba4427fa49f96ae3b80839c"}},"tags":["js"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-20T02:56:07Z","fetchedAt":"2026-10-20T03:00:00.996Z","references":[{"url":"https://bazaar.abuse.ch/sample/80330f59bad607ce2d4918b2da68c01a3a6bdbb79ba4427fa49f96ae3b80839c/","label":"MalwareBazaar","domainType":"primary"}],"feedLabel":null},{"id":"malbaz-5414de616cb7cad3e8652004e8aff3a067ed97a30a781c2fe73bb5f029efac30","source":"malware-bazaar","category":"malware","severity":"high","title":"export.php","description":"File type: exe | Reporter: iamaachum","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":"4e9b523f07c5e9ecd045597f5343c589","sha1":"088bc52858afc282cf1324088272efdc343be603","sha256":"5414de616cb7cad3e8652004e8aff3a067ed97a30a781c2fe73bb5f029efac30"}},"tags":["ClickFix","Efimer","exe"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-20T02:52:08Z","fetchedAt":"2026-10-20T03:00:00.996Z","references":[{"url":"https://bazaar.abuse.ch/sample/5414de616cb7cad3e8652004e8aff3a067ed97a30a781c2fe73bb5f029efac30/","label":"MalwareBazaar","domainType":"primary"}],"feedLabel":null},{"id":"malbaz-1a9d8635574518b8f27e220016cabc5b68d5cce8e56057a4545e4adc981c09ce","source":"malware-bazaar","category":"malware","severity":"high","title":"file","description":"File type: exe | Reporter: Bitsight","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":"8e309a612d2160d8e250d86829a63fbb","sha1":"fc299229fecb8e3a6adc7af64bc244166c15cd64","sha256":"1a9d8635574518b8f27e220016cabc5b68d5cce8e56057a4545e4adc981c09ce"}},"tags":["dropped-by-Vidar","exe","f7e0bdc53604a00d861131d2693a943c","infostealer"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-20T02:46:50Z","fetchedAt":"2026-10-20T03:00:00.996Z","references":[{"url":"https://bazaar.abuse.ch/sample/1a9d8635574518b8f27e220016cabc5b68d5cce8e56057a4545e4adc981c09ce/","label":"MalwareBazaar","domainType":"primary"}],"feedLabel":null},{"id":"malbaz-78d62fc5a747d68ae531a1cd1e4f6a384545ca2dd5192abb5e9406855651a803","source":"malware-bazaar","category":"malware","severity":"high","title":"SecuriteInfo.com.Heur.10656.3336","description":"File type: msi | Reporter: SecuriteInfoCom","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":"1def105adc234c8440300f28616e49ed","sha1":"65d8b11d17e0f564ad1811d9b06a20c1a8ad61a2","sha256":"78d62fc5a747d68ae531a1cd1e4f6a384545ca2dd5192abb5e9406855651a803"}},"tags":["msi"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-20T02:46:12Z","fetchedAt":"2026-10-20T03:00:00.996Z","references":[{"url":"https://bazaar.abuse.ch/sample/78d62fc5a747d68ae531a1cd1e4f6a384545ca2dd5192abb5e9406855651a803/","label":"MalwareBazaar","domainType":"primary"}],"feedLabel":null},{"id":"malbaz-570e354d5ba56a244fe1b6d08ae36a5c6e489fb53a710524afe065cedfac5f30","source":"malware-bazaar","category":"malware","severity":"high","title":"570e354d.ps1","description":"File type: ps1 | Reporter: Darkfibr","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":"edf8fc2c9371c31a3e9abeba9884c214","sha1":"c6127231737cb89eed97f47c4019e0d38db1c3d7","sha256":"570e354d5ba56a244fe1b6d08ae36a5c6e489fb53a710524afe065cedfac5f30"}},"tags":["etherhiding","freight-lure","miner","powershell","telegram"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-20T02:41:21Z","fetchedAt":"2026-10-20T03:00:00.996Z","references":[{"url":"https://bazaar.abuse.ch/sample/570e354d5ba56a244fe1b6d08ae36a5c6e489fb53a710524afe065cedfac5f30/","label":"MalwareBazaar","domainType":"primary"}],"feedLabel":null},{"id":"malbaz-9165aca66a9d89b749236dc2f49186c042cfff76acaba9696fc9b1b0e798fab9","source":"malware-bazaar","category":"malware","severity":"high","title":"vnc_bootstrap.ps1","description":"File type: ps1 | Reporter: Darkfibr","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":"4b4d4981cced060972729091f7de789e","sha1":"a6a44cb3a32fce98bda658ad22510899e9f59205","sha256":"9165aca66a9d89b749236dc2f49186c042cfff76acaba9696fc9b1b0e798fab9"}},"tags":["etherhiding","freight-lure","nodejs","rat","vnc"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-20T02:41:19Z","fetchedAt":"2026-10-20T03:00:00.996Z","references":[{"url":"https://bazaar.abuse.ch/sample/9165aca66a9d89b749236dc2f49186c042cfff76acaba9696fc9b1b0e798fab9/","label":"MalwareBazaar","domainType":"primary"}],"feedLabel":null},{"id":"malbaz-696fc814fa188e918e59cf4046c7f62062a61f5ea1bf66da59961851db10a0d5","source":"malware-bazaar","category":"malware","severity":"high","title":"main_v4.js","description":"File type: js | Reporter: Darkfibr","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":"389b294da604ae04cff759451789754e","sha1":"821a54327280bb06801062002609c76e96c7c446","sha256":"696fc814fa188e918e59cf4046c7f62062a61f5ea1bf66da59961851db10a0d5"}},"tags":["etherhiding","freight-lure","nodejs","rat","vnc"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-20T02:41:13Z","fetchedAt":"2026-10-20T03:00:00.996Z","references":[{"url":"https://bazaar.abuse.ch/sample/696fc814fa188e918e59cf4046c7f62062a61f5ea1bf66da59961851db10a0d5/","label":"MalwareBazaar","domainType":"primary"}],"feedLabel":null},{"id":"malbaz-c946dc76e0b39974450fb22127bef7b216f6217b5f36644a0ce8caedf330df18","source":"malware-bazaar","category":"malware","severity":"high","title":"main_v3.js","description":"File type: js | Reporter: Darkfibr","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":"6fa465d81afee23c47eb79fd025943ef","sha1":"d21aa451454952462f56dd4dcef8798bf48c1bf7","sha256":"c946dc76e0b39974450fb22127bef7b216f6217b5f36644a0ce8caedf330df18"}},"tags":["etherhiding","freight-lure","nodejs","rat","vnc"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-20T02:41:10Z","fetchedAt":"2026-10-20T03:00:00.996Z","references":[{"url":"https://bazaar.abuse.ch/sample/c946dc76e0b39974450fb22127bef7b216f6217b5f36644a0ce8caedf330df18/","label":"MalwareBazaar","domainType":"primary"}],"feedLabel":null},{"id":"malbaz-11410cdf29bc1f1ded6fd7dae48e20cf71fd9cb11d8deafce54a76fd582c319e","source":"malware-bazaar","category":"malware","severity":"high","title":"main_v2.js","description":"File type: js | Reporter: Darkfibr","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":"5f3890d0e1a671e5b780e482defe2022","sha1":"f62bdba0d6d57fef2bbfb4b2603a8f8b6bc83fed","sha256":"11410cdf29bc1f1ded6fd7dae48e20cf71fd9cb11d8deafce54a76fd582c319e"}},"tags":["etherhiding","freight-lure","nodejs","rat","vnc"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-20T02:41:07Z","fetchedAt":"2026-10-20T03:00:00.996Z","references":[{"url":"https://bazaar.abuse.ch/sample/11410cdf29bc1f1ded6fd7dae48e20cf71fd9cb11d8deafce54a76fd582c319e/","label":"MalwareBazaar","domainType":"primary"}],"feedLabel":null},{"id":"malbaz-4c56e9af087b0264e0e0c9cb061fd87151e10a544dff0c6b6bc37547ef05334a","source":"malware-bazaar","category":"malware","severity":"high","title":"main_v1.js","description":"File type: js | Reporter: Darkfibr","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":"0fe4c5d41336b6048cc32106ac615ae2","sha1":"04457bac0c342e1eeee8a4bb1bdb64d4c5742d4e","sha256":"4c56e9af087b0264e0e0c9cb061fd87151e10a544dff0c6b6bc37547ef05334a"}},"tags":["etherhiding","freight-lure","nodejs","rat","vnc"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-20T02:41:04Z","fetchedAt":"2026-10-20T03:00:00.996Z","references":[{"url":"https://bazaar.abuse.ch/sample/4c56e9af087b0264e0e0c9cb061fd87151e10a544dff0c6b6bc37547ef05334a/","label":"MalwareBazaar","domainType":"primary"}],"feedLabel":null},{"id":"malbaz-3913a1f77203ebb9e0991e1881279fa6172c9b8fde993fdc5d5be96254cd246f","source":"malware-bazaar","category":"malware","severity":"high","title":"hello.hta","description":"File type: hta | Reporter: Darkfibr","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":"11e67c1d8c74edef80702d15b1561fff","sha1":"fe6160da01751c01bc68333cdf2b874fdd1f6c36","sha256":"3913a1f77203ebb9e0991e1881279fa6172c9b8fde993fdc5d5be96254cd246f"}},"tags":["etherhiding","freight-lure","nodejs","rat","vnc"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-20T02:40:56Z","fetchedAt":"2026-10-20T03:00:00.996Z","references":[{"url":"https://bazaar.abuse.ch/sample/3913a1f77203ebb9e0991e1881279fa6172c9b8fde993fdc5d5be96254cd246f/","label":"MalwareBazaar","domainType":"primary"}],"feedLabel":null},{"id":"malbaz-0e814f4d934e4a574a914c319367dbe3793ee40ccf58ca3d26763d722216cbac","source":"malware-bazaar","category":"malware","severity":"high","title":"0e814f4d934e4a57.bin","description":"File type: macho | Reporter: Tuxxin","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":"16c7a146c567d4e157b78e0198a31f2b","sha1":"98f14e152b1672e940612aa3ebe375ace23096ef","sha256":"0e814f4d934e4a574a914c319367dbe3793ee40ccf58ca3d26763d722216cbac"}},"tags":["macho","snowlight"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-20T02:25:49Z","fetchedAt":"2026-10-20T03:00:00.996Z","references":[{"url":"https://bazaar.abuse.ch/sample/0e814f4d934e4a574a914c319367dbe3793ee40ccf58ca3d26763d722216cbac/","label":"MalwareBazaar","domainType":"primary"}],"feedLabel":null},{"id":"malbaz-884c70bde746092d710d0b217cd23bd314de54fc3a23d0f96928815d92222201","source":"malware-bazaar","category":"malware","severity":"high","title":"884c70bde746092d.bin","description":"File type: macho | Reporter: Tuxxin","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":"d7ed538dd1824c4a5dfe703afc7f2321","sha1":"6563a3fbc448aad251cf472df06f87d2ad49594f","sha256":"884c70bde746092d710d0b217cd23bd314de54fc3a23d0f96928815d92222201"}},"tags":["macho"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-20T02:25:40Z","fetchedAt":"2026-10-20T03:00:00.996Z","references":[{"url":"https://bazaar.abuse.ch/sample/884c70bde746092d710d0b217cd23bd314de54fc3a23d0f96928815d92222201/","label":"MalwareBazaar","domainType":"primary"}],"feedLabel":null},{"id":"malbaz-48e9eab9bb48d75bd70a989fe1eaf610fbfdadf8fc21bbfd63dd40e2c2504ff7","source":"malware-bazaar","category":"malware","severity":"high","title":"48e9eab9bb48d75b.bin","description":"File type: elf | Reporter: Tuxxin","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":"0735c9468434e0ac42203c8c5f87b755","sha1":"3ef830c6aff0108ff5eff5313685e87b2eb9b037","sha256":"48e9eab9bb48d75bd70a989fe1eaf610fbfdadf8fc21bbfd63dd40e2c2504ff7"}},"tags":["elf","gafgyt","mirai","botnet"],"malwareFamily":"Mirai","confidence":null,"publishedAt":"2026-10-20T02:25:32Z","fetchedAt":"2026-10-20T03:00:00.996Z","references":[{"url":"https://bazaar.abuse.ch/sample/48e9eab9bb48d75bd70a989fe1eaf610fbfdadf8fc21bbfd63dd40e2c2504ff7/","label":"MalwareBazaar","domainType":"primary"}],"feedLabel":null},{"id":"malbaz-05ca064a34061e79b6c21da0c508689eaf29369f850f27c86f645724b528990b","source":"malware-bazaar","category":"malware","severity":"high","title":"05ca064a34061e79.bin","description":"File type: macho | Reporter: Tuxxin","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":"49b5f14740c549ecdf19c6be838de5ba","sha1":"a0972ed216cfafaceb6ef84f0d0e30501d935ea1","sha256":"05ca064a34061e79b6c21da0c508689eaf29369f850f27c86f645724b528990b"}},"tags":["macho"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-20T02:25:22Z","fetchedAt":"2026-10-20T03:00:00.996Z","references":[{"url":"https://bazaar.abuse.ch/sample/05ca064a34061e79b6c21da0c508689eaf29369f850f27c86f645724b528990b/","label":"MalwareBazaar","domainType":"primary"}],"feedLabel":null},{"id":"malbaz-92e1930e6de81598b979d0623013f768be028242e8b10ffa44785cb1b4d6f6ec","source":"malware-bazaar","category":"malware","severity":"high","title":"92e1930e6de81598.bin","description":"File type: elf | Reporter: Tuxxin","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":"11743b0b6d35319e204573141575dd67","sha1":"8cc8f36ff9e6174776f5cb24bc4a7614fbfb43c4","sha256":"92e1930e6de81598b979d0623013f768be028242e8b10ffa44785cb1b4d6f6ec"}},"tags":["elf","Mirai","vshell","botnet"],"malwareFamily":"Mirai","confidence":null,"publishedAt":"2026-10-20T02:25:15Z","fetchedAt":"2026-10-20T03:00:00.996Z","references":[{"url":"https://bazaar.abuse.ch/sample/92e1930e6de81598b979d0623013f768be028242e8b10ffa44785cb1b4d6f6ec/","label":"MalwareBazaar","domainType":"primary"}],"feedLabel":null},{"id":"malbaz-085dc35f07a9b087da3a765ef388c04d751e01885a9d64fae7b14167ee0cccb7","source":"malware-bazaar","category":"malware","severity":"high","title":"085dc35f07a9b087.bin","description":"File type: elf | Reporter: Tuxxin","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":"7f0aa27ca68fd034e83ca5d02a794a88","sha1":"6739f4b438064ffd49734bf69249dc8197164e48","sha256":"085dc35f07a9b087da3a765ef388c04d751e01885a9d64fae7b14167ee0cccb7"}},"tags":["elf","Snowlight","vshell"],"malwareFamily":"Snowlight","confidence":null,"publishedAt":"2026-10-20T02:25:06Z","fetchedAt":"2026-10-20T03:00:00.996Z","references":[{"url":"https://bazaar.abuse.ch/sample/085dc35f07a9b087da3a765ef388c04d751e01885a9d64fae7b14167ee0cccb7/","label":"MalwareBazaar","domainType":"primary"}],"feedLabel":null},{"id":"malbaz-0a7271ec4b47e3f4af8a0c86b0577a552d94268662da785fef2d13671bf0be0e","source":"malware-bazaar","category":"malware","severity":"high","title":"file","description":"File type: exe | Reporter: Bitsight","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":"ead24d772b15a7700dbe9460dd145517","sha1":"9bd4fd9dd27cfea7cf027ea8c66a3ee098a7b544","sha256":"0a7271ec4b47e3f4af8a0c86b0577a552d94268662da785fef2d13671bf0be0e"}},"tags":["B","dropped-by-GCleaner","exe","MIX8.file"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-20T02:13:34Z","fetchedAt":"2026-10-20T03:00:00.996Z","references":[{"url":"https://bazaar.abuse.ch/sample/0a7271ec4b47e3f4af8a0c86b0577a552d94268662da785fef2d13671bf0be0e/","label":"MalwareBazaar","domainType":"primary"}],"feedLabel":null},{"id":"malbaz-f189bdd403dd605860ef3430c3a6cde7690820647a1c878d8714e3728c845303","source":"malware-bazaar","category":"malware","severity":"high","title":"SecuriteInfo.com.Heur.9029.26114","description":"File type: msi | Reporter: SecuriteInfoCom","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":"e7926f9d96c07198119d093c4555f29b","sha1":"f754dad5bd033f5c13d259d7d3388a362829888e","sha256":"f189bdd403dd605860ef3430c3a6cde7690820647a1c878d8714e3728c845303"}},"tags":["msi"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-20T02:00:29Z","fetchedAt":"2026-10-20T03:00:00.996Z","references":[{"url":"https://bazaar.abuse.ch/sample/f189bdd403dd605860ef3430c3a6cde7690820647a1c878d8714e3728c845303/","label":"MalwareBazaar","domainType":"primary"}],"feedLabel":null},{"id":"news-wordpress-seo-plugin-rank-math-compromised-to-backdoor-websites","source":"general-news","category":"news","severity":"high","title":"WordPress SEO plugin Rank Math compromised to backdoor websites","description":"Some downloads of the Rank Math PRO WordPress plugin from the vendor's official website carried malware that planted hidden backdoors in a supply-chain attack last week. [...]","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["supply-chain"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T21:24:51.000Z","fetchedAt":"2026-10-20T03:00:04.645Z","references":[{"url":"https://www.bleepingcomputer.com/news/security/wordpress-seo-plugin-rank-math-compromised-to-backdoor-websites/","label":"BleepingComputer","domainType":"media"}],"feedLabel":null},{"id":"news-rank-math-pro-wordpress-plugin-compromised-in-supply-chain-attack","source":"general-news","category":"news","severity":"high","title":"Rank Math PRO WordPress Plugin Compromised in Supply Chain Attack","description":"Hackers injected malware into Rank Math PRO version 3.0.123 packages distributed between October 15 and October 16.\nThe post Rank Math PRO WordPress Plugin Compromised in Supply Chain Attack appeared first on SecurityWeek.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["supply-chain"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T15:20:53.000Z","fetchedAt":"2026-10-20T03:00:04.645Z","references":[{"url":"https://www.securityweek.com/rank-math-pro-wordpress-plugin-compromised-in-supply-chain-attack/","label":"SecurityWeek","domainType":"media"}],"feedLabel":null},{"id":"news-connectwise-suspends-cloud-backup-service-after-supply-chain-attack","source":"general-news","category":"news","severity":"high","title":"ConnectWise suspends Cloud Backup service after supply chain attack","description":"ConnectWise initially said on Friday that it was investigating “attempts of unauthorized access associated with the ConnectWise Cloud Backup environment,” and confirmed such access on Saturday.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["supply-chain"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T19:45:00.000Z","fetchedAt":"2026-10-20T03:00:04.645Z","references":[{"url":"https://therecord.media/connectwise-suspends-cloud-backup-service-supply-chain-attack","label":"The Record","domainType":"media"}],"feedLabel":null},{"id":"nvd-CVE-2026-112147","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-112147 — A vulnerability was found in ai-genius-automations octoally up to 1.0.87. The impacted element is an…","description":"A vulnerability was found in ai-genius-automations octoally up to 1.0.87. The impacted element is an unknown function of the file server/src/index.ts. Performing a manipulation of the argument path results in information disclosure. The attack may be initiated remotely. The exploit has been made pub…","indicators":{"cves":["CVE-2026-112147"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T15:16:56.830Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://github.com/ai-genius-automations/octoally/","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/ai-genius-automations/octoally/commit/3898085c4e701be21377ebd9e91e10b941e47168","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/ai-genius-automations/octoally/issues/24","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/ai-genius-automations/octoally/releases/tag/v1.0.88","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-112147","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/1013490","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/1013491","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/422254","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/422254/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112328","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-112328 — The Sensei LMS WordPress plugin before 4.26.4 contains a broken access control vulnerability in the…","description":"The Sensei LMS WordPress plugin before 4.26.4 contains a broken access control vulnerability in the add_new_module_term AJAX handler that allows authenticated Teacher-role attackers to assign module taxonomy terms to arbitrary courses by supplying a crafted course_id, since the handler validates onl…","indicators":{"cves":["CVE-2026-112328","CVE-2026-112329"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T15:17:06.280Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://senseilms.com/release-notes/","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/sensei-lms-broken-access-control-via-add-new-module-term-ajax","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/sensei-lms-broken-access-control-via-save-new-message","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-86375","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-86375 — Dell Application Installer, versions prior to 26.09.0.1, contain a Missing Encryption of Sensitive D…","description":"Dell Application Installer, versions prior to 26.09.0.1, contain a Missing Encryption of Sensitive Data vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability, leading to Unauthorized access.","indicators":{"cves":["CVE-2026-86375"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T15:17:08.607Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://www.dell.com/support/kbdoc/en-us/000510641/dsa-2026-423-security-update-for-dell-application-installer-for-a-missing-encryption-of-sensitive-data-vulnerability","label":"security_alert@emc.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-107566","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-107566 — Missing authorization in the Sieve editheader action (6.2.22 through 6.3.6) and in the mail-rule Set…","description":"Missing authorization in the Sieve editheader action (6.2.22 through 6.3.6) and in the mail-rule Set header value action (6.0.0 through 6.3.6) of Progressive Robot hMailServer allows an authenticated user to make the server send mail as any address, DKIM-signed where the address is at a domain the s…","indicators":{"cves":["CVE-2026-107566"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T16:17:01.460Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://gitlab.com/hmailserver/hmailserver/-/releases/v6.3.7","label":"cve@gitlab.com","domainType":"other"},{"url":"https://gitlab.com/hmailserver/hmailserver/-/work_items/83","label":"cve@gitlab.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-107568","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-107568 — Missing authorization in the Sieve notify action (6.2.22 through 6.3.6) and in the mail-rule Reply a…","description":"Missing authorization in the Sieve notify action (6.2.22 through 6.3.6) and in the mail-rule Reply action (6.0.0 through 6.3.6) of Progressive Robot hMailServer allows an authenticated user to send mail through the server as any address. A Sieve notify sends a notification message, and its :from tag…","indicators":{"cves":["CVE-2026-107568"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T16:17:01.717Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://gitlab.com/hmailserver/hmailserver/-/releases/v6.3.7","label":"cve@gitlab.com","domainType":"other"},{"url":"https://gitlab.com/hmailserver/hmailserver/-/work_items/82","label":"cve@gitlab.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109433","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-109433 — Camunda 7.24.0 before 7.24.14 and 7.23.0 before 7.23.17 contains an authorization bypass vulnerabili…","description":"Camunda 7.24.0 before 7.24.14 and 7.23.0 before 7.23.17 contains an authorization bypass vulnerability in the Cockpit webapp that allows authenticated attackers to bypass permission checks due to an inverted comparison logic in AbstractCockpitPluginResource.isPermissionDisabled(). Attackers with min…","indicators":{"cves":["CVE-2026-109433"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T16:17:02.623Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://codeant.ai/security-research/camunda-cockpit-disabled-permissions-cve-2026-109433","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://docs.camunda.org/enterprise/download/","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/camunda-broken-access-control-via-cockpit","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112158","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-112158 — A weakness has been identified in MikroTik RouterOS up to 6.40.5/6.44/7.20.8. Impacted is the functi…","description":"A weakness has been identified in MikroTik RouterOS up to 6.40.5/6.44/7.20.8. Impacted is the function same_check of the file ipt_SAME.ko. Executing a manipulation can lead to integer overflow. The attack may be launched remotely. Upgrading to version 7.21.5 and 7.23.1 is recommended to address this…","indicators":{"cves":["CVE-2026-112158"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T16:17:05.917Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://github.com/MeetFireAgain/cve/mikrotik/routeros-ipt-same-integer-overflow-brick.md","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-112158","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/956852","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/422285","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/422285/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112303","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-112303 — GDevelop desktop app through 5.6.284 contains a credential leak vulnerability that allows attackers…","description":"GDevelop desktop app through 5.6.284 contains a credential leak vulnerability that allows attackers to steal the gd_resource cookie by supplying attacker-controlled resource URLs in project files. Attackers can get victims to open a crafted project, causing downloadLocalFile() to send the cookie to…","indicators":{"cves":["CVE-2026-112303"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T16:17:06.107Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://github.com/4ian/GDevelop/blob/v5.6.284/newIDE/app/src/ProjectsStorage/LocalFileStorageProvider/LocalFileResourceMover.js","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/4ian/GDevelop/blob/v5.6.284/newIDE/electron-app/app/LocalFileDownloader.js","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/4ian/GDevelop/commit/fbb01f40a640c35c6064f827065eda00e5608690","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/4ian/GDevelop/issues/9257","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/gdevelop-through-5.6.284-cookie-leak-via-localfiledownloader-resource-urls","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112310","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-112310 — docling-core 2.5.0 before 2.103.0 contains a local file disclosure vulnerability that allows attacke…","description":"docling-core 2.5.0 before 2.103.0 contains a local file disclosure vulnerability that allows attackers to read local images by supplying plain filesystem paths in ImageRef URIs, bypassing the allow_image_file_uri gate. Attackers can submit crafted DoclingDocument JSON or YAML that, when exported wit…","indicators":{"cves":["CVE-2026-112310"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T16:17:07.203Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://github.com/docling-project/docling-core/blob/v2.102.0/docling_core/types/doc/common/reference.py","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/docling-project/docling-core/blob/v2.102.0/docling_core/types/doc/document.py","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/docling-project/docling-core/commit/f952fc5d4c68fb673043c7c9f9c4390052959517","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/docling-project/docling-core/pull/900","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/docling-project/docling-core/releases/tag/v2.103.0","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/docling-project/docling-core/security/advisories/GHSA-jx5c-6gmw-72m3","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/docling-core-through-2.102.0-local-file-disclosure-via-plain-path-imageref","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112363","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-112363 — Crawl4AI from 0.8.7 through 0.9.5 contains a server-side request forgery vulnerability in the Docker…","description":"Crawl4AI from 0.8.7 through 0.9.5 contains a server-side request forgery vulnerability in the Docker API server that allows unauthenticated attackers to bypass destination checks via URL userinfo parsing differences. Attackers can set fetch_ssl_certificate=true with crafted userinfo URLs so SSLCerti…","indicators":{"cves":["CVE-2026-112363"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T16:17:07.350Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://github.com/unclecode/crawl4ai/blob/v0.9.5/crawl4ai/async_crawler_strategy.py","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/unclecode/crawl4ai/blob/v0.9.5/crawl4ai/ssl_certificate.py","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/unclecode/crawl4ai/blob/v0.9.5/deploy/docker/utils.py","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/unclecode/crawl4ai/pull/2304","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/crawl4ai-0.8.7-through-0.9.5-ssrf-bypass-via-sslcertificate-from-url-url-userinfo","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2025-13173","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2025-13173 — Tokens associated with user sessions are not revoked when the corresponding user session is terminat…","description":"Tokens associated with user sessions are not revoked when the corresponding user session is terminated, unless another SSO request is initiated. This occurs when the session-bound token feature is enabled with token binding validation and the \"Revoke token upon user logout\" option is not active. The…","indicators":{"cves":["CVE-2025-13173"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T17:16:59.183Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://security.docs.wso2.com/en/latest/security-announcements/security-advisories/2026/WSO2-2025-4727/","label":"ed10eef1-636d-4fbe-9993-6890dfa878f8","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2025-13591","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2025-13591 — The authentication endpoint of WSO2 Identity Server fails to provide a consistent system response wh…","description":"The authentication endpoint of WSO2 Identity Server fails to provide a consistent system response when a username does not exist in the system, allowing attackers to differentiate between valid and invalid usernames. This difference in responses can be leveraged to enumerate existing user accounts.…","indicators":{"cves":["CVE-2025-13591"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["phishing"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T17:16:59.413Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://security.docs.wso2.com/en/latest/security-announcements/security-advisories/2026/WSO2-2025-4583/","label":"ed10eef1-636d-4fbe-9993-6890dfa878f8","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2025-6623","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2025-6623 — The carbon console accepts user-supplied XML input without sufficiently encoding potentially executa…","description":"The carbon console accepts user-supplied XML input without sufficiently encoding potentially executable content, allowing for the injection of malicious scripts.\n\nSuccessful exploitation allows a remote attacker to execute arbitrary JavaScript in the context of a victim's browser, leading to actions…","indicators":{"cves":["CVE-2025-6623"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T17:16:59.797Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://github.com/wso2/carbon-analytics-common/pull/870","label":"ed10eef1-636d-4fbe-9993-6890dfa878f8","domainType":"primary"},{"url":"https://security.docs.wso2.com/en/latest/security-announcements/security-advisories/2026/WSO2-2025-4316/","label":"ed10eef1-636d-4fbe-9993-6890dfa878f8","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2025-7043","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2025-7043 — The ForgeRock client fails to correctly validate refresh tokens. This allows a refresh token to be t…","description":"The ForgeRock client fails to correctly validate refresh tokens. This allows a refresh token to be treated as a valid access token, enabling its use for consuming protected resources. This bypasses the intended security control that requires valid client credentials in addition to a refresh token to…","indicators":{"cves":["CVE-2025-7043"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T17:16:59.993Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://security.docs.wso2.com/en/latest/security-announcements/security-advisories/2026/WSO2-2025-4337/","label":"ed10eef1-636d-4fbe-9993-6890dfa878f8","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2025-7203","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2025-7203 — The Management Console and product files expose sensitive data, including remote log server credenti…","description":"The Management Console and product files expose sensitive data, including remote log server credentials, truststore passwords, and keystore passwords, in plain text. This occurs because the system does not sufficiently protect or obscure these credentials when the remote logging feature is enabled.…","indicators":{"cves":["CVE-2025-7203"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T17:17:00.157Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://security.docs.wso2.com/en/latest/security-announcements/security-advisories/2026/WSO2-2025-4369/","label":"ed10eef1-636d-4fbe-9993-6890dfa878f8","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111061","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111061 — russh is a Rust SSH client and server library that includes an SSH agent protocol implementation. Pr…","description":"russh is a Rust SSH client and server library that includes an SSH agent protocol implementation. Prior to 0.64.1, the agent server spawns a separate long-lived task for every SSH_AGENT_CONSTRAIN_LIFETIME record in a constrained add-key request. The loop accepts repeated lifetime records, clones the…","indicators":{"cves":["CVE-2026-111061"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T17:17:03.080Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://github.com/Eugeny/russh/commit/4c305033d72f8e5dd21a3fd4c53a6c291a16ebd1","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/Eugeny/russh/releases/tag/v0.64.1","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/Eugeny/russh/security/advisories/GHSA-4wc5-f2rc-q74m","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/Eugeny/russh/security/advisories/GHSA-4wc5-f2rc-q74m","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-112159","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-112159 — A security vulnerability has been detected in JumpServer up to 4.10.19. The affected element is an u…","description":"A security vulnerability has been detected in JumpServer up to 4.10.19. The affected element is an unknown function of the component Template Rendering. The manipulation of the argument IP/HOST leads to os command injection. Remote exploitation of the attack is possible. The exploit has been disclos…","indicators":{"cves":["CVE-2026-112159"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T17:17:13.947Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://gist.github.com/Seikruun/b628bb6d4403d9c41a54a4b92d775583","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/jumpserver/jumpserver/","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/jumpserver/jumpserver/commit/fcf2904cdb884230e9676f50f37a44d09fa97040","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/jumpserver/jumpserver/pull/17500/","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/jumpserver/jumpserver/releases/tag/v5.0.0","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-112159","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/964676","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/422286","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/422286/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112190","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-112190 — A security vulnerability has been detected in Webkul Aureus ERP up to 1.6.0. This issue affects some…","description":"A security vulnerability has been detected in Webkul Aureus ERP up to 1.6.0. This issue affects some unknown processing of the file composer.json. Such manipulation leads to insertion of sensitive information into debugging code. The attack may be launched remotely. The exploit has been disclosed pu…","indicators":{"cves":["CVE-2026-112190"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T17:17:14.140Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://github.com/KaranParelkar/Auresus_vulnerability/blob/main/Information_Disclosure/Readme.md","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-112190","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/973094","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/422295","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/422295/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112195","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-112195 — A flaw has been found in FusionPBX up to 5.4.4/5.5.7/5.6.5. The affected element is an unknown funct…","description":"A flaw has been found in FusionPBX up to 5.4.4/5.5.7/5.6.5. The affected element is an unknown function of the file app/dialplans/resources/classes/dialplan.php of the component Dialplan Editor. Executing a manipulation can lead to os command injection. The attack can be executed remotely. The explo…","indicators":{"cves":["CVE-2026-112195"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T17:17:14.533Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://github.com/jasonbernier/Dialplan-Escape-RCE/blob/main/exploit.py","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-112195","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/984968","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/422297","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/422297/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-11828","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-11828 — IBM MQ could allow a remote attacker with queue manager control or man-in-the-middle access on unenc…","description":"IBM MQ could allow a remote attacker with queue manager control or man-in-the-middle access on unencrypted channels to cause a denial of service in client applications using asynchronous message consumption due to improper validation of queue name length values.","indicators":{"cves":["CVE-2026-11828"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T17:17:16.130Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://www.ibm.com/support/pages/node/7292667","label":"psirt@us.ibm.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-11829","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-11829 — IBM MQ could allow an authenticated attacker to cause a denial of service due to improper validation…","description":"IBM MQ could allow an authenticated attacker to cause a denial of service due to improper validation of offset values in MQOPEN requests.","indicators":{"cves":["CVE-2026-11829","CVE-2026-12343"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T17:17:16.457Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://www.ibm.com/support/pages/node/7292667","label":"psirt@us.ibm.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-11831","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-11831 — IBM MQ could allow an authenticated attacker to cause a limited denial of service and obtain very li…","description":"IBM MQ could allow an authenticated attacker to cause a limited denial of service and obtain very limited information about process memory layout due to an out-of-bounds read when processing a specially crafted client request.","indicators":{"cves":["CVE-2026-11831"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T17:17:16.790Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://www.ibm.com/support/pages/node/7292667","label":"psirt@us.ibm.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-12155","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-12155 — IBM MQ could allow an authenticated attacker to cause a denial of service by sending specially craft…","description":"IBM MQ could allow an authenticated attacker to cause a denial of service by sending specially crafted multicast status messages that trigger a NULL pointer dereference.","indicators":{"cves":["CVE-2026-12155"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T17:17:17.447Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://www.ibm.com/support/pages/node/7292667","label":"psirt@us.ibm.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-12350","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-12350 — IBM MQ could allow an authenticated attacker to cause a denial of service by sending a specially cra…","description":"IBM MQ could allow an authenticated attacker to cause a denial of service by sending a specially crafted asynchronous consume request that crashes the queue manager agent process.","indicators":{"cves":["CVE-2026-12350"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T17:17:18.107Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://www.ibm.com/support/pages/node/7292667","label":"psirt@us.ibm.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-12670","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-12670 — IBM MQ could allow an authenticated attacker to cause a denial of service through a specially crafte…","description":"IBM MQ could allow an authenticated attacker to cause a denial of service through a specially crafted message that triggers excessive memory operations during character set conversion.","indicators":{"cves":["CVE-2026-12670"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T17:17:19.440Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://www.ibm.com/support/pages/node/7292667","label":"psirt@us.ibm.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-12727","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-12727 — IBM MQ could allow an authenticated attacker to cause potential process instability due to an off-by…","description":"IBM MQ could allow an authenticated attacker to cause potential process instability due to an off-by-one buffer overflow when processing specially crafted object names.","indicators":{"cves":["CVE-2026-12727"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T17:17:19.770Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://www.ibm.com/support/pages/node/7292667","label":"psirt@us.ibm.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-14511","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-14511 — IBM MQ 9.4.5.0 through 9.4.5.1 could allow an authenticated user to cause a denial of service by sen…","description":"IBM MQ 9.4.5.0 through 9.4.5.1 could allow an authenticated user to cause a denial of service by sending a specially crafted message that crashes consuming applications.","indicators":{"cves":["CVE-2026-14511"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T17:17:20.110Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://www.ibm.com/support/pages/node/7290859","label":"psirt@us.ibm.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-15661","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-15661 — IBM Concert 1.0 through 3.0.0 could allow an unauthorized user to inject data into log messages due…","description":"IBM Concert 1.0 through 3.0.0 could allow an unauthorized user to inject data into log messages due to improper neutralization of special elements when written to log files.","indicators":{"cves":["CVE-2026-15661"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T17:17:20.237Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://www.ibm.com/support/pages/node/7292374","label":"psirt@us.ibm.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2025-55667","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2025-55667 — A segmentation violation in the dump_isom_saps function (/mp4box/filedump.c) of GPAC MP4Box v2.5-DEV…","description":"A segmentation violation in the dump_isom_saps function (/mp4box/filedump.c) of GPAC MP4Box v2.5-DEV-rev1672-gc9a31d0e1-masterallows attackers to cause a Denial of Service (DoS) via supplying a crafted MP4 file.","indicators":{"cves":["CVE-2025-55667"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T18:16:58.337Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://github.com/gpac/gpac/commit/e6d01820d7bf3967d931fedb379ee5f209bc133b","label":"cve@mitre.org","domainType":"primary"},{"url":"https://github.com/gpac/gpac/issues/3321","label":"cve@mitre.org","domainType":"primary"},{"url":"https://github.com/sigdevel/pocs/blob/main/res/gpac/MP4Box/57/57_dump_isom_saps_filedump_c_1743","label":"cve@mitre.org","domainType":"primary"},{"url":"https://infosec.exchange/@sigdevel/117456648463009125","label":"cve@mitre.org","domainType":"other"},{"url":"https://github.com/gpac/gpac/issues/3321","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"},{"url":"https://github.com/sigdevel/pocs/blob/main/res/gpac/MP4Box/57/57_dump_isom_saps_filedump_c_1743","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-111757","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111757 — Hono is a Web application framework that provides support for any JavaScript runtime. From 4.12.4 un…","description":"Hono is a Web application framework that provides support for any JavaScript runtime. From 4.12.4 until 4.13.11, serveStatic can interpret a malformed percent-encoded path differently from upstream routing middleware and bypass protection for a static prefix. The root cause is serveStatic decodes a…","indicators":{"cves":["CVE-2026-111757"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T18:17:00.407Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://github.com/honojs/hono/commit/8b05c774ef1555c70f5ba5e2991b7e77cc3635cc","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/honojs/hono/security/advisories/GHSA-5r4p-p66f-jhc7","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/honojs/hono/security/advisories/GHSA-5r4p-p66f-jhc7","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-112247","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-112247 — A weakness has been identified in Wuxi Wubang Security Software Five-in-One Safety Production Manage…","description":"A weakness has been identified in Wuxi Wubang Security Software Five-in-One Safety Production Management Information System up to 3.5. This affects an unknown function of the file /FCKeditor/editor/filemanager/connectors/aspx/upload.aspx of the component Upload Endpoint. Executing a manipulation of…","indicators":{"cves":["CVE-2026-112247"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T18:17:04.260Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://github.com/Rookie506/CVE/issues/1","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-112247","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/986348","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/422321","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/422321/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112248","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-112248 — A security vulnerability has been detected in grandnode grandnode2 up to 2.3.0. This impacts the fun…","description":"A security vulnerability has been detected in grandnode grandnode2 up to 2.3.0. This impacts the function ProductImportDataObject.PrepareProductPictures of the component Excel Import. The manipulation of the argument Picture1/Picture2/Picture3 leads to path traversal. The attack can be initiated rem…","indicators":{"cves":["CVE-2026-112248"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T18:17:04.453Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://github.com/grandnode/grandnode2/","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/grandnode/grandnode2/commit/2abbaed232080ad74949c6f35581f0351e309972","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/grandnode/grandnode2/pull/862","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/grandnode/grandnode2/releases/tag/2.4.0","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/grandnode/grandnode2/security/advisories/GHSA-8wj3-7vmm-69rj","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-112248","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/986349","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/422322","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/422322/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-11319","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-11319 — TickTick Android application (com.ticktick.task) 8.2.2.0 contains a path traversal vulnerability in…","description":"TickTick Android application (com.ticktick.task) 8.2.2.0 contains a path traversal vulnerability in its exported ShareReceiveActivity that allows a malicious local application to write files outside the intended attachment directory by supplying a crafted content:// URI with a traversal filename via…","indicators":{"cves":["CVE-2026-11319"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["ransomware"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T18:17:05.660Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://github.com/actuator/com.ticktick.task/","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/ticktick-android-path-traversal-via-sharereceiveactivity","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-1510","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-1510 — IBM Concert 1.0 through 3.0.0 is vulnerable to Information Disclosure via Heap Inspection.","description":"IBM Concert 1.0 through 3.0.0 is vulnerable to Information Disclosure via Heap Inspection.","indicators":{"cves":["CVE-2026-1510"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T18:17:06.833Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://www.ibm.com/support/pages/node/7292374","label":"psirt@us.ibm.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-3161","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-3161 — IBM Cloud Pak System 2.3.6.0, and 2.3.6.1 uses weaker than expected cryptographic algorithms that co…","description":"IBM Cloud Pak System 2.3.6.0, and 2.3.6.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.","indicators":{"cves":["CVE-2026-3161"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T18:17:07.140Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://www.ibm.com/support/pages/node/7290183","label":"psirt@us.ibm.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-3628","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-3628 — IBM Concert 1.0 through 3.0.0 allows information disclosure through exposure of schema suggestions.","description":"IBM Concert 1.0 through 3.0.0 allows information disclosure through exposure of schema suggestions.","indicators":{"cves":["CVE-2026-3628"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T18:17:07.510Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://www.ibm.com/support/pages/node/7292374","label":"psirt@us.ibm.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-4405","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-4405 — IBM Concert 1.0 through 3.0.0 allows web page cache to be stored locally which can be read by anothe…","description":"IBM Concert 1.0 through 3.0.0 allows web page cache to be stored locally which can be read by another user on the system.","indicators":{"cves":["CVE-2026-4405"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T18:17:07.633Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://www.ibm.com/support/pages/node/7292374","label":"psirt@us.ibm.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-4413","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-4413 — IBM Concert 1.0 through 3.0.0 is vulnerable to cross-site scripting. This vulnerability allows an un…","description":"IBM Concert 1.0 through 3.0.0 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated attacker to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.","indicators":{"cves":["CVE-2026-4413"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T18:17:07.753Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://www.ibm.com/support/pages/node/7292374","label":"psirt@us.ibm.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-4418","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-4418 — IBM Cloud Pak System 2.3.6.0, and 2.3.6.1 is vulnerable to HTML injection. A remotely authenticated…","description":"IBM Cloud Pak System 2.3.6.0, and 2.3.6.1 is vulnerable to HTML injection. A remotely authenticated attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site.","indicators":{"cves":["CVE-2026-4418"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T18:17:07.880Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://www.ibm.com/support/pages/node/7290183","label":"psirt@us.ibm.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109434","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-109434 — Fenrir Sleipnir Browser for Android before 3.9.0 contains a UI spoofing vulnerability that allows re…","description":"Fenrir Sleipnir Browser for Android before 3.9.0 contains a UI spoofing vulnerability that allows remote attackers to impersonate the browser's trusted address bar by entering fullscreen mode via the Fullscreen API without displaying a persistent notification or trusted-origin indicator. Attackers c…","indicators":{"cves":["CVE-2026-109434"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["ransomware","phishing"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T19:17:19.650Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://www.fenrir-inc.com/jp/news/2026/10/15/sleipnir-mobile-for-android-3-9-0/","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/sleipnir-browser-fullscreen-address-bar-spoofing","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112251","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-112251 — A vulnerability was detected in antoinersx clawhost up to 0.0.45. This affects the function handleRe…","description":"A vulnerability was detected in antoinersx clawhost up to 0.0.45. This affects the function handleRequest of the file apps/clawhostgo/src/main/services/reverseProxy.ts of the component Reverse Proxy. Performing a manipulation of the argument token results in open redirect. The attack can be initiate…","indicators":{"cves":["CVE-2026-112251"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T19:17:26.953Z","fetchedAt":"2026-10-20T03:01:48.466Z","references":[{"url":"https://drive.google.com/drive/folders/1fvX6wjfHd58SzCAZd5-4Zn-mh9jqx8mz?usp=drive_link","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/cve/CVE-2026-112251","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/986376","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/422332","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/422332/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112259","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-112259 — A flaw was found in GIMP. Importing a crafted SBZ palette without a color-model attribute can cause…","description":"A flaw was found in GIMP. Importing a crafted SBZ palette without a color-model attribute can cause a NULL pointer dereference during string comparison, resulting in denial of service of the GIMP application.","indicators":{"cves":["CVE-2026-112259"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T19:17:27.330Z","fetchedAt":"2026-10-20T03:01:48.466Z","references":[{"url":"https://access.redhat.com/security/cve/CVE-2026-112259","label":"secalert@redhat.com","domainType":"other"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2555595","label":"secalert@redhat.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112254","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-112254 — A vulnerability was found in agit8or1 clientst0r up to 3.17.586. Affected by this vulnerability is t…","description":"A vulnerability was found in agit8or1 clientst0r up to 3.17.586. Affected by this vulnerability is the function _fetch_html of the file locations/services/property_url_importer.py of the component Property URL Importer. The manipulation of the argument url results in server-side request forgery. The…","indicators":{"cves":["CVE-2026-112254"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T20:17:52.800Z","fetchedAt":"2026-10-20T03:01:48.466Z","references":[{"url":"https://github.com/agit8or1/clientst0r/","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/agit8or1/clientst0r/commit/7e75c6cc6a07621c10be9b07fafd99e89a02e327","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/agit8or1/clientst0r/releases/tag/v3.17.587","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-112254","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/986798","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/422335","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/422335/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112297","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-112297 — A flaw has been found in ptbsare anx-calibre-manager up to 1.13.12. The impacted element is the func…","description":"A flaw has been found in ptbsare anx-calibre-manager up to 1.13.12. The impacted element is the function LLMClient.chat of the file blueprints/api/llm.py of the component LLM Configuration Handler. This manipulation of the argument base_url causes server-side request forgery. The attack can be initi…","indicators":{"cves":["CVE-2026-112297"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T20:17:53.620Z","fetchedAt":"2026-10-20T03:01:48.466Z","references":[{"url":"https://vuldb.com/cve/CVE-2026-112297","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/986822","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/422342","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/422342/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112771","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-112771 — Craft CMS 4.0.0 before 4.18.8 and 5.0.0 before 5.11.0 contains a Twig sandbox allowlist bypass becau…","description":"Craft CMS 4.0.0 before 4.18.8 and 5.0.0 before 5.11.0 contains a Twig sandbox allowlist bypass because the column, contains, filterByValue, index, where, and multisort filters resolve caller-supplied keys via ArrayHelper::getValue() without consulting the sandbox security policy. Authenticated Contr…","indicators":{"cves":["CVE-2026-112771"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T20:17:54.203Z","fetchedAt":"2026-10-20T03:01:48.466Z","references":[{"url":"https://github.com/craftcms/cms/security/advisories/GHSA-j697-8x93-7mp2","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/craft-cms-before-4.18.8-and-5.11.0-twig-sandbox-allowlist-bypass-via-array-filters","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112781","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-112781 — Grav from 2.0.0 before 2.2.2 contains an information disclosure vulnerability that allows page edito…","description":"Grav from 2.0.0 before 2.2.2 contains an information disclosure vulnerability that allows page editors to read protected configuration by adding config-*@ directives to page frontmatter forms. Attackers with page-edit permission can bypass the Twig sandbox config_denied_paths redaction to expose sec…","indicators":{"cves":["CVE-2026-112781"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T20:17:55.633Z","fetchedAt":"2026-10-20T03:01:48.466Z","references":[{"url":"https://github.com/getgrav/grav/security/advisories/GHSA-8wwq-x3w5-fxmw","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/grav-2.0.0-before-2.2.2-information-disclosure-via-form-config-directives","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112299","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-112299 — A vulnerability was determined in smrealms smr up to f40380c017bc35cd8db6ffdb9d4e78bf65b9d43d. Affec…","description":"A vulnerability was determined in smrealms smr up to f40380c017bc35cd8db6ffdb9d4e78bf65b9d43d. Affected is the function isUrlReachable of the file src/pages/Account/AlbumEditProcessor.php of the component Album Website. Executing a manipulation of the argument Website can lead to server-side request…","indicators":{"cves":["CVE-2026-112299"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T21:17:06.500Z","fetchedAt":"2026-10-20T03:01:48.466Z","references":[{"url":"https://github.com/smrealms/smr/","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/smrealms/smr/commit/cb402e7f4e70b617b59d8c55dbe926b951ceb4a8","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/smrealms/smr/pull/2579","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-112299","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/986838","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/422345","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/422345/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112300","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-112300 — A vulnerability was identified in DiffSK configobj up to 5.0.9. Affected by this vulnerability is th…","description":"A vulnerability was identified in DiffSK configobj up to 5.0.9. Affected by this vulnerability is the function _sectionmarker of the file configobj/__init__.py. The manipulation leads to inefficient regular expression complexity. Remote exploitation of the attack is possible. The project was informe…","indicators":{"cves":["CVE-2026-112300"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T21:17:06.677Z","fetchedAt":"2026-10-20T03:01:48.466Z","references":[{"url":"https://github.com/DiffSK/configobj/","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/DiffSK/configobj/issues/281","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-112300","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/989395","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/422346","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/422346/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112302","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-112302 — A weakness has been identified in kiwilan php-archive up to 2.3.02. This affects the function Archiv…","description":"A weakness has been identified in kiwilan php-archive up to 2.3.02. This affects the function ArchiveZip::extract of the file src/Readers/ArchiveZip.php of the component Extraction. This manipulation causes path traversal. The attack is possible to be carried out remotely. The exploit has been made…","indicators":{"cves":["CVE-2026-112302"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T21:17:07.033Z","fetchedAt":"2026-10-20T03:01:48.466Z","references":[{"url":"https://gist.github.com/0xSebin/90d210e703f880d59dbde243fae3aa75","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-112302","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/987582","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/422348","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/422348/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112395","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-112395 — Pillow is a Python imaging library. From 8.2.0 until 13.0.0, Pillow's tiled-TIFF decoder can read pa…","description":"Pillow is a Python imaging library. From 8.2.0 until 13.0.0, Pillow's tiled-TIFF decoder can read past the tile buffer while copying four-byte pixels. In _decodeTile, libtiff can return a tile allocation smaller than the required row stride multiplied by the tile length, and Pillow's stride-and-copy…","indicators":{"cves":["CVE-2026-112395"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T21:17:07.880Z","fetchedAt":"2026-10-20T03:01:48.466Z","references":[{"url":"https://github.com/python-pillow/Pillow/commit/76869efdbbf2ad7dccd7536520fb61b7a00ab61e","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/python-pillow/Pillow/releases/tag/13.0.0","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/python-pillow/Pillow/security/advisories/GHSA-462x-pgg6-55fp","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-76787","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-76787 — The UpdateHub firmware-over-the-air client parses the CoAP probe response with Zephyr's JSON library…","description":"The UpdateHub firmware-over-the-air client parses the CoAP probe response with Zephyr's JSON library in z_impl_updatehub_probe() (subsys/mgmt/updatehub/updatehub.c). The decoder treats every descriptor field as optional — json_obj_parse() returns a bitmask of the fields it actually decoded and never…","indicators":{"cves":["CVE-2026-76787"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T21:18:01.230Z","fetchedAt":"2026-10-20T03:01:48.466Z","references":[{"url":"https://github.com/zephyrproject-rtos/zephyr/commit/6fc4f27a74021b52c509e4f7912d68145dfa7728","label":"vulnerabilities@zephyrproject.org","domainType":"primary"},{"url":"https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-82gq-cmqw-xgx2","label":"vulnerabilities@zephyrproject.org","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-112358","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-112358 — A weakness has been identified in TiBillet Lespass up to 10e87909c5d526dffa6d424c104fc12860740537. T…","description":"A weakness has been identified in TiBillet Lespass up to 10e87909c5d526dffa6d424c104fc12860740537. This vulnerability affects the function get_img_from_url of the file ApiBillet/serializers.py of the component APIv1. Executing a manipulation of the argument img_url/image_url can lead to server-side…","indicators":{"cves":["CVE-2026-112358"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T22:17:06.020Z","fetchedAt":"2026-10-20T03:01:48.466Z","references":[{"url":"https://vuldb.com/cve/CVE-2026-112358","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/986821","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/422393","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/422393/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112361","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-112361 — A vulnerability has been found in Dolibarr up to 23.0.2. The impacted element is an unknown function…","description":"A vulnerability has been found in Dolibarr up to 23.0.2. The impacted element is an unknown function of the file htdocs/document.php of the component CSP. Such manipulation leads to protection mechanism failure. The attack can be executed remotely. Upgrading to version 24.0.0 is sufficient to resolv…","indicators":{"cves":["CVE-2026-112361"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T22:17:06.400Z","fetchedAt":"2026-10-20T03:01:48.466Z","references":[{"url":"https://github.com/Dolibarr/dolibarr/","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/Dolibarr/dolibarr/commit/9f9ffa288d4ad2632c1d5dd88272c699a592f4ec","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/Dolibarr/dolibarr/releases/tag/24.0.0","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-112361","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/990315","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/422397","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/422397/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112396","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-112396 — Pillow is a Python imaging library. From 11.3.0 until 13.0.0, Pillow has a heap use-after-free when…","description":"Pillow is a Python imaging library. From 11.3.0 until 13.0.0, Pillow has a heap use-after-free when libtiff rejects a tag while encoding TIFF data to an in-memory buffer. When an application saves attacker-influenced TIFF tags to BytesIO, libtiff can reject a tag during encoding in ImagingLibTiffEnc…","indicators":{"cves":["CVE-2026-112396"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T22:17:06.837Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://github.com/python-pillow/Pillow/commit/dc95da20207827a062cfbf551ee9f6031465a8bb","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/python-pillow/Pillow/releases/tag/13.0.0","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/python-pillow/Pillow/security/advisories/GHSA-4rr5-89j8-mwwm","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2025-36061","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2025-36061 — IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 IBM Diamondback Tape Library and IBM Storage TS4…","description":"IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 IBM Diamondback Tape Library and IBM Storage TS4500 Library could allow an authenticated user to cause a denial of service using specially crafted SMTP requests that would consume excessive amounts of system resources.","indicators":{"cves":["CVE-2025-36061"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T23:17:35.097Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://www.ibm.com/support/pages/node/7292612","label":"psirt@us.ibm.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2025-36069","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2025-36069 — IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 does not invalidate session after a logout which…","description":"IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 does not invalidate session after a logout which could allow an authenticated user to impersonate another user on the system.","indicators":{"cves":["CVE-2025-36069"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T23:17:35.533Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://www.ibm.com/support/pages/node/7292613","label":"psirt@us.ibm.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2025-36252","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2025-36252 — IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 IBM TS4500 Tape Library/Diamondback Tape Library…","description":"IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 IBM TS4500 Tape Library/Diamondback Tape Library does not invalidate session which could allow an authenticated user to impersonate another user on the system.","indicators":{"cves":["CVE-2025-36252"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T23:17:35.660Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://www.ibm.com/support/pages/node/7292611","label":"psirt@us.ibm.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112372","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-112372 — A weakness has been identified in H3C Magic NX15 V100R017. This affects the function importprofile o…","description":"A weakness has been identified in H3C Magic NX15 V100R017. This affects the function importprofile of the file /api/upload. This manipulation of the argument fileName causes path traversal. It is possible to initiate the attack remotely. The exploit has been made available to the public and could be…","indicators":{"cves":["CVE-2026-112372"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T23:17:36.173Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://github.com/XxingGoD/H3C-NX15-R017-Vulns/tree/main/H3C/NX15R017/importprofile_arbitrary_file_write","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-112372","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/983539","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/422420","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/422420/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-19178","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-19178 — IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 could allow a remote authenticated attacker to g…","description":"IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 could allow a remote authenticated attacker to gain unauthorized administrative privileges due to a race condition.","indicators":{"cves":["CVE-2026-19178"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T23:17:36.590Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://www.ibm.com/support/pages/node/7292610","label":"psirt@us.ibm.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-19595","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-19595 — The user-mode syscall verifier z_vrfy_rtio_cqe_get_mempool_buffer() in subsys/rtio/rtio_syscalls.c v…","description":"The user-mode syscall verifier z_vrfy_rtio_cqe_get_mempool_buffer() in subsys/rtio/rtio_syscalls.c validated its two output parameters, buff and buff_len, with K_SYSCALL_MEMORY_READ() rather than K_SYSCALL_MEMORY_WRITE(). Both are pure out-parameters: z_impl_rtio_cqe_get_mempool_buffer() stores the…","indicators":{"cves":["CVE-2026-19595"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T23:17:36.717Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://github.com/zephyrproject-rtos/zephyr/commit/bea93400138362691403b7f81de1e9048681547d","label":"vulnerabilities@zephyrproject.org","domainType":"primary"},{"url":"https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-7337-mc44-5wjm","label":"vulnerabilities@zephyrproject.org","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-77684","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-77684 — The Bluetooth Classic Hands-Free Profile HF role in subsys/bluetooth/host/classic/hfp_hf.c does not…","description":"The Bluetooth Classic Hands-Free Profile HF role in subsys/bluetooth/host/classic/hfp_hf.c does not release the AT command buffers that are still queued on hf->tx_pending when the RFCOMM DLC goes down. hfp_hf_disconnected() only cancelled the work items and cleared hf->acl, and no other code path ev…","indicators":{"cves":["CVE-2026-77684"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T23:17:37.197Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://github.com/zephyrproject-rtos/zephyr/commit/59c947c71f3d9ab4cf10fd28846e6ca4a3d53819","label":"vulnerabilities@zephyrproject.org","domainType":"primary"},{"url":"https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-hc6x-8gm2-2r9v","label":"vulnerabilities@zephyrproject.org","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-112373","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-112373 — A security vulnerability has been detected in H3C Magic NX15 NX15V100R017. This impacts the function…","description":"A security vulnerability has been detected in H3C Magic NX15 NX15V100R017. This impacts the function sub_416874 of the file /usr/bin/usrlist. Such manipulation leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed publicly and may be used.…","indicators":{"cves":["CVE-2026-112373"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-20T00:17:30.750Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://github.com/XxingGoD/H3C-NX15-R017-Vulns/tree/main/H3C/NX15R017/usrlist_stack_overflow_dos","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-112373","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/983540","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/422421","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/422421/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109441","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-109441 — LangAlpha through 2026.09.07 contains an improper isolation vulnerability that places all tenants' s…","description":"LangAlpha through 2026.09.07 contains an improper isolation vulnerability that places all tenants' sandbox containers on Docker's shared default bridge network with inter-container communication enabled. Authenticated users with code execution in their own sandbox can connect directly to other tenan…","indicators":{"cves":["CVE-2026-109441"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-20T01:17:10.240Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://github.com/ginlix-ai/LangAlpha/blob/435a5a44fabdeb33e409a62d233a936d96241c86/src/ptc_agent/config/core.py#L295","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.lasso.security/vulnerability-database/cve-2026-109441","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/langalpha-through-2026.09.07-cross-tenant-sandbox-exposure-via-shared-docker-bridge","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-77938","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-77938 — Letta through 0.16.8 contains an information disclosure vulnerability that allows users running tool…","description":"Letta through 0.16.8 contains an information disclosure vulnerability that allows users running tools to read server secrets because LocalSandbox subprocesses inherit the full server environment. Attackers can run code via POST /v1/tools/run or custom tools to read LETTA_PG_URI, POSTGRES_PASSWORD, a…","indicators":{"cves":["CVE-2026-77938"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-20T01:17:20.410Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://github.com/letta-ai/letta/blob/1131535716e8a31c9a437f8695e25ac98f203a24/letta/services/tool_sandbox/base.py#L487","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.lasso.security/vulnerability-database/cve-2026-77938","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/letta-through-0.16.8-credential-exposure-via-tool-sandbox-environment-inheritance","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"threatfox-1974956","source":"threatfox","category":"threat-intel","severity":"medium","title":"payload: undefined","description":"https://www.virustotal.com/gui/file/d0b369d8b76bd0da97fa2baacb82f9cd444b9ead8d850a8aa68e86b84b1e387b","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["Loader","macho","SNOWLIGHT","elf","Vshell","Mirai","cowrie","honeypot","upx","x86","Gafgyt","etherhiding","freight-lure","NodeJS","RAT","VNC","Amos","ClickFix","Foxveil","frame97","macOS","frame","nova","haven","chant","willow","quill","exe","remcos","RemcosRAT","AgentTesla","ps1","Sh","IoT","AUR","CHAOS","DirtyBlanket","linux","systemd-fontd","0xf00dbeef","CorePayloadManager","Coruna","ios","analystic","DarkSword","GHOSTBLADE","P7","salted-hash","Bashlite","Ngioweb","xorddos","ACR","ACRStealer","fake game","ROM","setup.exe","setup.py","fake game setup","js","QuasarRAT","masslogger","Formbook","asyncrat","cloaked","Dropper","MacSync","dll","Flame","SalatStealer","stealer","cve-2026-96656","miner","plex","Android","GhostBat","ghostx-panel","mParivahan","veltrix","caira","CLOUDHAZE","PageStone","QuartzLine","fake-git","Discord","encrypted","iraenc","gitlab","RUST","IRC","k4_irc_bot","onlycn","ROOTKIT","jar","minecraft","mod","Shell","doc8","python","wraith","RevStealer","HTA","codec-cache","Keylogger","VIPKeylogger","Alien","powershell","UNC7072","auditpolcore","DLL-sideloading","OVH","Python39.rar","DvnX","unpacked","WARDENStealer","YapStealer","rozena","GravityRAT","armv5","DDoS","go","legea","x86_64","MIPS","armv7","mips64","arm64","mipsle","sideloading","Qt5Widgets","TeamSpeak","bingads","Expiro","fba","pdf-suite","UnifyInstaller","dropped-by-OffLoader","acrobat","ppc_free_pdfsuite","puwaders","store-decoy","ChatGPT","CoinMiner","Amadey","FlyLegitBot","Vidar","DDoSAgent","Remus","P2PInfect","appk","sshdkit","SSHDoor","Bobik","clipbanker","54e64e","dropped-by-amadey","LummaStealer","ZigClipper","dropped-by-RemusStealer","zeus","xmrig","MillenuimRAT","runelure","file-size-evasion","masquerading","terminalfix","token-impersonation","dll-sideloading-adjacent","njrat","arc","317106","cred.dll","plugin","backdoor","x86-64","ssh-honeypot","shem","mipsel","RustyStealer","BlankGrabber","BlankStealer","Electron-ASAR","ExFiles","flomo-abuse","HijackLoader","infostealer","fake-ai-tool","jcef","crypto-targeting","persistence","token-theft","encrypted-payload","ARM","hajime","Downloader","botnet"],"malwareFamily":"Unknown Loader","confidence":100,"publishedAt":"2026-10-20T02:54:39Z","fetchedAt":"2026-10-20T03:00:02.155Z","references":[{"url":"https://www.virustotal.com/gui/file/d0b369d8b76bd0da97fa2baacb82f9cd444b9ead8d850a8aa68e86b84b1e387b","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/3783de51bd31420e5b2544e052058efe6d3330938831523e454856c257fef444","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/4015e605fb7ff472d208169a3b89ba16b18be92d2345dfb707985aef364f63dc","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/ed95369412065c36857f688d4cd1530c6d17bac292eb424dfa855ab1df349caf","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/9e6f74ea5ec27c36957a4392386c63e0103b2d7a8d237ad019ba1ebd19df8902","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/2e1c133f28b1d0ff70cfdf24f59263412f2323ab16bc35c8d910d441e848c0e4","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/718d3907daebcebc65c36c06aa3c9f8d856f41b77c43e809379a1fbc4a5bf91e","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/863ea1012d1379896cba11f581f4a8e8c86143297f5cdf4c432a8d652a717107","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/59ceb687992caf95100ee00925779ec35cc4a5767ee70013fed7050904fad6b1","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/48b459aa71abce3bced9fc970e798f5f4652b3771f1db6e5e454596f3261831f","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/d27a01fc7400b31811c99f467677beb2aa742bf52d23fc57faae7a276abe674a","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/7e7d9bb3a750416b663cae2ffcb65c299af1c2cbd99e3fb9012b8af7f8de432f","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/164753076cb20daa839ed963818cd468d095fa148cef1adfa897a30077452816","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/4ba5aa5bf31d9066dff8a63a7dfaa241482bd5599ea312f979b68e2f50ec3d96","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/f940436cb501da7b8d174699670083eedff857ccfc93eba66c40ae602237ac85","label":"ThreatFox","domainType":"other"},{"url":"https://bazaar.abuse.ch/sample/ac4484f6139484fd0099d9fa54d6feebb91c26418f4e7aed9eba6185da58b7d4/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/392070b982e06331e6daaa38cc8bd713b6f47b5f884d2973a908b6190cf44d90/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/706c3b12e8be63504ef14663eb7084a2d14587419166918f2fe32cfe55d78ee8/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/f59d0a5f63972619bb2c5184cecbe7d4fc59d5e291ede27ba13acbe49dab839b/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/407902441438f0f73a0ce5f5b89f50f9b6fcf7551a6179617fa21efac1cd524f/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/2d6f829d87773207cabc9360f8aae81adcf838829be00b0b6040fb7ebccf393e/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/2f4b6d386a70eea4d5aaa951b8a9095095410cef0963b4a769aa9cc4b7e356a0/","label":"ThreatFox","domainType":"primary"},{"url":"https://honeylabs.net/lookup/59.96.138.199:47242","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/493957ce31fc19e5982557cd30a2dfc2f7377b0eeb081ee0cb37faab59d40c71","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/31c2bb78646d445f04a82dcbdedab9dec88131f41974ea08c8064212d3646d08","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/f34500a7e65e36f852c2e53f980bd66d8390b16472082ef231a00195ea364709","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/eff9564d3f458884501c4f2431650a0366759489275cd26f92d1c54f43bbd244","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/591c35f12f34a681462a3507690dfa355700747486f1ace25b34468936b00b81","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/eb6025c6b535ac7073dc4840e7d1ce348c03bc03afa9bf66bc6ff56057c9fe3b","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/e3efe3a90dbddf23bda1dfacb089fa2df42b0e4851559609c502d951f45f6b24","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/bf62ecfac9d5e8b71be6d920033ad87df03e570385c2f6bfbe3923ccaa96e70b","label":"ThreatFox","domainType":"other"},{"url":"https://www.bleepingcomputer.com/news/security/fake-arch-linux-packages-push-malware-with-root-privileges/","label":"ThreatFox","domainType":"media"},{"url":"https://www.virustotal.com/gui/file/ef2f81988ce0bb0aaf32e9a68780109e8756d94bbc3273182ffdb3892edb5930","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/dcc726b0493bd2d9a06a1ebf0d0687091c2ef08b0091ea2a50da50eb1efd65ac","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/7becf99286d1775255d5ba2b366d0576849cfb5250b3a61b7164991a03d75369","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/24a5c95971bff0b40d4e0596af1d9dba37dd686077c58fb3b666a9ddb05058c4","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/d5be1603c8a1fc0c0984d4ecb9e4d74b488bc79ad058f4606809c284a937368c","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/2970e8113c21fbbbadd88ffef710c891dbe76f63240e86f63eea5805db494c17","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/ce932136f1a892a9640babd29b1eb7fcae6bf72fda91550d3c651f202c0b9fd7","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/1e7cc2bd060683795a7bfa0ee3610e6b896c71ad20677b65ccde4278594911f9","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/edcd480853dfa06c03a0f2b555f0187fad9a71782fb1d993701951f4d91173d7","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/28b34e7fe74ecf775a5b15fe1e75a22138d9c68829156c134b19d48e568f2046","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/70e339bcf38b2d79774daa135ec598f2ecd99c6ec1cd9e810bbf005da9aab64d","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/989b86835519fc0354d7ff54d2b5162c639d98b642835bcf4c822188e039e9fa","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/4aeafe5efaa93b40d653c307e0b5615610b359866ab1d57f907bb2ddb86b5b55","label":"ThreatFox","domainType":"other"},{"url":"https://x.com/vxunderground/status/2112234562805739834","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/4a8a816b4a098236f12eb1b1f1f259143509bd79e907762ebf6a99352f34e9f7","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/36e8a6ec8e4a8bd397e51e55b9fc970d9a3b768fdd66e6b89913492ccbc6023e","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/d3b6ed3442f8195b3d33b5293abdc5cce173bf2528f947634773464ae931cc70","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/87d29dca3253ac908990ffab6e9a177209394f6cbaf45b1817433452e2b2d97a","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/88ce6edaaadd692355c7a9136ec2abbf628d7298348ea899044ac6e1ddce849b","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/0e20f67fdad9148a186f0fa99cefb448bccdce7220484f173e05add736fa3815","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/b8b361af2f4795689feedb9aef172bd5d0288642354fa1aed9c0624b94fb2d3b","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/e296e230bdda3e0b2d190f99f7005bbaa1433a0519d8dba43df5c1f252b9040c","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/310c1b73b9c35ece8bdae14dcce18fab947e52a4c21fc12b4642c1ffd3db790c","label":"ThreatFox","domainType":"other"},{"url":"https://bazaar.abuse.ch/sample/f0a60a57d3c07eb3b0db2218b3d67363c255ba75f418b111b72ac0f83c29f72d/","label":"ThreatFox","domainType":"primary"},{"url":"https://www.virustotal.com/gui/file/5cb67ed0bad9f06e7ef81be6d83a445a0784c6f9a2bcc8df27922b9a626908f9","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/90d519148ea37faabe97f95e529bb3de04e38b73e02722ef1b5d76b9c60df5ee","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/3a3daa3f6d36529eec11b00b4ef59af89f7b602d48cfa53959ce7fccf4654b94","label":"ThreatFox","domainType":"other"},{"url":"https://bazaar.abuse.ch/sample/18a871305fff238ac80a26688062f430742c02c8f28f4d82a9cc5ae2f180ce6a/","label":"ThreatFox","domainType":"primary"},{"url":"https://www.virustotal.com/gui/file/00e0bae226b9e46ce1397396995c9d01ac9441f8296bbf33c70d83c350d4e757","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/622bf6c8c4a95aa3dda63b5afc070f76660c3b8c725bacb73c99ec6e036671b7","label":"ThreatFox","domainType":"other"},{"url":"https://bazaar.abuse.ch/sample/0dff1166b513ae3a40724d3362dde2e5a2a94cd5266eebafec3d06e091e4d697/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/3b4e7678e31e4b245db656358580539e7e5837e3f60d3e8bfd290a7667950ec4/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/e73400a24824ebe3627a14cbed8383673a94684760dab43833df33341df85cc8/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/4d9b98e6f17e737cbaaf056d6b720708f9b293bb77361e50b751d20382dd8176/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/9010686b5dbea311ace010c27f660d9bfb5335595fefd1f66d6a911602c53536/","label":"ThreatFox","domainType":"primary"},{"url":"https://threatcluster.io/cluster/urgent-update-required-for-vulnerable-plex-media-servers-ami-9c932b4a","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/e943ba59901edcc39f6a0087ab84fc9ea2a7cb551489a9abf3c83fa037866453","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/c430f199f0942ea3ec8111183707e2d06be074d913aef8f48dbba6cb387bdbca","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/5dd04ce2236d1ddf4be2973677368781ffc61b0f48a614409aa702d66464b6db","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/ea86e6c3922714e144154180abaeb26f2502b719cc3f542a99753c08d360eae3","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/5b41847cff7b8e0dc16bdbecb4ca54ad46e507bcda63bfc1dd7f39b0075dd33d","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/25f67a594ccdc83fa49c751a865bb56259f868fa78936696c0a9bb353470479f","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/23b1af0ff0d45a15c7687b57cedd8fcb5e12ffa453f9b626713fe8d47be5d8fa","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/2c555676092b2589b17bce425ea8406b68456011e9f21fe6d87382ac08106bf2","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/cf28f44cfec7384cd572f5457a2d7e4a09fd72f7a29264393961fa4493b29c19","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/47258dad12e7bbb34a8421c79e98a10f62adc6d613fa8d94c30599fffbb040f8","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/f3f3a682cb0f5bb3510af445540d76ecce01bafd0f562d3e27606548f72b901d","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/d5717a63f255b21de9051933565f900e6b831388af10a7a2f7eb43fcea26a429","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/2712cf9d7213439af0cbf786945b4897cb4e5be2b002530e14cb5c34f160f990","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/edb17afb151aababd85ede0952f540b3f26d5e306062b3f16e2ee617daef0f68","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/1384a37d7b21a1cc8313e9b094c8d1e0cfbec72d5bf3a73d12c2506198fa6964","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/626977f1481186fc0345d3ad0360b5dd217508385c41ad8c517152c853492d6e","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/39c8844fdc6d60a34652d4fd10020a7e4eb709d756b6eb5d9742c0c187e8a14d","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/5a35a7d01bf531ebc10ed7caaa9c5cf54333659cb00b24098f8d0cbd1afbc419","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/08e7c04e22c51313e5095f2db39e11fcc59adf56a63481ae92d8730e2788edc7","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/7123e1514b939b165985560057fe3c761440a9fff9783a3b84e861fd2888d4ab/community","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/ec9c2e0489358859de1577405540a384d5a2e3cb094dbe3892bfea437a3927f3","label":"ThreatFox","domainType":"other"},{"url":"https://honeylabs.net/lookup/143.20.154.42","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/550c73c949cf8d4c807561a351aff9cd29fc337c4564c4dc9aef46c58d127aa4","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/0a19a893476c75cd1be3fb81836b04f23b3775272c9075298e57797a1366702e","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/3100dde572a2915b684c3d349a86a7c44d4f9fd9467cfbdb424a72d9380a23b4","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/12c1d2fa6a15cad5a681c84fbf45a3ed8cd69a44cadb176ec1a1d79568982f18","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/c32ba6a498f52f4aa831dcc0ef66da00380a5519d60c8b7eede24e8f04bdeea3","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/9e02e90c7ea01092752970a0708642ad236b55037d38a4b24f33190bfef8c2b0","label":"ThreatFox","domainType":"other"},{"url":"https://bazaar.abuse.ch/sample/225f89ad501a71af48f405b6c61309a6c0f041ad8add6625e75274c536954f1f/","label":"ThreatFox","domainType":"primary"},{"url":"https://www.virustotal.com/gui/file/6190326ce3efab6fb4f8084d58dc406dbba7301b675cb6038ea2610ff5af773d","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/60bae69ef9f63f44e992ca2eb2e1c4e07915ba6f26035fb92b64f6049c5d861e","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/f99fd49860a8945423cb348a645e3ceafa685dac36d96f0e8e96c1ed36051e42","label":"ThreatFox","domainType":"other"},{"url":"https://bazaar.abuse.ch/sample/ab5b9b53b603bc5bc8abb0eb0aab014d82d20b603b40fdc69642b5b907fcea43/","label":"ThreatFox","domainType":"primary"},{"url":"https://www.virustotal.com/gui/file/b05f89e41ee8a6613461bdd57362772258f7fd8383a5d013a7965f3fd8f08eb0","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/c38331101cf07b7fa2e38b4792752797e62fd16b86eb57192a06e4eae21752c2","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/f0924944e502148d001e043b96981c621a65f0d4ea0c68cef26355936ae48340","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/8c0137506ab7d5fc2ab411acdbc8f729399027568c5fc892371e5d89edb6897d","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/c77e8254819e19bf277948537724fdd2fa90f45fbc81d342c688432228282b89","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/2aba880c132444d0a53e56ea03bdeede3aec3272d233cb33497a1f556a52cbe5","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/ceec6321dc3dbf2e1515bb53602bc278afa47b472f260f9bcdd109c5ad0052d4","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/e0f6754b62b957cda8188934366f173aa9bb8ed2beda8f3d668f9c881835a5e8","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/92e72549aac041603981b9c513f0538c32224f08e4bb16b9b948b69fd5eec902","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/cb8d6fea3c15c1a5db5f7f176805703668b0d9b6587d6b9fdca56b89a581cbee","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/abaa53c0fec50c794142e7a99ce2910eb2a74e7ba5cf9d359e31dc0b0d99eb9e","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/d4558adc71df8b901e2091eb6e7fc9781d7f3611e18ca79ed307516746ce674e","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/151c4c3cb12fb3cac7f5c5871eb44fefde1fad10b84b73a8e4c871842128ac45","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/f50843c01ba9df306195220951c450a19d7e45ea4d8de1e6e236378f993dbc39","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/d5af897e697a845f310b585740bb2ebf26fd218c529a205f87268bb1652fc256","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/532d6eadbb1d341b967b0a066930d112c24dbd8ee3dfe0ca1ba176e33a47de8d","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/597dd4fff251b3f37645ad62ad3f55501e276f92c6e1c4ff0cc0da2a2af2be92","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/c66457e25286934b41d159943f7d97f01988fd7801425d3d938823983c25223d","label":"ThreatFox","domainType":"other"},{"url":"https://threatcluster.io/cluster/governments-exploit-online-ads-for-zero-click-spyware-attack-48bf43d6","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/aeba6d2af47c87977b0525c6e640cb769b4bd3d866956f7dc8d0c6bab48e7495","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/6fde54ea9de9309cc801d48f06af383b5820b42f89bbd8df5b60e5f827fafb5e","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/218ee68ec44c3deef77ff315a1f8bbb948aa108b4b5e2baa7a9b05770927f23e","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/e03049253c5b68f67d575be20548a6d80d1ed344010ce3e48a85d190cc1f608d","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/feb45477f2f3cfebd93f47aa68288d41b84ad309d852158ff3d78dfc72021835","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/fb617d2319c498e327069f1ebbcc1c05756c894bf34ff0f879f0f8a82ffbaf1c","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/69d926b0626ab14317f3c5b8c5f539c77a76158a5f050b50a0b10eadb8b164dd","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/878b263c7bb60c579060b55808203dec2274ed44a6f31d024c433bdd2400ae4b","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/dfc3bc27541d772d2dd9926cf48eba9b78cfa78b54cae93349051172d4181c8f","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/c0e60b8b072782b0cad0b70604aeb587c0ca5366d15af5e0a2b62c81fd626460","label":"ThreatFox","domainType":"other"},{"url":"https://bazaar.abuse.ch/sample/40dc77a48faae52f4ab7e2fbac202427947ffd48fc4e3dc6ed9f9b4403dc590c/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/eae1ad551a79a4c8333b098258aab12566f538efcc0c8a3166bcf2f26a0ae2c5/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/447cc1be6fdca78d738314f2d56b7981d7369247cdf8e97d548946f6f9919244/","label":"ThreatFox","domainType":"primary"},{"url":"https://www.virustotal.com/gui/file/3b5e4e3ab4963521550e492a2c74feab9bcdec24dc3cdb38509a493e2ef33e8d","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/49e5d9301ec4b2646c9d0a20a1abdf2012dbdf0b27a3703a96edcfe6d675386e","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/776fd70497cb6ead54c047eaf624886de308364ff2513e9accca8bab09714824","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/a4059017d7843e081add1c2618b20fd2632ebab0926e891581679b5c47e36b31","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/24969acf6859e685be371b98a62477d7236d5f85eff3190bcbc55dbe5b8c60ba","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/5fe8ee5236cbf00491b1e8a8d41ca59dcc5dd0fbc5ad5dd1fc4b60e98abdd7ed","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/7541c80a8d88083f2489d2acfc96a41aa841f9d27d2b5c5052b087fedf16ab13","label":"ThreatFox","domainType":"other"},{"url":"https://bazaar.abuse.ch/sample/0119e2bc2281379155fe73917dc347f31501873867e7d8174b71c8cdbf0e5c8f/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/ff9c8f57fa3ec4c935c343bc636dee3253e6b6e4dbbd0d64e7898f0c7f7c5598/","label":"ThreatFox","domainType":"primary"},{"url":"https://www.virustotal.com/gui/file/352ffb415be0af66eef67b52b58d40b571731eae62c2082a8a1968e5fe691669","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/112ce65fde13d2d815eec63d35714388566009420b533603c47a7cbaeae26a3c","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/b5d4aba0fe4004e851756d0329f0c165db2c1667c7c73516e0f1537c9afd3298","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/61f8e4e3e263934a04d18e29fd5edaa0840b1a8137b649e8241e5bae013f200d","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/371cd811b69df8544c9dd43df74afd3d6db210edc7b3d3c124e9bbc7d0638816","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/768fb1929679a74bba202c9b4d2325c2053df6d601469bc45e5aceba87a02427","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/d24a2e1d6ece4780a6c47bc355dbe1918c20366daaafbcd68a82b501de461efe","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/8dbaec42ed39b96b712389111e47c06ca1ea15389c34702df799c2b035adbfb0","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/be74ad1c11fe9b7895f1d6a22d3c54ee2d254d6011891c6879876ddecc10dad9","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/73292d60033195aa437bb68ed229ab91c44dcf3747f22aaa3515c8a8acccd00f","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/0f15e62f49dbbc90c604ee07ef8eb716d2f68435767a486631d470def6ebeb36","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/ed8bc2b4ab3d52999ecd782cddc6b43fd87a07c086e1a1285ac44a70ee55603f","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/002c0ba824e249fbb67b3c91a0c5d97f22bef4f90c78451e9d6ebe9f7c5a3501","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/a65580c55059b46ef3300dd5223602f7bcc603f96c1642cc71d9bab2a5e62e7a","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/f4d558133f6ffc69d42dd5c3504938e82fe1a4ef241344f729ae22f6d200cd1e","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/9acdd4de139103b21098bac2dba33e1547e39821296c1b89c9d4d2eded750509","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/672a08c37c016aab06df52743931e02e9a6cfc417e5e815963feea63f82afd94","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/81e34b0ec6928234d0a24f9b1634d1e2201fe0fca38bf048229d750ba35f64ca","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/c9d5be0b1025dba4ef28a0196208f6cc1da154f91f1c029728ee1e41a6e7b2f7","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/c3e8402ef7f01179f5015db65e3f34380cd7a6269536516d0cce931f18bf808f","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/816aa360229920df4a3845f72442d55dc2eabab456c3d3657ce0137320ed99b5","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/5386aa3280e7ffec73c281d1f0266e12f2c1c8f4fba60e42670c7531f58eab0d","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/e395c5343703a570d12620c81b9593ea6117d2f57c95bd8247704d9dbd256ce6","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/818711b296a86b6305cc6435a754f1055ce99684916d70176f2ba24335f94faf","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/ab09aa9cbe92e3fe0c44393d0dc483324392ee0bcbadf28e21365cdec657a6ae","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/2947ca3a68468ea4e90db4a519f97ce2a8336627f4687dff138ee05330e5731f","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/b67dcc77e44af12e5f2371f823f55e9ba606ab3ed04e640d78abbff0a5ee403a","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/1b96bdfd280780ae6bbd34dca2ff126b5c54bae57319e629592cf7aad36e6058","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/c74a2059b01fc0f47030aaa14c724c9ebb3aab11c862eca4586c7bdf933e1c1e","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/7c9e8862ec166c1809583d31b69bcf2eefd24d824120470e68840154cb39a35b","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/71be71098e176e57aad7e2b862f293dceb06f4eba36712b92d4cb34e4a306525","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/e78b3c0beda77217043f0510cc35231cd0404d395f0d2e4adbfa0ff31c2c9efb","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/c329ef0e14c0f74937114a02f03bc8d39d7435fa62780c5b8d8c229e53f70022","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/67c63f1b2d74c447114955236bace65fe7728b388ab068c1a7eddb81f0c43b01","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/d91e0a04c55c1618ba8ff660be422316d20370353b087f326a49406718b52a56","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/b849d42ab6a6ef7945aba2643ca089a02a063d9fc42819b1267ab6f675ccceba","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/fa15c35f814d821bd5214f34f31edf6f20ed25f4f2d98ccd568ea21d6d4159cf","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/85fce9826974549c2dd4c92a3207cf2543e10676ad2dfad7c8ea429f616cdf21","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/fe134bfb3a11c51588a863598ee0ee7f45089a84e3cc2fcbf1c60406321fef40","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/0b00cbaf9c0107cdf47931ae31e287ae195c35b2a32f64137e206dabc58f951a","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/30e0a140a80d7788c2e3c8aa3dae112d3d8673d4481da474c7040539fe3e8d72","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/7c95f72a14122c5a5bbcffdf834b7ac7540300673807da22fad705927ebc8a2c","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/4df43116580b163364e74f71f7f1af5c748db1b43673b6080864dd0c50f9a668","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/9002363c2859f270447a5abc5779c7c8d0fe4add82ae797b0d21a45f0bdb5b0f","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/aca1357d5f36403c05b8a0b7336f8cfe9086583896d2b4bcfce0398c35cfb3e4","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/e31f35925816d4f3ace5ca91b7654fb959a33c382348d5453837fe27af565d8f","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/1268c78e78f9ce9fcf2ad5e4f23f95978ef0c49574fc7e139f70c0fae8fe141d","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/e46974167d71bca0f474ba1e5b6ca7efc7302e1d013833771703a3c584ffed5c","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/b3579bb6b3b4426673843cc9b4204bcef0312d168e6026ecbb4195345f642013","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/35c51e94327280ce3f6b3d6814d27f8024fa332309e440ed30adcf70da067152","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/80c3b857f6d288af10a3dd1b1a6ee684b8d4efcd6cc3ae53099934f32ced1682","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/a11d8f216eb7252ff61b869b1f1614437f869def108488d3fd877ed868f194be","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/a79306010cf95e6ec8cfd38af9909b156a317684fe7047e900cfac596e9388b2","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/0d8106b1f4c5c44ecb1a77ed5efd010f33603081e3b5f37c05340e231906f18e","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/8a38da72059c0f2dc66faedbb81a905c281c7d5fc1650068bf42a7c82b7e62de","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/2b66b4b8780569cd63159360fbc53761d6ba15c7635c977976d55c77d1d93079","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/c8a703a6d611594d8c89c1ad8020ea7814d2016cbf61123cf2059bcc0af089d0","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/23eb2f56e3aec4210edf15f1db42195ed49999925a7415d020a4c138f6ad5b87","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/9d193c9369fb642c33d327c0b5a1e6a6537cfb9bcc7a02cfee953f559492fa67","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/4e31128a2967d003c7cbd76c33e56ca7c305071b37b1f7660ef5c50a78bfb9dc","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/4acf5e1fc4f248c3205bcd7251b07b2d5b4259ee96082539e7cef9a91f722c1a","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/6a08a6ee76cb6c6ac7e94218149934368722254420c4a9fa3f030dba27df5c2a","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/e96bd0ddff5eec801a6dc86dcdb1cb59b7b6f2580c0965f650e4eba4b801b360","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/164a293f4244b26f7d3c554ce57393a056ec38d2ab87dba3636cb19e64672bec","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/fd9d2b8152519ea622718ad8fb2384c3cc41654577cdda443ef35f52ee62c960","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/69f655acf418ef0d7de75d4bff9687dbc010130ef2aef94a998a923b92c74adb","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/6bcd1170bf28860c83f23e2cf3eb26ac15b68b849759c34d5f2f1743cbc8ed9b","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/e9e45d5ddd2ccd0d138a06015e6b5745f20ec15af41359c679f5b988add41187","label":"ThreatFox","domainType":"other"},{"url":"https://bazaar.abuse.ch/sample/42abf78ee991b05de5ad78dace7dbc6d2a7a86fc08864cb318ed0aa61304bb17/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/bcc550bae28d4a80bcf9c60ea576c8f2dec0cd42cb7f733b74fa0e4f975141c9/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/3e67253f6bbe3aada4bd2480b84225c2356dcdb73942d7541ec9a4dbdb661961/","label":"ThreatFox","domainType":"primary"},{"url":"https://www.virustotal.com/gui/file/5417914f3028ee7f349add35c5c3faa5b243995cfb2100a7e03d7c2a910e06f5","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/84bff22441b874e62073564787871e2bcd14966bc3a032b6e56dbff34af57b6b","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/89a25311145ada1664428064bc5b4ae16ec3e322b1399f3d4e753de8aba3ea06","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/159cfe6981c827b9e92bc6b31f784e1fe91a823bb6c7002d0b9bea80f7353714","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/9b27f86b298180c99c4c559d5888bb70abf1075ba25729c1036b82939347cd38","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/8a6c2eef3bbdd41158818049082d0c5f88882d2fc1df3a4239dcf49698996cc6","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/21b282512597e9121548cd0bed1375c674cf15082a98592f6ee97334842b346a","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/35e354dda1bc49446eda9c1f9e9b807ddccbd6aa71cedaf600fdd9c221de10b5","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/ff49f74421a908b1ff2a4537d8607f71e68359eb7d4c4c2c96562f79137217ac","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/191371792deef7b6cfd2bc96cb95545a772b152734609dad21912de4749b0a33","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/0cb352b4b0aa7039af5ad26fb9cdf491ee852ce34bdaecd1dc84f2173846355b","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/domain/maximalmaxing.com","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/1b402fdf68777db3b1a3f185dc1c1d410f3683459fe0f0aabb4154d830e19c20","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/4d05b7ecd6db6ed76e6e5597f4e8a3f36ac3b55dd16874977b4b0db365291e6c","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/0c6a3ddee8bfbc0b7aa8107d93d449af7622f8ebce973b695fe1b94a2d459184","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/098f270041bdcb7b0b69a48fc8e026ea53e757525a699adf2a86c79a4fcc4655","label":"ThreatFox","domainType":"other"},{"url":"https://threatcluster.io/cluster/silent-lynx-targets-cis-governments-via-winrar-exploit-c567f561","label":"ThreatFox","domainType":"other"},{"url":"https://bazaar.abuse.ch/sample/bb518757a09ffe9c92755bf86d86d589204ece9869918c7497c8739825bcc914/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/cd0db04913047500d062f676d4099aced7ef039c7e12cebaddff6aac41def3ea/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/fb799fbe2729fa88358d32375c15aa41b2de62e981655e60d4f53efb4e4fee73/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/404e448f179f662439bd08b2abbcddcaaf0034d11d786cc878cce6f9ef57b570/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/1ced32b2b64614f3110efb4712fb65bb06a00518abc28fa261153c15fdd75003/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/5d025ebb4893f8ecf8d0af727d7fe2fd2c98adf0142f695ab859ca2606f3a195/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/07a491805b23d8ebf039f56c43107261a6d3a2014ae39ec513dfb4415220ca73/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/adf75ee4f08c2f5b2dda8573061b8678c198cb3aacbf7a1d1ca3482c4cd74492/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/315e87a0b74ad49053d8bfbb1728194a09f6fce0eed1ea4c29e82ca83094eb7d/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/7f14767fdb38ced9ddc50b55d0d9d23d48aeac103e68c6c9c34c70fe6da18202/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/3f02b386e3e5048ba3ea0ca195362bddbac7cee3c466292df256a917b83062d0/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/e1cc2db2413b52d2eb32452d55d72ad52b2c1c4fb12ab57478a51a70344e3043/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/8dcf87fa85ae6f9ddf83cd6cf9754d8ddc4f5eb3a2be4f47505b474a934666fc/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/750bfe4f7e55736d9c0489d0462db13375c034f7cdb8e33f1cea6363a014e3df/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/d82620df6807e1d65461d7a6b3a2e58aafda51b3c50c41ed1c84e8de9111c29e/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/bf9f3967885b5de87f18154601cd9a68125a21c806717d0329d2a21ed73ff485/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/71058edd6a2d93d0992a4ce10736a99070e28345dc14c66d7383ea9b5da9923b/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/fe797609cfa79302b8bc937b2cf996510fcee26146c54b59614daef3ed59aeef/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/de8aa6662b900225eed2e0727924a62b0b02171129c009e03d23068c7d828c16/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/c84ec5f635645672d1d5dd6a0c43aca1e11fa6aa0903396a14af0a21a472437c/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/001bdee1b3ea49c4cf6ae5e117e2093d3d0119ba0d4688b76bf70e1497882692/","label":"ThreatFox","domainType":"primary"},{"url":"https://www.virustotal.com/gui/file/190d1a5cc7289a6665339693cad778a8ae62525b612b5ce396eb3e40b7fedc1d","label":"ThreatFox","domainType":"other"},{"url":"https://bazaar.abuse.ch/sample/6c118d4bd1a56f56756b78134474c2a5becd3f138803d3297155691a427f6524/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/510c4b3b85201eada32ff69b46e605f384ba5ff4bbcfb5399e42b31a7de37f63/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/813bb6f2bc378364b4a0ed1405fe6ccd34a1510c4c94fe98f5908e6514999c1a/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/aa2fe64a8b365f79ba99c5cae660602063d6b555b3dd2e40d05f5293ca2c2a96/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/f2c7af231a3dc1a9291a2421d2b67e3c6ed829073fdcbd7aeec3c33a933d2f6e/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/d64921058e03078b75565d5aeea126e75698f39be3c6387d17c5d9fa8536d0ac/","label":"ThreatFox","domainType":"primary"},{"url":"https://www.virustotal.com/gui/file/e6490a700b965a6dcf264eb1e8291217d9e52f167470d70bc24806697fabeeaa","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/4d0750c28f12107bc0e795b52895e27bede181fd42ac61ab634049e029950a78","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/c55acd844b65a035da6a617931c6e27876d80193e1f2e449179480715c54af8d","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/c566ff69df0f4e054dfb1c7339b66edb4ea24fba96a4d84f03e8d8f333364df6","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/b5b2baef7c88e06f741c677d117bcef5b97ed48c2367c7995710e2778106a753","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/c548947ab99bcf73a57d4872479d8cab3a1014f4e64106524e75cfda6ad19488","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/7bca72b4fbce423150db21ae8af95afec607fa84445fe664dc40d8564465e1e5","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/324de8b19e5be5f6e86b5b0d594f9209ffde06f55e79997cb7260183fc6e3367","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/00688ae85b8041d81832b0f7f0552b7bb2c84b46ac72c1e6bcc5ff71ecefe2ec","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/796fd2f47ba19b912e7923cf2cf8225869a29459b330dad294ff54a923337761","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/f401de4eed7ab6fabe85593ef82c02183353945def29db02f4be47eadb7a2879","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/5be067bb27c2387242d019b646823fd30593ca8c12319fee316fd105aaf0560f","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/21fd4621502f4fb9240b76333ed40f6097f1a4a7a9359dcc20fe198f49eee5f8","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/1c40ac1b4c9a79ea6077b440c3b7c176bc7e34535b29ccdff8171d0209df359f","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/57472f87eb20bf1a2e3b4dcba5d37d38f87f1769073e311b4095552a6f0c6470","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/e8453cdb2e9b6e5f4777bbebec65282d5cd5399496dfce268d2adfb2d1e615ba","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/6461311bcc3d675ebfdae2edc2044612fe993d245503a523ac96dd0390139685","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/da57728231344d24de415d0edd2e34b45548822813e9407c53bad697263603ae","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/5e4af631dbaf78d4ec26d83923b281a8877b9b5ced30fe79f34bb62ded7511f4","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/03ad802733201bfd34994486492ce660be05149498d6f4fb4cb86f87d889ca91","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/a038553e09d4b70e44f22908000d628445bf5b749b127a3e59ef0f8e3262a7cd","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/29db561e83c9f2d88fab3b27f1c156a0c95481bb3c17fe0a357878ae599f8523","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/0000c91778c1bee12bd082b4b741623f47c87c7f698d8e04e388f00f492f22dc","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/7063eb317ae6f0af6ffc158544d8e230e9e99e561995a1a82a6475f893b26e17","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/4c91c3452f6f2f088f4bef66f31aae78dbd71ff088f2147b25e2b4a25bda3204","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/f6786557765875ccaeb53419708587920fa3049f8c0549b38805d147ba00025c","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/77e7716769278c3b39fd756621328e35d19854f088a591a67cf0af4cb463bf26","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/e6b9564cb4d675439cf08d0e16f997e7ccaed8f9b2021170ce8f1354dcada775","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/bbb24447fa3a8463e09064b74ec6861c2d53dc604625f72fbd3a708e5ba238b0","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/41421c91f617e37255e11c622c70198d3bdfc5ea1e6b9363861685131bed6b16","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/e80abd2203d6ccfd773b071dff6e509842e24e91b550cbc2ce7ddcf79e051d72","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/c1f4e8d18a63abe52660381fe4e00228b363bc054c93a3cc32904731172a3cb3","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/2613af9b3a947f733f6c12be766e9794448106aa3b4549314134c557c7aade72","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/fc223e5e1386757c7fd06b94630ff2a2cfa1adcd8803ee64aaf28bb5b87a593a","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/ae46a1502212fff4ffb54221c8f98959981b5a2f2308b1a6ad9e5dd1b224fbc4","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/c8264a69c08a370932df0e805052a5271c366cb39b3de80f2ee721e4d0ce94e9","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/07b0271ae96fa7ba9fdae9db3d6a515fcdcb0379ce0f8316b0f837e82c2ed0af","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/151b86dd6de5829d11a58e3b8d343f72825e4a49a6ae601ab48e138844d414a6","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/4a09d3fdb1e3cd30f07f4942f5733dbc11ade71b36b41fecf3a5792b4098d9f9","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/de8ff8c9634a91032d66fc10056f11aadf0350d4f6653447476a5535f09c8997","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/ba902ec4c0c4aa948c6e64cf3a750472f7db8d21ffe89a841a80622a4fb9744c","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/3b65af2a918dee97fcda1c67ad5fd3ff4358ca0a86d06edb09b1971fd6d62ba6","label":"ThreatFox","domainType":"other"},{"url":"https://blog.efespain.com/en/chapter-32/","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/66560b1d6fbeaeda88cd9b8cb60c6a5f5a0566671cab18ce4e9ea76ea01c6919","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/8012bebbae6ce207e8eb80ec1fbedc2e3671febb8076c4d169ea7697c38ce48a","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/174346a59ee8838aa96f197cc32f387301f6184dcb8c1a68f9e516983e53387d","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/c944cca192412a63599b52564a6a7b71cd70360786ed81d1fb6e750a9c3b8eed","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/24906c1f9e68e5cfd165a59b92e00ea913a6742ac7133828fdffcb6fbf653407","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/7e449df26b3b6751724b79c56211dbf6364bed247b4c3729eabe17890d2f5301","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/005eb07d1867258965d547979e7dd0b17b38b7525f2b16dccfaed606c19543aa","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/22a90f21aa084f4cee778b2612365f9ddc28dc8f5f0f5872830cf80a7f10f50f","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/a5dd74c068eeec19470d9f62256e1830f5715c56923aa0280eb54cadb137285d","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/954f32e093370efa4da1d783c8b594243f95e7ac7bfc2ccebe0c667b8c55f7de","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/9ab2244fd7dd63b18c98ec9c5e7121a4e2be7d97c373d9c568109bc4c7e52676","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/909bf43fe81c178e2a75d914790ba62c09744c47d99054b1c0e717ae61a4d00b","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/2ebee7fc1dd934ad42bd9d67ac013778953241cd3c8d67faf01c45e0bd125f15","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/7d726eba93c51f7156b031ce1c80a6d5bbe9338689da508c2ecce72692264387","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/5b015deebcfd8dd242d88ea20354b7907284cb2bb004e463fb18feb36d5d546f","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/6f5de2a227a53bbed2d2b5eb1358623bcf2516a469f5fd87a32cc03a0cd02a0c","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/cb8f15a422c7042992fa0a8ef2477fb3526bee7d52d6ca5f4a3917d46e01373b","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/d62461075ab948cc267d013f737b320a4367f2819024ed7ecdd52d7450b1ec83","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/efc0f30e9b1c8e4b1479006ecdcc95d5d4fa0627af8b294a6babe57da17b58d3","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/8f4e0b918ba5b5b8769e08f04e4aa366acc0159b3a1179b321d776f49006c940","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/66163a1a120bab4c0578cb1e44ae3aca6a70b276f19e6934d766f96c80451dc6","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/104c36235c59c5519c5db3ad607ec89128b1ddf27587ac0522f39b7137919915","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/f7154cf7168bdde487a9e4d4e5f1655a2f1735757d7196d3d657798dd8db36a5","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/9b16036e4a700f0a56aa83df448a53536a1d59a34245b49ed8cb64607f7f478e","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/70fff5511412a20f81cb5dd530212422dc15caf60185d77309d5f87c35df36fb","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/543d82372244e6ab79da55863f0b322457dc1e461f4833f073d0501236c143ec","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/f9c566d92202f0139b7a55c59f57c7a7de402d436ca18e64c8be180f51734781","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/014696bc15b640ca3b480fd0ce1283c6f99687c9d3b45af18666de5e303e4075","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/fe1363f77be9a4e425487917d4b37bd0e2a31177f223520769b4922374a26f0d","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/86faae18773a4bc50538786f1926391a5d5faacdf4db04e52e0a76de8461ace1","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/9f6a50eeb9f6b6aa918fef32639e75e4bdcf47eb7c226ec26f6075376669c6a1","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/d86c2497a43fceeb5841c6b84cc5611ece018529e93312d8814c3b0ba3e64ba3","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/34a014f288c4f2e8f2d01d58cd84c813253d9b4f2fc4449adcb3225822303792","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/0f48c6ae39ccba9c337f1b16482b946330181c58fa66bece7e89ea9ecfb0a454","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/23460d9b06333ded0de5e8dd0777de591c80905d7c99c96ae485c02f8f8836d5","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/d62e373338fd3c2cdde6e73fd6213205f6f5f8da48a288b54d42a001bfbf74cf","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/dc53f410a3f2483a3448066046dd955787c7a59473fa997803161525d77cf5db","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/92052044606935476c23d5b24733838019e916d3bec16eb9e0d22eae2b8839af","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/808e0853745cce580fb9871491f9a396e2fc9782186fa1f3713e00e6397c91b2","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/98fcee090ff821f5c24a956b142b85487ea63e77e63ee3763357bc4c5b588ce0","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/d18a59ac6cfadd3ae1e9994ff649fae5cf43aca1cfc797ed5499dccbcb6d36f2","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/9d47fcf063bba75a390e48f2127da2ad8e650902cbbf980693f882c0abeaa7c8","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/9d44b9cb6d05e0644311ec64bbd50d414af03d114663f715e5a9cc4405c2fb98","label":"ThreatFox","domainType":"other"},{"url":"https://hybrid-analysis.com/sample/104a6e4b1da8f7b42bdaf887b82f2c12348c6b1ffe52d1de2d964b6329492ad7","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/e886787dbab479ac0da1774555a38c6f4bc98a3b58a4f38682dd741385aada13","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/28b2271555f8e7aca65d2092a7fcf2e7ece16e064e45230bc224435d9cefbb41","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/399e96af8e78a175a3e35b018cd8b2e1c7402f72a1fa9889461c1ee4dcc3dc6a","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/0babc2a7e4b250f66c0760dd4736930fb9d4e611570a85e983ffe724195856e9","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/5b0e00029c234ac5e423da030c4aa2280e19b82da895e4abd7cef01841257d29","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/01d6c151f944b25d17f351dae3be8dfb3f3d89685838646704f1eb55bd4327a6","label":"ThreatFox","domainType":"other"},{"url":"https://bazaar.abuse.ch/sample/463f56104d5b9459918a39fd23d28937c1c7a1f88d8c3b6e48d6755fc0bbb7c7/","label":"ThreatFox","domainType":"primary"},{"url":"https://www.virustotal.com/gui/file/d2d9832b98d5ce6f17b6f03faffe8976858e531f2cd82c0ed8d463f68a7bafb6","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/8b9985afb591219a78f1d652d53593316f8ebeb91db155a3a55ca594bbda26e1","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/73f9efe6d64536122be91ecda713425a0112e6aaf35fa5d80ced7ac9510b9de4","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/7daff06433984f594d4cb5efda68bd08b5cb07c3542ddf72182ca18ed205b0c0","label":"ThreatFox","domainType":"other"},{"url":"https://bazaar.abuse.ch/sample/3bf9ac9cb26ecffd2ab26bb14c81c110b53fe31c196cc774291ad4af804023c3/","label":"ThreatFox","domainType":"primary"},{"url":"https://www.virustotal.com/gui/file/26bdb60a09509a4747cf622cee7073bdc639f849169232294d992ebd2f38de21","label":"ThreatFox","domainType":"other"},{"url":"https://bazaar.abuse.ch/sample/5b3c6ec6e558bf2e4dcff9b8f810fc5522cb9ab6271522c2ce8b0f140151ba8b/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/51ad0fe8782d9756f1fc647bfd19e649b1b3e55e8b641a295062c935c1939bd8/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/ecf0f6b181632fb335c800bcc77cccc5584bc15b5ac594dc68019f05081c3d5d/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/322a9bdadc796f2b2a7459b949ff367ed3258e9a8eefb1af161b557418ce845d/","label":"ThreatFox","domainType":"primary"},{"url":"https://www.virustotal.com/gui/file/498ba9404e73593b7f001d93b4bc2793874e453735fa2faa9922502ed2cbf0e1","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/8d90fb76ca3f4c9e98ad5d62535da670da70e204f663d406bca95648c97f9db3","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/6e1feb77724a6f6ad4f39fc144df7d1329f142cacb7dcddaaa4dacc080f56f03","label":"ThreatFox","domainType":"other"},{"url":"https://bazaar.abuse.ch/sample/8360a40c7eb801b653b9f2180c9b3dc49fb9c6ed139f98e2491aa031f69052a8/","label":"ThreatFox","domainType":"primary"},{"url":"https://www.virustotal.com/gui/file/a89b00ed2d49121d254b7fc32bef6310dbce1917c16c8712f222833280a59a6f","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/94ab1d22e7ccb350d1c387b968bfa944a1dd838cce94981086ddcea5bf263d01","label":"ThreatFox","domainType":"other"},{"url":"https://bazaar.abuse.ch/sample/e5b790c3a237edc2c55f01a7c648d0eaf8e969a1a9223aff605a90a1d42900b7/","label":"ThreatFox","domainType":"primary"},{"url":"https://urlhaus.abuse.ch/url/3948114/","label":"ThreatFox","domainType":"primary"},{"url":"https://www.virustotal.com/gui/file/5861d36ffa3c3deea7ab3b6a1faf4ee0af5dde2ae9fe491bdbb6b34c4125b7bc","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/1bf4dc1d2448f385e9a835dacc54829c7684e0cde63cd3f1e730d5bccb8c8870","label":"ThreatFox","domainType":"other"},{"url":"https://www.joesandbox.com/analysis/1844466/","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/c46f49ceb9be60df6d19cb3315c070ae3aace0e8f2fd5b0e8a5dc702239c853e","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/33aca4f929173c295cf0123ec5e1def8f933eab58cedb531f6c47824d8ce71f1","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/58d6377013e84355c3e061886b126a73727aa06cef840a51d82c85408b33fc41","label":"ThreatFox","domainType":"other"},{"url":"https://bazaar.abuse.ch/sample/fc2339538b89590367cbbef2fbd3534a6ba5574d239e28a7099bfdc6c35a25df/","label":"ThreatFox","domainType":"primary"},{"url":"https://www.virustotal.com/gui/file/8be667bf64b28ca87943eec3e5c7042efd509a0a2212b3490869008cc183c39d","label":"ThreatFox","domainType":"other"},{"url":"https://bazaar.abuse.ch/sample/d5a8157be3b6069a336087b0611e266ddfcd062d5c2674bc8f16d754ea017169/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/a16051a12512942c311bbaa96fb31bbe1fe56568ef879d238395d498cdbd2f2d/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/3874acb3e5c6f472da7df4ed3dd354c882ada48dd7838ec6c54ef2628d204389/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/49902b8647bd496b3dd9537bcab438ce9aa31a36faf0b51efab712e09b70d56c/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/0c4899656aa98daa195ecd372fe4bdeaaa4bec7a59212de2dba415a8b4ea310d/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/6546bdb224efc722030e60a0eefba1b327094081218bcd6a597f581ab326643d/","label":"ThreatFox","domainType":"primary"},{"url":"https://www.virustotal.com/gui/file/9346df55daa34090ef9ed71f309caf34b63d97a084152305839eba6ddaf52bf5","label":"ThreatFox","domainType":"other"},{"url":"https://bazaar.abuse.ch/sample/a1c9f2ad378b80cece5b79f6d7f50bf66eac217d233e69101ab53d80bfde75a6/","label":"ThreatFox","domainType":"primary"},{"url":"https://www.virustotal.com/gui/file/3554c1ed46319cfde2c378f3a81a63476e81a763d7f03815f2af89bc5d34ac64","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/4fc6feaf864e0990829d6384a41d046094b3609bf34563ee6aac761cc5eafe52","label":"ThreatFox","domainType":"other"},{"url":"https://www.joesandbox.com/analysis/1844466","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/a9e85e9d0ad8a6d1e30df2bae6cde7d2ea19db1408ba0c5995314eb6e41a6e5f","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/362bd80c120ce69dcccd9ccf04090c4397a206ddadf5dcd7bd68244e3611a262","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/7fd335829658c291885e8e484c4c12027136907fca5005dfac2f431a5ffca0b2","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/fab07ee3a34dc2af9d62b12e5d47d117d2b702f331a52120954ae3252107b7bd","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/f71320a75d89ec47f98d6000d21553a68254f06cf7d34206992105ae70ff29b9","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/f49471484b15c37aa405fca5f95d448afb8d3511bd127f7cd408b6af4a0c6656","label":"ThreatFox","domainType":"other"},{"url":"https://hybrid-analysis.com/sample/ee0f75420fd4ba24a229ef92ef80212fa54e06fbfa48ae3e8991bc94155e8130","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/56a180bd6a043981a85f357ad989579cc5028139c73d6b698b282f4906061655","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/e86413635d7a0b95a0ae99d8582d6cabe2dd6aa36e3b7b2d47cce966f5ba570b","label":"ThreatFox","domainType":"other"},{"url":"https://hybrid-analysis.com/sample/cefb465886bc813ac91e9ad5b1835eefe9828f251b58eb0da012ee4022ff6d98","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/c217cc02dd329a1c71c332f04cd0143298bfbec5ae9a1e4b0c476816a65d65b1","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/1c2c786fd7328d872035669f97e55e9f11e0235d83cbbec352f1c333cf10466f","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/62e7f379e176bc5044d865d89a78bbec25b200fe877b0954bd3ac26ae89d8047","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/764cf3f6bd0b4a6b74bf015d1d5ce988be631b9767dc57a8fba095c64a8bc37c","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/b1226243ff5d2a5f6e69dabcbe03782972bcb4b13367d9d18bc9c53e6a68d1ef","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/51110d845c7e55a01ca8efc7fdc302358de14a435178041b5957c40e7c605438","label":"ThreatFox","domainType":"other"},{"url":"https://hybrid-analysis.com/sample/a44be1d5c4c4f4dd4a576708c78b955005a51c4f78fe9df8bf173b7fc5fa18ca","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/65643bccd84d81a1abcba8b7775a4cdff4ea05af1b7fd25c89a142858140afe9","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/faa647c0e0ac200a26e41779a31473d4de6a2ad855bca618709afe4d411ac773","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/e93de53f1acc47bbf70f77e5bae5c6f7af2adc5f3ddc750127c4aeea64fc4b39","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/66e39783549a168d618619adc595c11af81ed2765a4e4f8aa14ae61dace613e4","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/5141d009f414a3c9cfbda07d9c28be32829fffc001fb17bb9fb4c8d4b5fa150b","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/3b961fed369ddcc9de285bd2c8ae274260b0af0c8f32083d614ce80b8b26d3ee","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/1771355f1a58be5a59a0c4864fc49f10f8facb28e765eb5e6708ab6d96a337f3","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/a92704ef6041c32eac9cb989024588b18c0c2141d0cb39120f84be4685c5e565","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/8b3e70062ba4a39eaf7b56b49b5d3a9a29ee01c3a9635a17434c47e39af62228","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/19b6e55f371758d913ff21780f21680752e81f170a482a9124990305765a520d","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/6d0e9b099c6fab4f8fafcf83b380df6b817df0a06fd041acd64d37a8f2cc909b","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/3cd3cac10596820b929eda2e13a110c9734adfefab86872ee5573f4bcea787e0","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/530a0fcceb59a79c9780e89d7a0605fc0592bb6caee1248de6cda112036d684a","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/c218c7836b22979e9889d464dc8a729ad407aa0f0ecb1e306305ed98d91b0e31","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/6e4e0b1a8238f55f313bf64bbc162a51d971e93811136a6fa402b7128278ea63","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/f9b55b2953762b0e118b1bec799d0bddc9cfe49f170da2428b4e6ef5ae31b1ce","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/0a6e8e9e9228ec2120792daab607902cb5071bba0faaee8626ab64f972792088","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/8a7d7f9830eed676a490689cefe2c4d67376fab263e3ce80383e97e052d74bea","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/7b8217516a94208e67743c0692628d03942cf700a4c65629eb9cf1cf1ad32a7e","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/2e4d616dcc7f0ea352d5eb45d301314e23a3cc8416dbde526aa3ad9f4523554c","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/4bb96aa2be066fc800d624497479a135f8c3ea1fede0aabcc6f3ab9445b6c7e4","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/0ecf1106c3f148601a5bb7c81fbcf49192a64201ee41e6b6a5a9ae130a07b2d1","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/45fdeae9f2e04f037912eadd4716326268e666f27fcbcecad099bfb6e6a18001","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/40b46faa65a1757b46b426ed86e612ec293d5e36b6fee7e701d240a52c9ce990","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/db5516564090e965e2eafee0a9dff3b71c7ef3a46aa9969e72305814886927a6","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/5040ff62259cf8740de327d5980b20de915bcbdf6252bc7bfa1e2b662a6a2003","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/b86c9489a4936115c59924d359f5d2cc376605460270c15032037929ac4f0a13","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/9324269741c054dcea939f6ec560651b572ded4dd014a0eac753d4ccc49bfd59","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/27d0b4fd73264be99950d3ce1e2473f2761451b3f437a9f731ade5ec0ceb1d15","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/a1992528ac616877af05934903af2f4afa145f38f9398d48ce941f1a84fbafd5","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/926999f8a5281e22179dea84c71b2ac108be185a6d954c573786308e457df8c2","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/c3b8375f092798ac851bfacdb94310ccabfebcbe106f6e7324764a0e4fd4ea57","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/7bcc530e31cc46fb9fc0acabd938d2c848c8de69c0e37d6b7d9263cfd4a18977","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/a3358d45d9b172ccb27fd5b1ec076347e3226025e20ded26c319c5804171be51","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/3f8f34747f212b978db927ca45365ab2a416b8149ff93ba625436ece55f92ac2","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/faf572c1c989ca17101d5003bceb8b4796e709b93bf014f642b2a2c4b7b77fb4","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/a208b24088153fa3ae18314706dabcf2a87bf9fc3beb1f365e1e12e4e456cfdf","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/a8445594db53755f9e9cd8aff30875811088958ef3fe99865708944455f3580e","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/185a948ef2cb1a0338dbcd9e8fdd268bd5e906cb23ea3af4c9721b2410987d7f","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/11767aae97c4226fdbf49fdcb9bb9c1e66b6e0c8454e939cfad5aad7a1591daa","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/a12b6a5a9895d3d92cf3481abc09751abe3da73fa02c250ff458748eaca13c7d","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/58bfc66913b3b99705e2f39d6a23778414c940cb2a7503ce8506fc200589a077","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/846b867f59c0dbc7cb2eee1844de6b8313c10ccaa68d4313e99e8cea306379a0","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/260f88bfc0e6e61ccb401cd131a43014461151436efdec2550e9f829510ad411","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/5246a714a240a04f968611b42a5021aadd8024313f9dba328b832f7d04cec2e9","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/62e9c335a427a6e47d3a207e61dc4c52c57c13de82cd514f691f3f891ec225ef","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/3045f39842e81bbb3c18e7f3dfb9872928a1ca58bef21800bbb5aa74b75216d8","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/aa2a4e66e81e492392b4e1c78fff9635fa63fc2d4d7f4c6b6438367ce4fd9aa1","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/714d4d3235dd25315c3396e13329342b14fe33ecffd4628d9b5c1481daf72016","label":"ThreatFox","domainType":"other"},{"url":"https://bazaar.abuse.ch/sample/e42b8c35db5ab7169327b9185c3e05db4a156e8922b985da61bcbd6223df8aea/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/3ae3d11cd46aceee81783fb1204c4ae43459e670a8071f76c8a9a5851287a965/","label":"ThreatFox","domainType":"primary"},{"url":"https://www.virustotal.com/gui/file/329607bf10b6d19006009a561e8e09cc450d0287e84e13980e48b76c94d4ac90","label":"ThreatFox","domainType":"other"},{"url":"https://bazaar.abuse.ch/sample/1e8ed19e771e7a9378daf3b3652802143345db8ea4196e560e54f28176ef958a/","label":"ThreatFox","domainType":"primary"},{"url":"https://www.virustotal.com/gui/file/f2a60b9207d24dc6679c9ec78d63cd3bb4519da12002189a1a517834c6bddc19","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/1f5c9db09902fc4ed8cb39808b96aa7633c4f158d713709bf971af323543fb1e","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/961a6bf3f05911b8b73d639de7178baa23cc8d9ce54de4a6604a977bb1532b6f","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/574a6b2e66744dcd85d691de6797c4544c34d48e361b4fb9579b3cc292fe7085","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/6ee8d6f5c3f2a582f738d047f16608f3ad4dee277f2580da6028afe370b3aa40","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/606ab3b0ad1b3dc635b001104d5bf7a96d77ed39e2df448fbd74017cf0cf823b","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/bb3718a591589b740b96973e8cd11e5b17519f0ceaf8f126d03da9ed680c296e","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/688804b19001b11dd2f3c1bdeca399b897ed8015c3024e0f2586ed4f7a125ee1","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/3a9175dc1911935956c94b3dc4ca13b0ba4a0f2881a57bb6d772e2d88e75b888","label":"ThreatFox","domainType":"other"},{"url":"https://honeylabs.net/lookup/42.227.203.38:54878","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/cfa34537cd8bb9849b9368219e5841c705cfd59e93326993f7c9827d34c8b43d","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/a08fa2bb57a0c30c7c141ff36e121c78307098fbf91f3efa53c7d98292c57af0","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/09e573b4c53768d60802651a0fe5b81a70d53660b0c2a9d54ce076fe02340a26","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/52c2e8b1226fd66a1e86c9ca7ebfea784137a8d2dbacc4037e0d4d052e900c2e","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/cc7c3eafec8df3b8de10dbeb577ad135f5a0cee61e1e0241e1a596aea0eddef1","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/a754facc0f267b7a76dbd15468a41847be8561636c8cb1652bcc01c5368ea63f","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/6df2777fa6434ab6848a387e85590b6638d1b7e1296419d83733da573ce57784","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/4486c71a06a57cc3f60ab7bb6e0e761d06ba269db9a0ce122dbcc046136d6206","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/628e06c690296367d11a69d357686e39799bc2130937c4b40bc4b3532c52f8c6","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/2854b365ec2dc32311bdbd9eadcf6d0e1d448e61f7ccccc3dbbd25d1abc8246a","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/01a0cae7eea42524f2f5e1a72aab2762c6ebcce4c3ab0b0f358406604ad606ae","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/fa37b294832e59b0ce184a8f6685aa7aa99a1628723d269e4d6c801aa17dc472","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/bbd80fedf15cf795fb2bef1db546323f341a00afbe2902bf95b7672a8a4dd574","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/ac5d2f1bb078fed0e6712fc303d4b3a1f90c2f757f4a3520c9ab5a4bc9a49e78","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/c2eeb788d76a220e9741fb1608987d0909034477299d44fa55142d068bafd2dc","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/3c722bf15f408ae9a8c5e51986642c605364851d5c7c6a70158e8a71ce65470d","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/1728e932ee72f007f031c0a6647c1c109aa86e87e810bad5a90af79a875d6434","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/afb31a7b55a98167a75b7b8198bf4be5c98a14bc8bf23b4b8cc9f0020262e053","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/093740f077302c1b305938b61f18ae29f37a45b6627c027887f6b0449ab6fb88","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/24ee5f1039322c34c180ae356bc6adbd6a00984166df6af4a349a72c7aaa1383","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/25bad25167b4026b668e1e09fc30249c9bdd034c221b81dd7d3dab15f6cbf3d4","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/369b696d3336f01c2eb63d6a2e0a148f5c71a198ca5d24007b0df18c6e7f9e4a","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/c36acf564688a6ab3a9b0ef93db1f3594d0f9971c971f5058bea22e750c40b57","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/40fa4235a99ab6a81cc74b6a1f3c2ab17a3a11451b05628ae11a44f361af75de","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/0f70e7c1e05265fb05461042efc73df55a8d1dd22993011aa1724b65e365453b","label":"ThreatFox","domainType":"other"},{"url":"https://hybrid-analysis.com/sample/e6b0de2d1e40e60fe6aa94621e4bf33e567657f13b178da9744c6b04894fea86","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/703d378499158fea0648ed9bd8d45a5940607b860bb295ede21563f8feeb3b57","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/d6e76cdba3b64c8733492964976faf6de9a36bc863cb65fd57865b7e4fd869a0","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/71106af9f6f6040bb69d12cac6442d9482f360d8018403936ed6a6c3e9f0ee51","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/dab539c8ab305cf62dec76b77f619e3de85af34a544c1582768882028edb3393","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/526cd1d38d1b6ba33764512ccc14929039e89efddf61ea17765e00e7c7b0c8c3","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/d36e3c5ddf65aeb9aa3828845d3c0efc66e11c5d536d263049858a40a4d0c129","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/a4702449c7d794ccf46b92053a6b1517739415890e0147efe6aad96c683f4888","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/b13de57505edea3858c69eddd66292767f12ac2296876ad075cfc9e34eca3a7c","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/cbf5a4f264d778ae60e835d32df673c4ee2224c88421259a19d7cabbdd1e18a2","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/2e7db0451353ba2f128333ab512f388cbc172f3d2f81766c3a14c7cf153830a3","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/48a562bcbc96eb4523e8615ea05e76ed59301dc3bbbf96d6536a37777eb8958e","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/e6ce5525512e01f9b3a6a3a659cb1ffb578c50ec63096d6cf5a75e194421b4dc","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/9eb4c83decf7f9b3f31001de6404ec6c7bc214304b372b3686e6e7118cea4dad","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/fdc7fdbc7a64f030002b16436cc2fec5694392a8da77751156a8c28039474c0f","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/12d5649d59cdd8034def4a74f3db6a2dc24c80a59ca3505a71843d284332a6e9","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/e11db3bf8c3a66af944fdba35762148b825a704c4792008e93a80395e47c1632","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/778be86551e061288e0f3dbf1237f6b067155170f08a884bea463b8415fcb170","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/37e6cd883240a67eb5f6e88e681978563e2ea6371beb9096d362d39b1a736df4","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/6363fea32a30affca2ebbbcd28fe60f5f6a4122231a80b280eda6f9523be931a","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/d34df68e192d8d688a49ac68c6fe60e7a75f18e012e8671dadc45cc90b832377","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/57a671a61a6fbebe17b09d9baa5712d3b0af8232fd807697183c6b1fb67286a4","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/09eb8bbdddc17ce5be1c176dcdac2b812414fa3691ceb5fa81e7ef6e20a20f6e","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/f3d8ed915b2a53a35e52bd1ec39c21deeaa831ae0a969221bb7bab492938ff60","label":"ThreatFox","domainType":"other"},{"url":"https://bazaar.abuse.ch/sample/153ba36354b6be51e389dc81643f6c5799c6a317ef115b0a56343042845e9ef2/","label":"ThreatFox","domainType":"primary"},{"url":"https://www.virustotal.com/gui/file/f3b1c6f4350d34063cd7b8ab8b255cd40ae6aebf4963aff71fcb3f96c3300000","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/94fa6a971ad5f47af054b81752d471b920981b3ee4874a3823062417e7b36a9d","label":"ThreatFox","domainType":"other"},{"url":"https://bazaar.abuse.ch/sample/3b38f182ae0012adbda7d6f396fa9c0265d0c8f6825ee13314e74397c21259f5/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/5c5f5243923df0f7d0df186aea5e57a0afe61974d3b5661581658b041fc25985/","label":"ThreatFox","domainType":"primary"},{"url":"https://www.virustotal.com/gui/file/732589bd83261216a5c8029882f6819f785993af19e4189e6aebcec6cd807dd9","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/7bc3a8a1f1c7e8da9036bf834d1c73f9b813ca928341c9a2eaa290d13f3e42a4","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/bd057e7560e1eea69be473005de73c6c97be545d81caabb9723bcd84a66d44f2","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/eb5a4df6986f8534413178add3444a5fe58af16e8f500ab122b3096eb24646de","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/35b1308baa0c0a79f8431aca3988c4389c0e0f9fa3ecd4243295cd1707f53683","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/a9cd105e5cdf8b3cafb0fe9ffb886ab7becd7dbafa7c4cf0ce214d2d5e5686c8","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/1de24789010bcf294a1fa3c8a982d924ba5d212ada16a30dc8e16532293886c9","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/21c98c84b8be10a6907353d9a3f508219eeaab9359fe008da967efee27a36735","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/81c6588ff7720335ac09719e6230d1a8b885b8d10245c1601613352d861c0e44","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/421eca40073d7c1e542825a8bdaeabf252d8499cb69b9f5591427bf9ee619865","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/cfe24f9b882b88b7205f6f380872fa0a8496a37426fa048da1187326525e5a01","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/34455bc291e4769278f81010c7563c3aadac66eed2aba8156e0afd307a7a11a9","label":"ThreatFox","domainType":"other"},{"url":"https://blackfish-defended.com/research/zenith-kit/","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/15d7c75f777f4ea7800122bb8e5cb6bcd3ac8d23e1eddbf1076462443cbec990","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/7bf96c55c8b19514de16261a63a079e0ea0f136e0aeaba83a7da79c3ee0b965e","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/09e12a9e689710a0afbbac671a047cf2056285e7555e8dcbf7496693f5651cb8","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/a77493bbb1c5e2ded3aa4f8cb7e40084d80f57e5bbe10ccb05bf78ea5371eb6a","label":"ThreatFox","domainType":"other"},{"url":"https://hybrid-analysis.com/sample/499cb7ae6c385c77d3eb663394e552626621ecac74d86c8dc392f4098886927d","label":"ThreatFox","domainType":"other"},{"url":"https://honeylabs.net/lookup/176.65.139.40:80","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/7997b84c10941d97069dd9dff12fb3b6678564c4356e7f749c7179071d59ee11","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/1eb66cf083f9d36b561989a45737d12f92bb0765d286e1147431f221a27ab755","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/c58e8b009dca8e25d8f6ca11af383c569063e3a94423d36881affbba920c5242","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/3f6ec620fe8d14b56041aa1f133c8517e49ddc3056bbbbd384a72a9591be5e92","label":"ThreatFox","domainType":"other"},{"url":"https://blog.efespain.com/capitulo-29/","label":"ThreatFox","domainType":"other"},{"url":"https://bazaar.abuse.ch/sample/894ae89f56f352652cdb1f9ec23ac1c31f26ea648326bfd23c871636ff66ded7/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/db189ab138d838f20f1795768413d7e50657201c172617039425b75a4573c96a/","label":"ThreatFox","domainType":"primary"},{"url":"https://www.virustotal.com/gui/file/b2e10cc59414674ef02ebd9822754cc366081c350825846f2e61af5b0650681d","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/2734b04648223dec4058fa5371cb41c75ef3d2f1f1bb6f838f50758cfdd406ca","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/6ee79dabec97ffc6dbbb3ec7115b8c16977551aca5cb90ccec77a580ea2e3ac9","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/49e3cc11c904d158978479ad40b785d5d79845b0fc43b09122d3d6488c1dc300","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/aeab2a46685337814afd5c7c3a1b95697de2ea63438099d6c397b83011b5001a","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/63c973360d81debdfae4dbbe551f23bd1263e63da056aa0f6b0f373984112e5a","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/956b3514f38e62f398f2b62fb7f6a11199e127ed5a1517211285056e62d2e3a6","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/52bde62f5577811e0dd845c072a6ecae39f18e396bfd709fe1beb7b14b545408","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/934e41b60af233c1060226a741e678072142aceb942aa796837f0f70e9e60009","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/3eaa7cfb6d86231c6fd8a913254213373b438cbd2dc69972bea341c226ea8901","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/bbab66169a3718001fba30bb464bf48571bd82205b0e10c32ad1e78a92890838","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/eb4f1565c5c9c53bceeec57dcfb91384d8d53d6a696a32de774a47f59cd25dcf","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/b9cc60047e896f844e0fb901c51586c90107df9e83b6f5b6e300ba91ed9f8218","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/3267f01be506f81885881ac048702223ddfca3e17cf5cb4257e816fa76f05477","label":"ThreatFox","domainType":"other"},{"url":"https://blueteam.cool/posts/flomo-onedrive-sideload/","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/48915d02c38586a28005fdcaf52b06e68cb84a0151779486d4b15327757fbeee","label":"ThreatFox","domainType":"other"},{"url":"https://blog.gdatasoftware.com/2026/02/38373-pivigames-spreads-hijackloader","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/8e7c55e596ac463a6c01cf9400d3766a0bca7d4cbe6d95774e93b609c8d9f5ce","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/c4df64b6fd39b0caf8493ac3442caffd44c8c8770206d03fdad266490de94560","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/84511942c44419da61015b22721ab12e1ac93d857e1d9ad28065cfac74f3c8e6","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/d1ddc006dd617bbbde3900096129eb1544aaeeb43e6618023d7bab4c8c125a9d","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/a1efcf4e1c2ee9a4a887ec9208a7f69c0bc360677db147161cad1e54520780fd","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/b539c4cc58ba6c54d126e46c391a98f6619a97c859468abb4c5c299ce14d5bd8","label":"ThreatFox","domainType":"other"},{"url":"https://bazaar.abuse.ch/sample/634472aee22bd1319f78eb025ef2bdf0e699682138b2d1b7284104443fcc0e79/","label":"ThreatFox","domainType":"primary"},{"url":"https://www.virustotal.com/gui/file/3bfd259546c9746ae49fbf47a478a231d0f96dc6aadc2cdfd7f24753a1c54d92","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/61018a9390bae5beab034c820856996613d9ad122271bf615e1bee2d56bc3cf6","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/6dbe1b423fc86d6e1d3ad45fb621fd4a01247fed0ed0298b4f7ade95aacb920f","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/8a02d1826b114ffeeafafbe54eb816908b34970356738b8a1e5da5c7e1859bd3","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/2dc1de602d1af859042d787ac993d9db89e294d2c7461c5a5af178b7322085ff","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/52b99f5623d2c35e0f45119e9ac7c183b50b421ab73d01b1333706d857921b6d","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/700f16a8510983959cc2ba47648257427940c5fd7980786a998ff59149219f6e","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/e2d91710f9846418628cb5cbf78f0798ddb274d71273d1f40ef387ca51bde1d9","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/486277d29cbefcbd321d7c7ad5d72bf1983c110206ed607c6c371af7f7741308","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/b7f158c800fa6dd6b332815cff093498e851ff07e68ae04590cbed701fa4abc5/detection","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/c54dd8d6ea8ffa26a5056d7008e741c13829ec205445a0465fe7e149197c25da","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/d6a853da419c64f3d81892416e5d52a4ad11b6f4e9e6ff455cee11e1f02be4e7","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/c971bba6255c0a88f7fa852173e99ce3049dc6f11c44d038233db2056815e7ae","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/baff2658000b5e7f8c533a802691e87d6441e916df6486187e86fd9734a8c331","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/138ea0b71b71dd0ef5d66ddeed1e8f5eca4a562558fc68660d64a007d5690e1f","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/034aa4ebbf1d5cd13b082bc5dfe86cf4901db7dfd3ae9f0a2b1d622b4f60bc40","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/875cb2f5138ea7010e5b88aaf88610ce06aeffd65519fcf3b378c0e4bd9a8ad5","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/4614bb60faf9c9edfac1fa8c90d0c9f939a495cd47bea531142221f6919cabb1","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/af3654e898bb001aa571121049508f0b1d669efb6ff853c0bc1646e05145b2bf","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/ed77297087d4162a416fbc8c0be8359271c817798149402ce77c066b860d28a1","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/ff87ff324833273d1862a79de68a3943a247ce98ab5534df31116d498dbb20eb","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/d077f79fc37da1fe146165bc617d74dd24f9aa71be51e7ad8f6cbcf26d2fd3e7","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/f8510553bec5554f6c23a4bb13b14412adaff83a470b937b5cf92e5f29ac99b4","label":"ThreatFox","domainType":"other"},{"url":"https://bazaar.abuse.ch/sample/75aed4ff6c83d5ccd6984faefa7c0fe4bbf30c29a28a3c1f1901f33f6a5ce62d/","label":"ThreatFox","domainType":"primary"},{"url":"https://www.virustotal.com/gui/file/ccd13b2a939e83bb5f7500c6188e830d365021c4e1ffb3edebd3e538c4541bb1","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/f719a1d71332414c1621b0ceaa56485bfc80bcfb2c072d247b25daecd026aef4","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/0659679711ad071bf27a29da57e315149af48020e56a56ec8909349a410559f3","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/0d0d2757a1faddd1d44fbfcef027b0c345d6028dd72af9b305c4cb06ec8832b6","label":"ThreatFox","domainType":"other"}],"feedLabel":null},{"id":"otx-6ad632287e9fae87583d6526","source":"otx","category":"threat-intel","severity":"medium","title":"AOMEI Backupper update servers hijacked to push malware: Check your PC","description":"Between April and July 2026, attackers compromised AOMEI Technology's update and notification infrastructure to distribute malware to users of AOMEI Backupper, backup software used by over 100 million people worldwide. During three confirmed tampering windows lasting ten, six, and five minutes, atta…","indicators":{"cves":[],"ips":[],"domains":["storage-data.com","promotion.storage-data.com","aomei.storage-data.com"],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["aomei backupper","remote access backdoor","supply chain attack","upgrade-now.exe","update infrastructure compromise","software distribution hijacking","supply-chain"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T15:07:20.711Z","fetchedAt":"2026-10-20T03:00:00.647Z","references":[{"url":"https://otx.alienvault.com/pulse/6ad632287e9fae87583d6526","label":"OTX Pulse","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-112157","source":"nvd","category":"vulnerability","severity":"low","title":"CVE-2026-112157 — A weakness has been identified in MemTensor memmy-agent up to 1.0.9/1.1.1/1.2.2. The impacted elemen…","description":"A weakness has been identified in MemTensor memmy-agent up to 1.0.9/1.1.1/1.2.2. The impacted element is the function requireAdminWrite of the file Memory/src/server/http.ts of the component Memory Service. This manipulation causes resource consumption. Remote exploitation of the attack is possible.…","indicators":{"cves":["CVE-2026-112157"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T16:17:05.740Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://github.com/MemTensor/memmy-agent/","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/MemTensor/memmy-agent/issues/468","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-112157","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/1014862","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/422276","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/422276/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112193","source":"nvd","category":"vulnerability","severity":"low","title":"CVE-2026-112193 — A vulnerability was detected in Webkul Aureus ERP up to 1.6.0. Impacted is an unknown function of th…","description":"A vulnerability was detected in Webkul Aureus ERP up to 1.6.0. Impacted is an unknown function of the file plugins/webkul/security/src/Filament/Resources/UserResource/Schemas/UserForm.php. Performing a manipulation of the argument Password results in weak password requirements. Remote exploitation o…","indicators":{"cves":["CVE-2026-112193"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T17:17:14.340Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://github.com/KaranParelkar/Auresus_vulnerability/blob/main/Weak%20Password%20Policy/Readme.md","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-112193","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/973095","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/422296","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/422296/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-12660","source":"nvd","category":"vulnerability","severity":"low","title":"CVE-2026-12660 — IBM MQ Web Console could allow an authenticated administrator to write files outside the intended di…","description":"IBM MQ Web Console could allow an authenticated administrator to write files outside the intended directory due to improper path validation.","indicators":{"cves":["CVE-2026-12660"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T17:17:18.440Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://www.ibm.com/support/pages/node/7292667","label":"psirt@us.ibm.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-12669","source":"nvd","category":"vulnerability","severity":"low","title":"CVE-2026-12669 — IBM MQ could allow an authenticated attacker to trigger a minor out-of-bounds read when sending malf…","description":"IBM MQ could allow an authenticated attacker to trigger a minor out-of-bounds read when sending malformed compressed data, though the data is not disclosed and the request is rejected.","indicators":{"cves":["CVE-2026-12669"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T17:17:19.110Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://www.ibm.com/support/pages/node/7292667","label":"psirt@us.ibm.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-1501","source":"nvd","category":"vulnerability","severity":"low","title":"CVE-2026-1501 — IBM Concert 1.0 through 3.0.0 is vulnerable to Improper Certificate Validation.","description":"IBM Concert 1.0 through 3.0.0 is vulnerable to Improper Certificate Validation.","indicators":{"cves":["CVE-2026-1501"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T18:17:06.703Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://www.ibm.com/support/pages/node/7292374","label":"psirt@us.ibm.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-3303","source":"nvd","category":"vulnerability","severity":"low","title":"CVE-2026-3303 — IBM Concert 1.0 through 3.0.0 uses cross-origin resource sharing (CORS) which could allow an attacke…","description":"IBM Concert 1.0 through 3.0.0 uses cross-origin resource sharing (CORS) which could allow an attacker to carry out privileged actions as the domain name is not being limited to only trusted domains.","indicators":{"cves":["CVE-2026-3303"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T18:17:07.387Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://www.ibm.com/support/pages/node/7292374","label":"psirt@us.ibm.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112249","source":"nvd","category":"vulnerability","severity":"low","title":"CVE-2026-112249 — A vulnerability was detected in grandnode grandnode2 up to 2.3.0. Affected is the function Html.Raw…","description":"A vulnerability was detected in grandnode grandnode2 up to 2.3.0. Affected is the function Html.Raw of the file src/Web/Grand.Web/Views/Product/Product.Layout.Simple.cshtml of the component Product Description Handler. The manipulation results in cross site scripting. The attack can be launched remo…","indicators":{"cves":["CVE-2026-112249"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T19:17:26.760Z","fetchedAt":"2026-10-20T03:01:48.466Z","references":[{"url":"https://github.com/grandnode/grandnode2/","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/grandnode/grandnode2/commit/41a8e349eab8d9641cf6ea800d738f2d8991ca22","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/grandnode/grandnode2/pull/780","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/grandnode/grandnode2/releases/tag/2.4.0-beta","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/grandnode/grandnode2/security/advisories/GHSA-cvpg-48r9-fq67","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-112249","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/986350","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/422323","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/422323/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111766","source":"nvd","category":"vulnerability","severity":"low","title":"CVE-2026-111766 — markdown-it is a Markdown parser. Prior to 14.3.3 and 15.0.3, when the html option or commonmark pre…","description":"markdown-it is a Markdown parser. Prior to 14.3.3 and 15.0.3, when the html option or commonmark preset is enabled and the constructs occur inside a paragraph, attacker-controlled Markdown containing repeated unterminated inline HTML comments, processing instructions, declarations, or CDATA sections…","indicators":{"cves":["CVE-2026-111766"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T20:17:52.247Z","fetchedAt":"2026-10-20T03:01:48.466Z","references":[{"url":"https://github.com/markdown-it/markdown-it/commit/928bc8c11ded60181c0e7fc5aa954eec582e8e79","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/markdown-it/markdown-it/commit/d99f48839d37af6fd8a2617516c43dab90755503","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/markdown-it/markdown-it/releases/tag/14.3.3","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/markdown-it/markdown-it/releases/tag/15.0.3","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/markdown-it/markdown-it/security/advisories/GHSA-vfgh-jcmw-g37q","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-107081","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-107081 — SQL injection via identifier injection in the tableName and tableFields POST parameters of admin AJA…","description":"SQL injection via identifier injection in the tableName and tableFields POST parameters of admin AJAX endpoints (admin/AJAX_lookup_handler.php, admin/AJAX_check_id.php, admin/AJAX_vocabolary_control.php) in SENAYAN Library Management System (SLiMS) Bulian 9.8.0 allows any authenticated staff user to…","indicators":{"cves":["CVE-2026-107081"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T16:17:01.347Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://github.com/Primandito/CVE-2026-107081","label":"cve@mitre.org","domainType":"primary"},{"url":"https://github.com/slims/slims9_bulian/issues/391","label":"cve@mitre.org","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-111046","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-111046 — FOSSBilling is an open source billing and client-management platform. From 0.8.4 until 0.8.6, hasMan…","description":"FOSSBilling is an open source billing and client-management platform. From 0.8.4 until 0.8.6, hasManagePermission fails open for inactive non-core modules because its early return on !isExtensionActive skips the module-access and manage_settings checks. A low-privileged staff account with module-lev…","indicators":{"cves":["CVE-2026-111046"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T16:17:03.330Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://github.com/FOSSBilling/FOSSBilling/commit/7a7a30984b58cd1008a573fc70296a7653d8ae04","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/FOSSBilling/FOSSBilling/pull/4184","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/FOSSBilling/FOSSBilling/releases/tag/0.8.6","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/FOSSBilling/FOSSBilling/security/advisories/GHSA-3g7m-ph2r-jhcx","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-111053","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-111053 — FOSSBilling is an open source billing and client-management platform. From 0.1.0 until 0.8.7, the un…","description":"FOSSBilling is an open source billing and client-management platform. From 0.1.0 until 0.8.7, the unauthenticated api/guest/system/template_exists endpoint permits path traversal because templateExists uses Path::join on the attacker-controlled file parameter without rejecting .. sequences or verify…","indicators":{"cves":["CVE-2026-111053","CVE-2026-111056"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T16:17:03.487Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://github.com/FOSSBilling/FOSSBilling/commit/e6ca7731c6bce406aba11900a4450e89c4ebdb01","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/FOSSBilling/FOSSBilling/pull/4221","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/FOSSBilling/FOSSBilling/releases/tag/0.8.7","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/FOSSBilling/FOSSBilling/security/advisories/GHSA-fm3x-cx5r-wwgp","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/FOSSBilling/FOSSBilling/commit/19f41ff0a45874c7362b7732c8f68db84bc59c55","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/FOSSBilling/FOSSBilling/pull/4234","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/FOSSBilling/FOSSBilling/security/advisories/GHSA-x4mh-g4pc-wfc5","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-12254","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-12254 — Netskope is notified about a potential gap in its agent (NSClient) where a system with Netskope Clie…","description":"Netskope is notified about a potential gap in its agent (NSClient) where a system with Netskope Client while connecting to an access point with Captive Portal switches to a Network which already has internet connectivity, the Captive Portal does not close. This allows the possibility of abuse via th…","indicators":{"cves":["CVE-2026-12254"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T16:17:07.807Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://www.netskope.com/resources/netskope-resources/netskope-security-advisory-nskpsa-2026-004","label":"psirt@netskope.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-103038","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-103038 — PingTools Network Utilities 4.64 contains an OS command injection vulnerability in the Host field of…","description":"PingTools Network Utilities 4.64 contains an OS command injection vulnerability in the Host field of a Watcher ICMP service. The application appends the attacker-controlled Host value to a ping command, serializes the command as a single string, and executes it through sh -c. A local attacker who ca…","indicators":{"cves":["CVE-2026-103038"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T17:17:00.400Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://fluidattacks.com/advisories/yanderechainsawregurgitationfactory","label":"help@fluidattacks.com","domainType":"other"},{"url":"https://play.google.com/store/apps/details?id=ua.com.streamsoft.pingtools","label":"help@fluidattacks.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-107082","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-107082 — Slims (Senayan Library Management Systems) 9 Bulian 9.8.0 allows an authenticated staff user to perf…","description":"Slims (Senayan Library Management Systems) 9 Bulian 9.8.0 allows an authenticated staff user to perform SQL injection via the opac_hide and promoted GET parameters of admin/modules/bibliography/index.php, because escape_string() is applied but the values are concatenated into an unquoted numeric SQL…","indicators":{"cves":["CVE-2026-107082"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T17:17:00.543Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://github.com/Primandito/CVE-2026-107082","label":"cve@mitre.org","domainType":"primary"},{"url":"https://github.com/slims/slims9_bulian/issues/392","label":"cve@mitre.org","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-111063","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-111063 — AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.4, the…","description":"AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.4, the Secure attribute for a shared cookie is not enforced. An attacker can consequently cause a shared cookie marked Secure to be sent with an unencrypted request. This issue is fixed in version 3.14.4.","indicators":{"cves":["CVE-2026-111063","CVE-2026-111750"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T17:17:03.237Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://github.com/aio-libs/aiohttp/commit/999c356d61e966faffa97b06ab0d0455226d36c5","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/aio-libs/aiohttp/releases/tag/v3.14.4","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/aio-libs/aiohttp/security/advisories/GHSA-494j-54xm-rwp3","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/aio-libs/aiohttp/commit/9b27347e61454d9f8ca2055f4c67a37dee336e83","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/aio-libs/aiohttp/security/advisories/GHSA-pqxq-w44r-73xw","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-111064","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-111064 — AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.4, kee…","description":"AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.4, keepalive timeout handling is absent during the initial portion of a request. An attacker can keep an idle connection open indefinitely before sending any request data, consuming server connection capaci…","indicators":{"cves":["CVE-2026-111064"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T17:17:03.377Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://github.com/aio-libs/aiohttp/commit/be846822b4b3a5a54b6163e794b42dc06fba54a3","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/aio-libs/aiohttp/releases/tag/v3.14.4","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/aio-libs/aiohttp/security/advisories/GHSA-5wr8-gcqf-gqf3","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-111065","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-111065 — AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.4, Max…","description":"AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.4, Max-Age processing can overflow and skip closing a connection. An attacker can consequently exhaust the connection pool temporarily until garbage collection resolves the connections. This issue is fixed…","indicators":{"cves":["CVE-2026-111065"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T17:17:03.503Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://github.com/aio-libs/aiohttp/commit/9dd8eaf4e31f1237ef2c1574a8c82a739fca5805","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/aio-libs/aiohttp/releases/tag/v3.14.4","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/aio-libs/aiohttp/security/advisories/GHSA-6cjc-53gc-5rqm","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-111066","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-111066 — AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. From 2.0.0 until 3.1…","description":"AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. From 2.0.0 until 3.14.4, multipart request processing can retain an unbounded number of open file descriptors. An unauthenticated attacker can consequently exhaust file descriptors with specially crafted multipart reques…","indicators":{"cves":["CVE-2026-111066"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T17:17:03.637Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://github.com/aio-libs/aiohttp/commit/2d94633b7f1b4c1ba07d647b629a8440652b2d09","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/aio-libs/aiohttp/releases/tag/v3.14.4","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/aio-libs/aiohttp/security/advisories/GHSA-9xw5-w5jj-pvcg","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-111748","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-111748 — AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.4, an…","description":"AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.4, an attacker can send an absolute-form request that causes Request.scheme to use attacker-controlled request-target scheme data instead of the connection protocol. Applications that use Request.scheme for…","indicators":{"cves":["CVE-2026-111748"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T17:17:03.877Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://github.com/aio-libs/aiohttp/commit/6d4e7b01f9b951aa084a75d7356e907d4ee80411","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/aio-libs/aiohttp/releases/tag/v3.14.4","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/aio-libs/aiohttp/security/advisories/GHSA-f9xw-jh8m-3mwq","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-111749","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-111749 — AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.4, Hos…","description":"AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.4, Host-Only scope on an existing parent-domain cookie can be removed by a subdomain. A user who accesses an untrusted subdomain can consequently have host-only protections stripped from cookies, although i…","indicators":{"cves":["CVE-2026-111749"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T17:17:04.023Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://github.com/aio-libs/aiohttp/commit/6a07c171ef9f3be583e2907dcd1931372efca8d6","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/aio-libs/aiohttp/releases/tag/v3.14.4","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/aio-libs/aiohttp/security/advisories/GHSA-gx76-c99x-2c96","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2025-55654","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2025-55654 — A use-after-free in the gf_filter_pid_get_packet function (filter_core/filter_pid.c) of GPAC MP4Box…","description":"A use-after-free in the gf_filter_pid_get_packet function (filter_core/filter_pid.c) of GPAC MP4Box v2.4 allows attackers to cause a Denial of Service (DoS) via supplying a crafted file.","indicators":{"cves":["CVE-2025-55654"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T18:16:58.187Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://github.com/gpac/gpac/commit/0ccd2927c7145f5ab0352c5b15f787757b34eb18","label":"cve@mitre.org","domainType":"primary"},{"url":"https://github.com/gpac/gpac/issues/3249","label":"cve@mitre.org","domainType":"primary"},{"url":"https://infosec.exchange/@sigdevel/116769098607015606","label":"cve@mitre.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2025-60480","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2025-60480 — A heap buffer overflow in the gf_odf_ac4_cfg_alternative_info function (/odf/descriptors.c) of GPAC…","description":"A heap buffer overflow in the gf_odf_ac4_cfg_alternative_info function (/odf/descriptors.c) of GPAC Project/MP4Box 2.5-DEV-rev1593-gfe88c3545-master allows attackers to cause a Denial of Service (DoS) via supplying a crafted AC4 file.","indicators":{"cves":["CVE-2025-60480"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T18:16:58.480Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://github.com/gpac/gpac/commit/e02d1fd24cdc26acb1b236ab38b3832cffcae21b","label":"cve@mitre.org","domainType":"primary"},{"url":"https://github.com/gpac/gpac/issues/3295","label":"cve@mitre.org","domainType":"primary"},{"url":"https://infosec.exchange/@sigdevel/117456490628466269","label":"cve@mitre.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-105810","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-105810 — Tapo C320WS V2.0 contains an authenticated stack-based buffer overflow in the local onboarding Wi-Fi…","description":"Tapo C320WS\nV2.0 contains an authenticated stack-based buffer overflow in the local\nonboarding Wi-Fi configuration path. An authenticated attacker on the\nadjacent network can submit a crafted request containing an oversized encrypted\npassword field, overwrite stack state, and execute commands with r…","indicators":{"cves":["CVE-2026-105810"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T18:16:58.903Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://www.tp-link.com/en/support/download/tapo-c320ws/v2/#Firmware-Release-Notes","label":"f23511db-6c3e-4e32-a477-6aa17d310630","domainType":"other"},{"url":"https://www.tp-link.com/us/support/download/tapo-c320ws/#Firmware-Release-Notes","label":"f23511db-6c3e-4e32-a477-6aa17d310630","domainType":"other"},{"url":"https://www.tp-link.com/us/support/faq/5351/","label":"f23511db-6c3e-4e32-a477-6aa17d310630","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-107084","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-107084 — Slims (Senayan Library Management Systems) 9 Bulian 9.8.0 allows cross-site request forgery (CSRF) a…","description":"Slims (Senayan Library Management Systems) 9 Bulian 9.8.0 allows cross-site request forgery (CSRF) against admin/modules/circulation/loan_history_maintenance.php because the action=run GET parameter performs privileged, destructive operations with no CSRF token or POST confirmation, leading to data…","indicators":{"cves":["CVE-2026-107084"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T18:16:59.047Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://github.com/Primandito/CVE-2026-107084","label":"cve@mitre.org","domainType":"primary"},{"url":"https://github.com/slims/slims9_bulian/issues/394","label":"cve@mitre.org","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-111755","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-111755 — follow-redirects is a Node.js HTTP and HTTPS client wrapper that automatically follows redirects. Fr…","description":"follow-redirects is a Node.js HTTP and HTTPS client wrapper that automatically follows redirects. From 1.16.0 until 1.16.1, escapeRegex leaves valid header-name metacharacters unescaped in sensitiveHeaders. When an application declares a sensitive header whose name contains ^ or | and follows a cros…","indicators":{"cves":["CVE-2026-111755"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T18:17:00.260Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://github.com/follow-redirects/follow-redirects/commit/080a76d0e125b37bf81717368a61d5dc37aa56c8","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/follow-redirects/follow-redirects/releases/tag/v1.16.1","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/follow-redirects/follow-redirects/security/advisories/GHSA-8r9p-f939-6h3c","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/follow-redirects/follow-redirects/security/advisories/GHSA-8r9p-f939-6h3c","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-55644","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-55644 — Element X iOS is a Matrix iOS Client provided by Element. Element X iOS before version 26.05.0 fails…","description":"Element X iOS is a Matrix iOS Client provided by Element. Element X iOS before version 26.05.0 fails to check the URL allowlist when parsing io.element.call://. If an attacker is able to trick the user into opening a maliciously crafted io.element.call:// URL, they are able to load an attacker-contr…","indicators":{"cves":["CVE-2026-55644"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T18:17:08.007Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://github.com/element-hq/element-x-ios/commit/63592e48c1a1e47f75693045efd85a7d4468ea84","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/element-hq/element-x-ios/pull/5515","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/element-hq/element-x-ios/releases/tag/release/26.05.0","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/element-hq/element-x-ios/security/advisories/GHSA-54w7-rw44-49m7","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2025-60482","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2025-60482 — A heap use-after-free in the gf_odf_ac4_cfg_clean_list function (/odf/descriptors.c) of GPAC Project…","description":"A heap use-after-free in the gf_odf_ac4_cfg_clean_list function (/odf/descriptors.c) of GPAC Project/MP4Box 2.5-DEV-rev1593-gfe88c3545-master allows attackers to cause a Denial of Service (DoS) via supplying a crafted AC4 file.","indicators":{"cves":["CVE-2025-60482"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T19:17:03.650Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://github.com/gpac/gpac/commit/e02d1fd24cdc26acb1b236ab38b3832cffcae21b","label":"cve@mitre.org","domainType":"primary"},{"url":"https://github.com/gpac/gpac/issues/3297","label":"cve@mitre.org","domainType":"primary"},{"url":"https://infosec.exchange/@sigdevel/117456522954593448","label":"cve@mitre.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110672","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-110672 — Cpanel::JSON::XS versions before 4.80 for Perl leak the decoded key of an object rejected for a dupl…","description":"Cpanel::JSON::XS versions before 4.80 for Perl leak the decoded key of an object rejected for a duplicate key or a missing colon in decode_hv.\n\nA quoted key of 24 or more bytes, or one containing a non-ASCII byte or an escape sequence, is decoded into a new scalar. Nothing frees that scalar when the…","indicators":{"cves":["CVE-2026-110672"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T19:17:20.753Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://github.com/rurban/Cpanel-JSON-XS/commit/532b53cf8d2ca5ab6bc24048325566d1f7132425.patch","label":"9b29abf9-4ab0-4765-b253-1875cd9b441e","domainType":"primary"},{"url":"https://metacpan.org/release/RURBAN/Cpanel-JSON-XS-4.80/changes","label":"9b29abf9-4ab0-4765-b253-1875cd9b441e","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110673","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-110673 — Cpanel::JSON::XS versions before 4.80 for Perl allow stack exhaustion via nested tagged values under…","description":"Cpanel::JSON::XS versions before 4.80 for Perl allow stack exhaustion via nested tagged values under allow_tags in decode_tag.\n\nWith allow_tags, \"(\" starts a tagged value. Its tag and value are decoded recursively, and each can start another tagged value. Unlike arrays and objects, this nesting is n…","indicators":{"cves":["CVE-2026-110673"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T19:17:20.877Z","fetchedAt":"2026-10-20T03:01:48.466Z","references":[{"url":"https://github.com/rurban/Cpanel-JSON-XS/commit/995eb484a9351753e2a8ec3317918b5b4a4e086a.patch","label":"9b29abf9-4ab0-4765-b253-1875cd9b441e","domainType":"primary"},{"url":"https://metacpan.org/release/RURBAN/Cpanel-JSON-XS-4.80/changes","label":"9b29abf9-4ab0-4765-b253-1875cd9b441e","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110674","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-110674 — Cpanel::JSON::XS versions from 4.33 before 4.80 for Perl miss duplicate non-ASCII bare keys, allowin…","description":"Cpanel::JSON::XS versions from 4.33 before 4.80 for Perl miss duplicate non-ASCII bare keys, allowing type confusion under dupkeys_as_arrayref in decode_hv.\n\nWith allow_barekey, which relaxed enables, a bare key containing a non-ASCII byte is stored as UTF-8 but looked up as raw bytes, so a repeated…","indicators":{"cves":["CVE-2026-110674"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T19:17:21.090Z","fetchedAt":"2026-10-20T03:01:48.466Z","references":[{"url":"https://github.com/rurban/Cpanel-JSON-XS/commit/c52037857d6a99d96ebd1ce3e2fa769505f028cf.patch","label":"9b29abf9-4ab0-4765-b253-1875cd9b441e","domainType":"primary"},{"url":"https://metacpan.org/release/RURBAN/Cpanel-JSON-XS-4.80/changes","label":"9b29abf9-4ab0-4765-b253-1875cd9b441e","domainType":"other"},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-9334","label":"9b29abf9-4ab0-4765-b253-1875cd9b441e","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110675","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-110675 — Cpanel::JSON::XS versions from 4.33 before 4.80 for Perl accept malformed UTF-8 in bare hash keys un…","description":"Cpanel::JSON::XS versions from 4.33 before 4.80 for Perl accept malformed UTF-8 in bare hash keys under allow_barekey in decode_hv.\n\nWith utf8 and allow_barekey, which relaxed enables, a quoted key is validated as UTF-8 but a bare key's bytes are stored as a UTF-8 flagged string without any check. M…","indicators":{"cves":["CVE-2026-110675"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T19:17:21.210Z","fetchedAt":"2026-10-20T03:01:48.466Z","references":[{"url":"https://github.com/rurban/Cpanel-JSON-XS/commit/c2cd02281b9d6904ca0aff2740154e742abc070c.patch","label":"9b29abf9-4ab0-4765-b253-1875cd9b441e","domainType":"primary"},{"url":"https://metacpan.org/release/RURBAN/Cpanel-JSON-XS-4.80/changes","label":"9b29abf9-4ab0-4765-b253-1875cd9b441e","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110676","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-110676 — Cpanel::JSON::XS versions before 4.80 for Perl allow memory exhaustion by encoding exponent notation…","description":"Cpanel::JSON::XS versions before 4.80 for Perl allow memory exhaustion by encoding exponent notation as full decimal digits under allow_bignum.\n\nWith allow_bignum, a JSON number with a fraction or exponent decodes to a Math::BigFloat, which stores the exponent separately and so decodes cheaply. Enco…","indicators":{"cves":["CVE-2026-110676"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T19:17:21.320Z","fetchedAt":"2026-10-20T03:01:48.466Z","references":[{"url":"https://github.com/rurban/Cpanel-JSON-XS/commit/996ab96972b967a917536d291947b5f3cf42e960.patch","label":"9b29abf9-4ab0-4765-b253-1875cd9b441e","domainType":"primary"},{"url":"https://metacpan.org/release/RURBAN/Cpanel-JSON-XS-4.80/changes","label":"9b29abf9-4ab0-4765-b253-1875cd9b441e","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110677","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-110677 — Cpanel::JSON::XS versions from 4.28 before 4.80 for Perl leak the array collecting duplicate key val…","description":"Cpanel::JSON::XS versions from 4.28 before 4.80 for Perl leak the array collecting duplicate key values under dupkeys_as_arrayref in decode_hv.\n\nWith dupkeys_as_arrayref, the values of a duplicate object key are collected into a new array. An extra reference is never released, so the array and every…","indicators":{"cves":["CVE-2026-110677"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T19:17:21.437Z","fetchedAt":"2026-10-20T03:01:48.466Z","references":[{"url":"https://github.com/rurban/Cpanel-JSON-XS/commit/edb13030a708afc2cde0d2629fb6bdd31288ce6c.patch","label":"9b29abf9-4ab0-4765-b253-1875cd9b441e","domainType":"primary"},{"url":"https://metacpan.org/release/RURBAN/Cpanel-JSON-XS-4.80/changes","label":"9b29abf9-4ab0-4765-b253-1875cd9b441e","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110678","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-110678 — Cpanel::JSON::XS versions before 4.80 for Perl allow memory exhaustion by buffering incremental inpu…","description":"Cpanel::JSON::XS versions before 4.80 for Perl allow memory exhaustion by buffering incremental input past max_size in incr_parse.\n\nThe parser appends each chunk to its buffer. In scalar or list context, it compares max_size with how far it has progressed, not with the buffer length. A chunk that st…","indicators":{"cves":["CVE-2026-110678"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T19:17:21.550Z","fetchedAt":"2026-10-20T03:01:48.466Z","references":[{"url":"https://github.com/rurban/Cpanel-JSON-XS/commit/d516f296b1714e06b0fb9eaae72f4558ae3d83d6.patch","label":"9b29abf9-4ab0-4765-b253-1875cd9b441e","domainType":"primary"},{"url":"https://metacpan.org/release/RURBAN/Cpanel-JSON-XS-4.80/changes","label":"9b29abf9-4ab0-4765-b253-1875cd9b441e","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110680","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-110680 — Cpanel::JSON::XS versions from 4.20 before 4.80 for Perl write out of bounds when a tied or shared h…","description":"Cpanel::JSON::XS versions from 4.20 before 4.80 for Perl write out of bounds when a tied or shared hash grows during canonical encoding in encode_hv.\n\nWith canonical, the keys of a tied or threads::shared hash are counted before a second pass collects them for sorting. The encoder uses a fixed 64-en…","indicators":{"cves":["CVE-2026-110680"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T19:17:21.657Z","fetchedAt":"2026-10-20T03:01:48.466Z","references":[{"url":"https://github.com/rurban/Cpanel-JSON-XS/commit/44c4591cc62ea7f453a0ed931abf24394e1560a1.patch","label":"9b29abf9-4ab0-4765-b253-1875cd9b441e","domainType":"primary"},{"url":"https://metacpan.org/release/RURBAN/Cpanel-JSON-XS-4.80/changes","label":"9b29abf9-4ab0-4765-b253-1875cd9b441e","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110681","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-110681 — Cpanel::JSON::XS versions before 4.80 for Perl use the parent interpreter's scalars from a parser ob…","description":"Cpanel::JSON::XS versions before 4.80 for Perl use the parent interpreter's scalars from a parser object cloned into a new ithread.\n\nA parser object holds its callbacks and its incremental parse buffer as raw scalar pointers. When a thread is created, these are copied into the new interpreter unchan…","indicators":{"cves":["CVE-2026-110681"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T19:17:21.767Z","fetchedAt":"2026-10-20T03:01:48.466Z","references":[{"url":"https://github.com/rurban/Cpanel-JSON-XS/commit/c53eefbaa59c344abd4c71762118da04280987e8.patch","label":"9b29abf9-4ab0-4765-b253-1875cd9b441e","domainType":"primary"},{"url":"https://metacpan.org/release/RURBAN/Cpanel-JSON-XS-4.80/changes","label":"9b29abf9-4ab0-4765-b253-1875cd9b441e","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110682","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-110682 — Cpanel::JSON::XS versions from 4.42 before 4.80 for Perl let input chunking change the decoded value…","description":"Cpanel::JSON::XS versions from 4.42 before 4.80 for Perl let input chunking change the decoded value of top-level numbers in incr_parse.\n\nallow_nonref is enabled by default and incr_parse inherits it. A top-level number, true, false or null has no closing delimiter, so the incremental parser decodes…","indicators":{"cves":["CVE-2026-110682"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T19:17:21.880Z","fetchedAt":"2026-10-20T03:01:48.466Z","references":[{"url":"https://github.com/rurban/Cpanel-JSON-XS/commit/f632d6690d82c14cd2d76d648805325201c52b83.patch","label":"9b29abf9-4ab0-4765-b253-1875cd9b441e","domainType":"primary"},{"url":"https://metacpan.org/release/RURBAN/Cpanel-JSON-XS-4.80/changes","label":"9b29abf9-4ab0-4765-b253-1875cd9b441e","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110684","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-110684 — Cpanel::JSON::XS versions from 3.0202 before 4.80 for Perl leak memory and retain overloaded objects…","description":"Cpanel::JSON::XS versions from 3.0202 before 4.80 for Perl leak memory and retain overloaded objects when encoding values as strings in encode_stringify.\n\nencode_stringify writes a value in its string form under allow_stringify, under convert_blessed for objects without TO_JSON, and under allow_bign…","indicators":{"cves":["CVE-2026-110684"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T19:17:21.990Z","fetchedAt":"2026-10-20T03:01:48.466Z","references":[{"url":"https://github.com/rurban/Cpanel-JSON-XS/commit/5b15916b5e7841e447664ace51fb50c12d1e0f39.patch","label":"9b29abf9-4ab0-4765-b253-1875cd9b441e","domainType":"primary"},{"url":"https://metacpan.org/release/RURBAN/Cpanel-JSON-XS-4.80/changes","label":"9b29abf9-4ab0-4765-b253-1875cd9b441e","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110685","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-110685 — Cpanel::JSON::XS versions before 4.80 for Perl leak the decoded arguments of a tagged value when its…","description":"Cpanel::JSON::XS versions before 4.80 for Perl leak the decoded arguments of a tagged value when its THAW method dies in decode_tag.\n\nWith allow_tags, a tagged value's class name and argument array are decoded and passed to the class's THAW method. Both are released only after THAW returns, so a THA…","indicators":{"cves":["CVE-2026-110685"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T19:17:22.097Z","fetchedAt":"2026-10-20T03:01:48.466Z","references":[{"url":"https://github.com/rurban/Cpanel-JSON-XS/commit/9ab010221c069a7af9ef7463454ecd3b8ace9c58.patch","label":"9b29abf9-4ab0-4765-b253-1875cd9b441e","domainType":"primary"},{"url":"https://metacpan.org/release/RURBAN/Cpanel-JSON-XS-4.80/changes","label":"9b29abf9-4ab0-4765-b253-1875cd9b441e","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110686","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-110686 — Cpanel::JSON::XS versions before 4.80 for Perl use freed filter callbacks when a filter removes itse…","description":"Cpanel::JSON::XS versions before 4.80 for Perl use freed filter callbacks when a filter removes itself during decoding in decode_hv.\n\nA decode copies the parser's filter_json_object and filter_json_single_key_object callbacks without taking references to them. A filter callback that removes the last…","indicators":{"cves":["CVE-2026-110686"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T19:17:22.200Z","fetchedAt":"2026-10-20T03:01:48.466Z","references":[{"url":"https://github.com/rurban/Cpanel-JSON-XS/commit/c3e7e3c5b0b72d82b072c6a7cfb8c34cec4c7ea2.patch","label":"9b29abf9-4ab0-4765-b253-1875cd9b441e","domainType":"primary"},{"url":"https://metacpan.org/release/RURBAN/Cpanel-JSON-XS-4.80/changes","label":"9b29abf9-4ab0-4765-b253-1875cd9b441e","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110687","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-110687 — Cpanel::JSON::XS versions from 4.43 before 4.80 for Perl misorder byte-string keys during canonical…","description":"Cpanel::JSON::XS versions from 4.43 before 4.80 for Perl misorder byte-string keys during canonical encoding in utf16_cmp.\n\ncanonical sorts keys by UTF-16 code units. When any key in a hash is UTF-8 flagged, every key is decoded as UTF-8 for the comparison, including byte-string keys that the encode…","indicators":{"cves":["CVE-2026-110687"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T19:17:22.307Z","fetchedAt":"2026-10-20T03:01:48.466Z","references":[{"url":"https://github.com/rurban/Cpanel-JSON-XS/commit/bb9da30b67f637f4d57922f0e043376363f28f0c.patch","label":"9b29abf9-4ab0-4765-b253-1875cd9b441e","domainType":"primary"},{"url":"https://metacpan.org/release/RURBAN/Cpanel-JSON-XS-4.80/changes","label":"9b29abf9-4ab0-4765-b253-1875cd9b441e","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110688","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-110688 — Cpanel::JSON::XS versions from 4.51 before 4.80 for Perl allow quadratic CPU use by revalidating the…","description":"Cpanel::JSON::XS versions from 4.51 before 4.80 for Perl allow quadratic CPU use by revalidating the remaining buffer per value in incr_parse.\n\nAt the first non-ASCII byte in a string, the decoder validates UTF-8 from there to the end of its input. incr_parse decodes each buffered value with a fresh…","indicators":{"cves":["CVE-2026-110688"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T19:17:22.420Z","fetchedAt":"2026-10-20T03:01:48.466Z","references":[{"url":"https://github.com/rurban/Cpanel-JSON-XS/commit/384309f6a297384e69c851b5d64e1c421d9b2dcc.patch","label":"9b29abf9-4ab0-4765-b253-1875cd9b441e","domainType":"primary"},{"url":"https://metacpan.org/release/RURBAN/Cpanel-JSON-XS-4.80/changes","label":"9b29abf9-4ab0-4765-b253-1875cd9b441e","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112768","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-112768 — Parse Server before 8.6.99 and 9.0.0 before 9.10.3-alpha.2 evaluates checks against the target accou…","description":"Parse Server before 8.6.99 and 9.0.0 before 9.10.3-alpha.2 evaluates checks against the target account during a user update before authorizing the caller, and reflects their outcome in the response. An unauthorized caller, with or without a session, can confirm guessed usernames or emails and, when…","indicators":{"cves":["CVE-2026-112768"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T20:17:53.790Z","fetchedAt":"2026-10-20T03:01:48.466Z","references":[{"url":"https://github.com/parse-community/parse-server/security/advisories/GHSA-p49q-9w65-f9p7","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/parse-server-before-8.6.99-and-9-x-before-9.10.3-alpha.2-information-disclosure-via-user-update","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112769","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-112769 — Parse Server before 8.6.98 and 9.0.0 before 9.10.3-alpha.1 does not enforce the create and addField…","description":"Parse Server before 8.6.98 and 9.0.0 before 9.10.3-alpha.1 does not enforce the create and addField class-level permissions of the _Session class when creating sessions. An authenticated user, or anyone holding that user's session token, can send POST requests to /sessions or /classes/_Session to cr…","indicators":{"cves":["CVE-2026-112769"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T20:17:53.930Z","fetchedAt":"2026-10-20T03:01:48.466Z","references":[{"url":"https://github.com/parse-community/parse-server/security/advisories/GHSA-gj37-5hg5-p729","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/parse-server-before-8.6.98-and-9-x-before-9.10.3-alpha.1-session-class-level-permission-bypass","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112778","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-112778 — Traefik before 2.11.46, 3.x before 3.6.17, and 3.7.0 lack namespace validation for Ingress and Servi…","description":"Traefik before 2.11.46, 3.x before 3.6.17, and 3.7.0 lack namespace validation for Ingress and Service annotations in the Kubernetes Ingress provider, allowing references to Middlewares, ServersTransports, and TLSOptions in other namespaces. Attackers able to create or update Ingress or Service reso…","indicators":{"cves":["CVE-2026-112778"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T20:17:55.187Z","fetchedAt":"2026-10-20T03:01:48.466Z","references":[{"url":"https://github.com/traefik/traefik/security/advisories/GHSA-rh7m-2m44-x32f","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/traefik-before-2.11.46-3.6.17-and-3.7.1-cross-namespace-resource-reference-via-kubernetes-annotations","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111946","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-111946 — Plack::Middleware::ETag versions from 0.04 before 0.06 for Perl disclose file inode numbers in the d…","description":"Plack::Middleware::ETag versions from 0.04 before 0.06 for Perl disclose file inode numbers in the default ETag header.\n\nWhen the response body is a filehandle and the file_etag option is not set, the ETag is built from the file's inode number, modification time and size. Clients receiving affected…","indicators":{"cves":["CVE-2026-111946"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T21:17:06.093Z","fetchedAt":"2026-10-20T03:01:48.466Z","references":[{"url":"https://github.com/robrwo/perl-Plack-Middleware-ETag/security/advisories/GHSA-943g-rgq5-6xc8","label":"9b29abf9-4ab0-4765-b253-1875cd9b441e","domainType":"primary"},{"url":"https://metacpan.org/release/RRWO/Plack-Middleware-ETag-0.06/changes","label":"9b29abf9-4ab0-4765-b253-1875cd9b441e","domainType":"other"},{"url":"https://www.cve.org/CVERecord?id=CVE-2003-1418","label":"9b29abf9-4ab0-4765-b253-1875cd9b441e","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112390","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-112390 — Pillow is a Python imaging library. From 7.2.0 until 13.0.0, Pillow can enter an infinite loop while…","description":"Pillow is a Python imaging library. From 7.2.0 until 13.0.0, Pillow can enter an infinite loop while determining the frame count of a MIC image. MicImageFile inherits TIFF frame traversal, but MicImageFile.tell reports the OLE stream index and its seek() resets TIFF frame state, so an embedded TIFF…","indicators":{"cves":["CVE-2026-112390"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T21:17:07.340Z","fetchedAt":"2026-10-20T03:01:48.466Z","references":[{"url":"https://github.com/python-pillow/Pillow/commit/26cb3ed061173b817b9ee4b6f507cb0e1e293218","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/python-pillow/Pillow/releases/tag/13.0.0","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/python-pillow/Pillow/security/advisories/GHSA-22hg-r758-rrw9","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-112391","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-112391 — Pillow is a Python imaging library. From 5.1.0 until 13.0.0, Pillow's PdfParser.get_value() can recu…","description":"Pillow is a Python imaging library. From 5.1.0 until 13.0.0, Pillow's PdfParser.get_value() can recurse without a limit while reading nested PDF objects. The parser follows attacker-controlled arrays and dictionaries when an existing PDF is opened for append. An attacker can provide a deeply nested…","indicators":{"cves":["CVE-2026-112391"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T21:17:07.477Z","fetchedAt":"2026-10-20T03:01:48.466Z","references":[{"url":"https://github.com/python-pillow/Pillow/commit/94cb11c44ff7345414da17ebfea1598a529ad9cd","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/python-pillow/Pillow/releases/tag/13.0.0","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/python-pillow/Pillow/security/advisories/GHSA-254f-3936-288h","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-112393","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-112393 — Pillow is a Python imaging library. From 2.0.0 until 13.0.0, Pillow has a heap buffer overflow and s…","description":"Pillow is a Python imaging library. From 2.0.0 until 13.0.0, Pillow has a heap buffer overflow and stale-heap disclosure in _tiffWriteProc when saving compressed TIFF data through libtiff to a target without a usable fileno(), such as BytesIO. The callback sizes its allocation from the prior buffer…","indicators":{"cves":["CVE-2026-112393"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T21:17:07.613Z","fetchedAt":"2026-10-20T03:01:48.466Z","references":[{"url":"https://github.com/python-pillow/Pillow/commit/11582e5ffbdceb973d5ee593f3105af5a9852b40","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/python-pillow/Pillow/releases/tag/13.0.0","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/python-pillow/Pillow/security/advisories/GHSA-332p-7hrc-92wf","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/python-pillow/Pillow/security/advisories/GHSA-332p-7hrc-92wf","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-112394","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-112394 — Pillow is a Python imaging library. Prior to 13.0.0, Pillow's P;2L and P;4L raw decoders can read pa…","description":"Pillow is a Python imaging library. Prior to 13.0.0, Pillow's P;2L and P;4L raw decoders can read past the end of an input buffer. ImagingRawDecode calculates a packed-pixel row size, while the unpackers read separately padded bit planes. A caller can supply a buffer and image dimensions whose accep…","indicators":{"cves":["CVE-2026-112394"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T21:17:07.747Z","fetchedAt":"2026-10-20T03:01:48.466Z","references":[{"url":"https://github.com/python-pillow/Pillow/commit/392ee6f0d19a4adb766a63e9a99f3c28193b8d31","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/python-pillow/Pillow/releases/tag/13.0.0","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/python-pillow/Pillow/security/advisories/GHSA-4558-3h8r-v8xp","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-112392","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-112392 — Pillow is a Python imaging library. Prior to 13.0.0, Pillow's rank-based filters can dereference inv…","description":"Pillow is a Python imaging library. Prior to 13.0.0, Pillow's rank-based filters can dereference invalid image storage for a zero-size image. ImagingExpand() allocates a non-empty output and then faults while replicating edges by reading the first pixel from empty input storage; ImagingRankFilter is…","indicators":{"cves":["CVE-2026-112392"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T22:17:06.587Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://github.com/python-pillow/Pillow/commit/443e3130a8c11594fd0e296afad497e11e678961","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/python-pillow/Pillow/releases/tag/13.0.0","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/python-pillow/Pillow/security/advisories/GHSA-27h8-gf7j-v5hc","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-112397","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-112397 — Pillow is a Python imaging library. Prior to 13.0.0, Pillow's ImageMorph.MorphOp.apply() can access…","description":"Pillow is a Python imaging library. Prior to 13.0.0, Pillow's ImageMorph.MorphOp.apply() can access memory before a row buffer for a zero-width image. PPM and PGM input can create an image with width zero, and the native morphology routine indexes outrow[width - 1] without rejecting that geometry. A…","indicators":{"cves":["CVE-2026-112397"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T22:17:06.970Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://github.com/python-pillow/Pillow/commit/18f7c0dfee93063c51db6ed0ca8c4da2999dcb64","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/python-pillow/Pillow/releases/tag/13.0.0","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/python-pillow/Pillow/security/advisories/GHSA-58r4-6rv3-gfh8","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/python-pillow/Pillow/security/advisories/GHSA-58r4-6rv3-gfh8","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-112398","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-112398 — Pillow is a Python imaging library. Prior to 13.0.0, Pillow's FlashPix JPEG-tile decoder can write d…","description":"Pillow is a Python imaging library. Prior to 13.0.0, Pillow's FlashPix JPEG-tile decoder can write decoded scanlines beyond the allocated tile buffer. FlashPix (FPX) JPEG decoding selects raw mode LA with two bytes per pixel, while an unrecognized JPEG mode can be decoded as JCS_UNKNOWN with four co…","indicators":{"cves":["CVE-2026-112398"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T22:17:07.107Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://github.com/python-pillow/Pillow/commit/242a059aedc1935097d9aa1dc3f099750467ba75","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/python-pillow/Pillow/releases/tag/13.0.0","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/python-pillow/Pillow/security/advisories/GHSA-5x8w-8jj5-q52h","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-112399","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-112399 — Pillow is a Python imaging library. From 8.1.0 until 13.0.0, Pillow can allocate an APNG disposal ba…","description":"Pillow is a Python imaging library. From 8.1.0 until 13.0.0, Pillow can allocate an APNG disposal background at the full canvas size before applying the decompression-bomb check. A crafted APNG with a small first frame, a very large declared canvas, and background disposal or first-frame OP_PREVIOUS…","indicators":{"cves":["CVE-2026-112399"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T22:17:07.240Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://github.com/python-pillow/Pillow/commit/f1acfc54c53502948d0d14121872061df931db48","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/python-pillow/Pillow/releases/tag/13.0.0","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/python-pillow/Pillow/security/advisories/GHSA-5xm2-6676-qcp9","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-112400","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-112400 — Pillow is a Python imaging library. From 9.2.0 until 13.0.0, Pillow can retain a rejected GIF frame…","description":"Pillow is a Python imaging library. From 9.2.0 until 13.0.0, Pillow can retain a rejected GIF frame size after a decompression-bomb exception. In GifImageFile._seek, a crafted GIF can leave rejected dimensions stored after Image.DecompressionBombError; if an application catches that exception and co…","indicators":{"cves":["CVE-2026-112400"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T22:17:07.367Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://github.com/python-pillow/Pillow/commit/6faed707cfb760a4cbd726ddc8406f576cf35bf7","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/python-pillow/Pillow/releases/tag/13.0.0","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/python-pillow/Pillow/security/advisories/GHSA-65qm-jvmh-6pqg","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-112401","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-112401 — Pillow is a Python imaging library. From 5.4.0 until 13.0.0, Pillow performs quadratic copying while…","description":"Pillow is a Python imaging library. From 5.4.0 until 13.0.0, Pillow performs quadratic copying while parsing GIF comments. GifImageFile._seek() repeatedly appends immutable bytes for comment sub-blocks and multiple comment extensions, and frame zero is parsed during Image.open(). An attacker can sub…","indicators":{"cves":["CVE-2026-112401"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T22:17:07.503Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://github.com/python-pillow/Pillow/commit/68a3fe957d8a4d552e8c69d96066d749f0614c7e","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/python-pillow/Pillow/releases/tag/13.0.0","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/python-pillow/Pillow/security/advisories/GHSA-74r2-7ff9-mjj2","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-112402","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-112402 — Pillow is a Python imaging library. Prior to 13.0.0, Pillow can double free image memory when Imagin…","description":"Pillow is a Python imaging library. Prior to 13.0.0, Pillow can double free image memory when ImagingScaleAffine encounters a selective allocation failure. The affected fast path handles Transform.EXTENT or pure scale-and-translate Transform.AFFINE operations with the default NEAREST resampling. The…","indicators":{"cves":["CVE-2026-112402"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T22:17:07.633Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://github.com/python-pillow/Pillow/commit/aafa6c75f7cdabb9f409a8aac7c780bea31d08d9","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/python-pillow/Pillow/releases/tag/13.0.0","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/python-pillow/Pillow/security/advisories/GHSA-7mwm-ghpf-9vrm","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/python-pillow/Pillow/security/advisories/GHSA-7mwm-ghpf-9vrm","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-112403","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-112403 — Pillow is a Python imaging library. Prior to 13.0.0, Pillow's JPEG decoder can write a full-width sc…","description":"Pillow is a Python imaging library. Prior to 13.0.0, Pillow's JPEG decoder can write a full-width scanline into a buffer sized for a requested draft scale. ImagingJpegDecode does not verify libjpeg's actual output width and component count after scaling is requested, and an 8-bit lossless SOF3 JPEG…","indicators":{"cves":["CVE-2026-112403"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T22:17:07.770Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://github.com/python-pillow/Pillow/commit/242a059aedc1935097d9aa1dc3f099750467ba75","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/python-pillow/Pillow/releases/tag/13.0.0","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/python-pillow/Pillow/security/advisories/GHSA-8g5g-8vmr-9782","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-112404","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-112404 — Pillow is a Python imaging library. From 8.1.0 until 13.0.0, Pillow's TIFF tile and RGBA decode path…","description":"Pillow is a Python imaging library. From 8.1.0 until 13.0.0, Pillow's TIFF tile and RGBA decode paths can read beyond row data produced by libtiff. In _decodeTile and the RGBA unpacker path, when Pillow and libtiff interpret duplicated PhotometricInterpretation or BitsPerSample tags differently, Pil…","indicators":{"cves":["CVE-2026-112404"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T22:17:07.900Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://github.com/python-pillow/Pillow/commit/1d4773e6cea0c4a2814e6d4cdc099bbcf56da6ce","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/python-pillow/Pillow/releases/tag/13.0.0","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/python-pillow/Pillow/security/advisories/GHSA-c6hw-5grf-ff96","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-112405","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-112405 — Pillow is a Python imaging library. From 12.0.0 until 13.0.0, Pillow's Image.merge() can dereference…","description":"Pillow is a Python imaging library. From 12.0.0 until 13.0.0, Pillow's Image.merge() can dereference a null image8 plane. Validation skips the first input band, allowing a 32-bit integer or floating-point image backed by image32 storage to be merged as a narrower multiband image. A crafted IPTC file…","indicators":{"cves":["CVE-2026-112405"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T22:17:08.027Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://github.com/python-pillow/Pillow/commit/b6ee66e8b2c2c0932bdf65f963268d9f2927ef86","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/python-pillow/Pillow/releases/tag/13.0.0","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/python-pillow/Pillow/security/advisories/GHSA-cp9v-662q-vvx9","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-112406","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-112406 — Pillow is a Python imaging library. From 5.1.0 until 13.0.0, Pillow can enter an infinite loop while…","description":"Pillow is a Python imaging library. From 5.1.0 until 13.0.0, Pillow can enter an infinite loop while rewriting PDF pages. PdfParser.rewrite_pages() follows Parent relationships without detecting a cycle in the page tree. An attacker can supply a cyclic PDF to an application that appends an image to…","indicators":{"cves":["CVE-2026-112406"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T22:17:08.153Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://github.com/python-pillow/Pillow/commit/b3ebf20c694f2f12537a629c30229a1d5a53f777","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/python-pillow/Pillow/releases/tag/13.0.0","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/python-pillow/Pillow/security/advisories/GHSA-f2g6-542v-9j58","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-112891","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-112891 — Pillow is a Python imaging library. From 9.2.0 until 13.0.0, Pillow performs quadratic copying when…","description":"Pillow is a Python imaging library. From 9.2.0 until 13.0.0, Pillow performs quadratic copying when saving a GIF with a long comment. _get_global_header() repeatedly copies portions of comment data while assembling the global header, including comments retained from an untrusted input image. An atta…","indicators":{"cves":["CVE-2026-112891"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T22:17:08.640Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://github.com/python-pillow/Pillow/commit/68a3fe957d8a4d552e8c69d96066d749f0614c7e","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/python-pillow/Pillow/releases/tag/13.0.0","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/python-pillow/Pillow/security/advisories/GHSA-fc9g-5qg7-mf45","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-112892","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-112892 — Pillow is a Python imaging library. From 4.1.0 until 13.0.0, Pillow's MSP RLE decoder can expand a s…","description":"Pillow is a Python imaging library. From 4.1.0 until 13.0.0, Pillow's MSP RLE decoder can expand a small file into an unbounded in-memory buffer. The decoder writes run-length output to BytesIO without limiting expansion to the declared image size. An attacker can supply a crafted MSP image to an ap…","indicators":{"cves":["CVE-2026-112892"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T22:17:09.210Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://github.com/python-pillow/Pillow/commit/5dcb630b9798efd91929cb873d677aeee6ed0bb3","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/python-pillow/Pillow/releases/tag/13.0.0","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/python-pillow/Pillow/security/advisories/GHSA-gg2r-wvfm-q9rx","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-112893","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-112893 — Pillow is a Python imaging library. From 10.0.0 until 13.0.0, Pillow can free an invalid glyph point…","description":"Pillow is a Python imaging library. From 10.0.0 until 13.0.0, Pillow can free an invalid glyph pointer during FreeType rendering with an active stroker. If FT_Load_Glyph fails, cleanup may call FT_Done_Glyph on an uninitialized or stale glyph variable. An attacker can supply a malformed font as untr…","indicators":{"cves":["CVE-2026-112893"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T22:17:09.350Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://github.com/python-pillow/Pillow/commit/a7416de7f3a43128179d2cf68df3240ea8dafe13","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/python-pillow/Pillow/releases/tag/13.0.0","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/python-pillow/Pillow/security/advisories/GHSA-j4m9-6w36-pw47","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-112894","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-112894 — Pillow is a Python imaging library. From 5.1.0 until 13.0.0, Pillow takes quadratic time to reserve…","description":"Pillow is a Python imaging library. From 5.1.0 until 13.0.0, Pillow takes quadratic time to reserve PDF object identifiers when saving many frames with save_all enabled. PdfParser.next_object_id() repeatedly rebuilds and scans all previously reserved identifiers for every object. An attacker can sup…","indicators":{"cves":["CVE-2026-112894"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T22:17:09.483Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://github.com/python-pillow/Pillow/commit/f6a852555f1a1bdff7781abf25f1a3b8bd6ce6cb","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/python-pillow/Pillow/releases/tag/13.0.0","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/python-pillow/Pillow/security/advisories/GHSA-jg86-v3jv-hrpm","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-112895","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-112895 — Pillow is a Python imaging library. From 5.1.0 until 13.0.0, Pillow can exhaust resources while pars…","description":"Pillow is a Python imaging library. From 5.1.0 until 13.0.0, Pillow can exhaust resources while parsing an existing PDF during an append operation. PdfParser follows page-tree child references without cycle or duplication tracking and follows previous-trailer chains with only an exact repeated-offse…","indicators":{"cves":["CVE-2026-112895"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T22:17:09.620Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://github.com/python-pillow/Pillow/commit/e2ae7eacad6de68c37eb28b633a97bebacf2c5bf","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/python-pillow/Pillow/releases/tag/13.0.0","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/python-pillow/Pillow/security/advisories/GHSA-p4wg-p73j-c528","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-112896","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-112896 — Pillow is a Python imaging library. Prior to 13.0.0, Pillow's TIFF encoder can read beyond a ColorMa…","description":"Pillow is a Python imaging library. Prior to 13.0.0, Pillow's TIFF encoder can read beyond a ColorMap buffer when retained TIFF metadata has a plane size inconsistent with BitsPerSample. A small TIFF can be opened normally and then retain a crafted ColorMap that is reused when the image is saved. An…","indicators":{"cves":["CVE-2026-112896"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T22:17:09.760Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://github.com/python-pillow/Pillow/commit/d03dc3c587a9b0bdc9e4304d70d59a635a87b742","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/python-pillow/Pillow/releases/tag/13.0.0","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/python-pillow/Pillow/security/advisories/GHSA-pchr-8j38-3x4p","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-112897","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-112897 — Pillow is a Python imaging library. From 5.3.0 until 13.0.0, Pillow can return uninitialized memory…","description":"Pillow is a Python imaging library. From 5.3.0 until 13.0.0, Pillow can return uninitialized memory as pixels when libtiff performs a short decode of JPEG-compressed or Group 4 fax TIFF data. The _decodeStrip and _decodeTile buffers can be larger than the bytes written by libtiff, but Pillow convert…","indicators":{"cves":["CVE-2026-112897"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T22:17:09.900Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://github.com/python-pillow/Pillow/commit/1d4773e6cea0c4a2814e6d4cdc099bbcf56da6ce","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/python-pillow/Pillow/releases/tag/13.0.0","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/python-pillow/Pillow/security/advisories/GHSA-q45j-58j2-45rg","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-112898","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-112898 — Pillow is a Python imaging library. From 9.1.0 until 13.0.0, Pillow can disclose uninitialized stack…","description":"Pillow is a Python imaging library. From 9.1.0 until 13.0.0, Pillow can disclose uninitialized stack memory when Image.quantize() uses an empty palette. ImagingPaletteCacheUpdate() leaves a local cache array uninitialized when the palette has zero entries, and the conversion path emits those bytes a…","indicators":{"cves":["CVE-2026-112898"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T22:17:10.030Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://github.com/python-pillow/Pillow/commit/13943c8f857b22f073d30f0ef9b725a0d255f1a4","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/python-pillow/Pillow/releases/tag/13.0.0","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/python-pillow/Pillow/security/advisories/GHSA-rfgq-q3w2-pmv2","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-112900","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-112900 — Pillow is a Python imaging library. From 2.6.0 until 13.0.0, Pillow is vulnerable to argument inject…","description":"Pillow is a Python imaging library. From 2.6.0 until 13.0.0, Pillow is vulnerable to argument injection when invoking Ghostscript for EPS input. EpsImagePlugin.Ghostscript passes a caller-controlled input filename after -f without converting it to a safe absolute path, so a name beginning with a hyp…","indicators":{"cves":["CVE-2026-112900"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T22:17:10.160Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://github.com/python-pillow/Pillow/commit/a2c363141da31a265dd536c945677db4b64f3ec9","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/python-pillow/Pillow/releases/tag/13.0.0","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/python-pillow/Pillow/security/advisories/GHSA-w889-685w-c8fh","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-112901","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-112901 — Pillow is a Python imaging library. Prior to 13.0.0, Pillow's XBM header parser is vulnerable to reg…","description":"Pillow is a Python imaging library. Prior to 13.0.0, Pillow's XBM header parser is vulnerable to regular-expression denial of service. In XbmImageFile._open, when an application calls Image.open() on a small crafted XBM file, XbmImagePlugin applies a backtracking expression to the attacker-controlle…","indicators":{"cves":["CVE-2026-112901"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T22:17:10.293Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://github.com/python-pillow/Pillow/commit/2852a3e3d568997ddec745fc800991f138878f4b","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/python-pillow/Pillow/releases/tag/13.0.0","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/python-pillow/Pillow/security/advisories/GHSA-xgh8-jp6q-p5x8","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-112991","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-112991 — The html_to_markdown expansion module in MISP Modules contains a server-side request forgery (SSRF)…","description":"The html_to_markdown expansion module in MISP Modules contains a server-side request forgery (SSRF) vulnerability in its is_safe_url() URL validation function. The BLOCKED_RANGES list used to reject unsafe destination addresses was incomplete, omitting several critical IP address ranges. Specificall…","indicators":{"cves":["CVE-2026-112991"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T23:17:36.350Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://github.com/misp/misp-modules/commit/98a1c2c2f297665dd8d4609e9cd644007a57516b","label":"5a6e4751-2f3f-4070-9419-94fb35b644e8","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-8355","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-8355 — IBM ContextForge MCP Gateway 0.1.0 through 1.0.5 is vulnerable to a server-side request Forgery (SSR…","description":"IBM ContextForge MCP Gateway 0.1.0 through 1.0.5 is vulnerable to a server-side request Forgery (SSRF) that allows authenticated users with gateway creation privileges to perform arbitrary HTTP POST requests to internal network resources and cloud metadata endpoints. The vulnerability occurs during…","indicators":{"cves":["CVE-2026-8355"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-20T00:19:20.530Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://www.ibm.com/support/pages/node/7285723","label":"psirt@us.ibm.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-105298","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-105298 — Summary Before version 0.9.0, Pingora accepted HTTP/2 requests whose Host header differed from the :…","description":"Summary\n\n\n\nBefore version 0.9.0, Pingora accepted HTTP/2 requests whose Host header differed from the :authority pseudo-header. Request filters, cache keys, and logs that read the request URI (session.req_header().uri) saw the :authority value, but the upstream received the client-supplied Host valu…","indicators":{"cves":["CVE-2026-105298"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-20T01:17:09.787Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://github.com/cloudflare/pingora","label":"cna@cloudflare.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-28850","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-28850 — An authorization issue was addressed with improved state management. This issue is fixed in visionOS…","description":"An authorization issue was addressed with improved state management. This issue is fixed in visionOS 27. An app may be able to access sensitive user data.","indicators":{"cves":["CVE-2026-28850"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-20T01:17:11.347Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://support.apple.com/en-us/149038","label":"product-security@apple.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-28853","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-28853 — The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.8, macOS Tahoe…","description":"The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to elevate privileges.","indicators":{"cves":["CVE-2026-28853"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-20T01:17:11.460Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://support.apple.com/en-us/149042","label":"product-security@apple.com","domainType":"other"},{"url":"https://support.apple.com/en-us/149043","label":"product-security@apple.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-28854","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-28854 — The issue was addressed with additional app bundle integrity checks. This issue is fixed in macOS Go…","description":"The issue was addressed with additional app bundle integrity checks. This issue is fixed in macOS Golden Gate 27. A maliciously modified app may not be prevented from launching.","indicators":{"cves":["CVE-2026-28854"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-20T01:17:11.563Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://support.apple.com/en-us/149035","label":"product-security@apple.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-65356","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-65356 — An access issue was addressed with improved access controls. This issue is fixed in macOS Golden Gat…","description":"An access issue was addressed with improved access controls. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to access sensitive user data.","indicators":{"cves":["CVE-2026-65356"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-20T01:17:16.570Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://support.apple.com/en-us/149035","label":"product-security@apple.com","domainType":"other"},{"url":"https://support.apple.com/en-us/149042","label":"product-security@apple.com","domainType":"other"},{"url":"https://support.apple.com/en-us/149043","label":"product-security@apple.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-65372","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-65372 — A race condition was addressed with additional validation. This issue is fixed in macOS Golden Gate…","description":"A race condition was addressed with additional validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. A malicious application may be able to bypass Privacy preferences.","indicators":{"cves":["CVE-2026-65372"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-20T01:17:17.313Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://support.apple.com/en-us/149035","label":"product-security@apple.com","domainType":"other"},{"url":"https://support.apple.com/en-us/149042","label":"product-security@apple.com","domainType":"other"},{"url":"https://support.apple.com/en-us/149043","label":"product-security@apple.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-65379","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-65379 — The issue was addressed with improved handling of secure input state. This issue is fixed in macOS G…","description":"The issue was addressed with improved handling of secure input state. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to access sensitive user data.","indicators":{"cves":["CVE-2026-65379"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-20T01:17:17.860Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://support.apple.com/en-us/149035","label":"product-security@apple.com","domainType":"other"},{"url":"https://support.apple.com/en-us/149042","label":"product-security@apple.com","domainType":"other"},{"url":"https://support.apple.com/en-us/149043","label":"product-security@apple.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-65396","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-65396 — A buffer overflow was addressed with improved size validation. This issue is fixed in macOS Golden G…","description":"A buffer overflow was addressed with improved size validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to cause unexpected system termination.","indicators":{"cves":["CVE-2026-65396"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-20T01:17:18.313Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://support.apple.com/en-us/149035","label":"product-security@apple.com","domainType":"other"},{"url":"https://support.apple.com/en-us/149042","label":"product-security@apple.com","domainType":"other"},{"url":"https://support.apple.com/en-us/149043","label":"product-security@apple.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-84490","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-84490 — This issue was addressed through improved state management. This issue is fixed in iOS 27 and iPadOS…","description":"This issue was addressed through improved state management. This issue is fixed in iOS 27 and iPadOS 27. An attacker with physical access to a locked device may be able to bypass Digital ID authentication when iPhone Mirroring is active.","indicators":{"cves":["CVE-2026-84490"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-20T01:17:20.553Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://support.apple.com/en-us/149034","label":"product-security@apple.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-84508","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-84508 — This issue was addressed with improved validation of the caller's access. This issue is fixed in iOS…","description":"This issue was addressed with improved validation of the caller's access. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Tahoe 26.7, visionOS 27. An app may be able to access protected user data.","indicators":{"cves":["CVE-2026-84508"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-20T01:17:20.937Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://support.apple.com/en-us/149034","label":"product-security@apple.com","domainType":"other"},{"url":"https://support.apple.com/en-us/149035","label":"product-security@apple.com","domainType":"other"},{"url":"https://support.apple.com/en-us/149038","label":"product-security@apple.com","domainType":"other"},{"url":"https://support.apple.com/en-us/149042","label":"product-security@apple.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-84547","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-84547 — A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS…","description":"A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An attacker in physical proximity may be able to corrupt process memory.","indicators":{"cves":["CVE-2026-84547"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-20T01:17:22.190Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://support.apple.com/en-us/149035","label":"product-security@apple.com","domainType":"other"},{"url":"https://support.apple.com/en-us/149042","label":"product-security@apple.com","domainType":"other"},{"url":"https://support.apple.com/en-us/149043","label":"product-security@apple.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-84579","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-84579 — A logic issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27, macOS…","description":"A logic issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Opening a file referencing a network share may lead to unexpected software execution.","indicators":{"cves":["CVE-2026-84579"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-20T01:17:23.593Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://support.apple.com/en-us/149035","label":"product-security@apple.com","domainType":"other"},{"url":"https://support.apple.com/en-us/149042","label":"product-security@apple.com","domainType":"other"},{"url":"https://support.apple.com/en-us/149043","label":"product-security@apple.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-84582","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-84582 — A privacy issue was addressed with improved access restrictions. This issue is fixed in iOS 27 and i…","description":"A privacy issue was addressed with improved access restrictions. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. An app may be able to access sensitive user data.","indicators":{"cves":["CVE-2026-84582"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-20T01:17:23.697Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://support.apple.com/en-us/149034","label":"product-security@apple.com","domainType":"other"},{"url":"https://support.apple.com/en-us/149035","label":"product-security@apple.com","domainType":"other"},{"url":"https://support.apple.com/en-us/149036","label":"product-security@apple.com","domainType":"other"},{"url":"https://support.apple.com/en-us/149037","label":"product-security@apple.com","domainType":"other"},{"url":"https://support.apple.com/en-us/149038","label":"product-security@apple.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-84613","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-84613 — An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS…","description":"An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An attacker in radio range may be able to cause unexpected sy…","indicators":{"cves":["CVE-2026-84613","CVE-2026-86918","CVE-2026-86944","CVE-2026-86953"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-20T01:17:24.163Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://support.apple.com/en-us/149034","label":"product-security@apple.com","domainType":"other"},{"url":"https://support.apple.com/en-us/149035","label":"product-security@apple.com","domainType":"other"},{"url":"https://support.apple.com/en-us/149036","label":"product-security@apple.com","domainType":"other"},{"url":"https://support.apple.com/en-us/149037","label":"product-security@apple.com","domainType":"other"},{"url":"https://support.apple.com/en-us/149038","label":"product-security@apple.com","domainType":"other"},{"url":"https://support.apple.com/en-us/149041","label":"product-security@apple.com","domainType":"other"},{"url":"https://support.apple.com/en-us/149042","label":"product-security@apple.com","domainType":"other"},{"url":"https://support.apple.com/en-us/149043","label":"product-security@apple.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-86868","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-86868 — An authentication issue was addressed with improved state management. This issue is fixed in macOS G…","description":"An authentication issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An attacker may be able to impersonate other users.","indicators":{"cves":["CVE-2026-86868"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-20T01:17:24.980Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://support.apple.com/en-us/149035","label":"product-security@apple.com","domainType":"other"},{"url":"https://support.apple.com/en-us/149042","label":"product-security@apple.com","domainType":"other"},{"url":"https://support.apple.com/en-us/149043","label":"product-security@apple.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-86871","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-86871 — An integer underflow was addressed with improved input validation. This issue is fixed in macOS Gold…","description":"An integer underflow was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An attacker with control of a network file server may be able to cause unexpected system termination.","indicators":{"cves":["CVE-2026-86871"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-20T01:17:25.253Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://support.apple.com/en-us/149035","label":"product-security@apple.com","domainType":"other"},{"url":"https://support.apple.com/en-us/149042","label":"product-security@apple.com","domainType":"other"},{"url":"https://support.apple.com/en-us/149043","label":"product-security@apple.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-86872","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-86872 — A logic issue was addressed with improved state management. This issue is fixed in Safari 27, vision…","description":"A logic issue was addressed with improved state management. This issue is fixed in Safari 27, visionOS 27, watchOS 27. Processing maliciously crafted web content may lead to unexpected behavior.","indicators":{"cves":["CVE-2026-86872"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-20T01:17:25.357Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://support.apple.com/en-us/149037","label":"product-security@apple.com","domainType":"other"},{"url":"https://support.apple.com/en-us/149038","label":"product-security@apple.com","domainType":"other"},{"url":"https://support.apple.com/en-us/149039","label":"product-security@apple.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-86874","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-86874 — An out-of-bounds read was addressed with improved input validation. This issue is fixed in Xcode 27.…","description":"An out-of-bounds read was addressed with improved input validation. This issue is fixed in Xcode 27. Parsing a maliciously crafted binary may lead to unexpected tool termination.","indicators":{"cves":["CVE-2026-86874"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-20T01:17:25.457Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://support.apple.com/en-us/149040","label":"product-security@apple.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-86875","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-86875 — An input validation issue was addressed with improved input validation. This issue is fixed in Xcode…","description":"An input validation issue was addressed with improved input validation. This issue is fixed in Xcode 27. Parsing a maliciously crafted binary may lead to unexpected app termination.","indicators":{"cves":["CVE-2026-86875"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-20T01:17:25.557Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://support.apple.com/en-us/149040","label":"product-security@apple.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-86907","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-86907 — An authorization issue was addressed with improved entitlement checks. This issue is fixed in macOS…","description":"An authorization issue was addressed with improved entitlement checks. This issue is fixed in macOS Sequoia 15.8, macOS Tahoe 26.7. An app with admin privileges may be able to modify the System Keychain.","indicators":{"cves":["CVE-2026-86907"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-20T01:17:26.530Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://support.apple.com/en-us/149042","label":"product-security@apple.com","domainType":"other"},{"url":"https://support.apple.com/en-us/149043","label":"product-security@apple.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-86913","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-86913 — A use after free issue was addressed with improved memory management. This issue is fixed in iOS 26.…","description":"A use after free issue was addressed with improved memory management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted media file may lead to unexpecte…","indicators":{"cves":["CVE-2026-86913"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-20T01:17:26.893Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://support.apple.com/en-us/149034","label":"product-security@apple.com","domainType":"other"},{"url":"https://support.apple.com/en-us/149035","label":"product-security@apple.com","domainType":"other"},{"url":"https://support.apple.com/en-us/149036","label":"product-security@apple.com","domainType":"other"},{"url":"https://support.apple.com/en-us/149037","label":"product-security@apple.com","domainType":"other"},{"url":"https://support.apple.com/en-us/149038","label":"product-security@apple.com","domainType":"other"},{"url":"https://support.apple.com/en-us/149041","label":"product-security@apple.com","domainType":"other"},{"url":"https://support.apple.com/en-us/149042","label":"product-security@apple.com","domainType":"other"},{"url":"https://support.apple.com/en-us/149043","label":"product-security@apple.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-86914","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-86914 — An information disclosure issue was addressed with improved state management. This issue is fixed in…","description":"An information disclosure issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to access sensitive network connection information.","indicators":{"cves":["CVE-2026-86914"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-20T01:17:27.000Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://support.apple.com/en-us/149035","label":"product-security@apple.com","domainType":"other"},{"url":"https://support.apple.com/en-us/149042","label":"product-security@apple.com","domainType":"other"},{"url":"https://support.apple.com/en-us/149043","label":"product-security@apple.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-86915","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-86915 — A race condition was addressed with improved locking. This issue is fixed in macOS Golden Gate 27. A…","description":"A race condition was addressed with improved locking. This issue is fixed in macOS Golden Gate 27. An app may be able to cause unexpected system termination.","indicators":{"cves":["CVE-2026-86915"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-20T01:17:27.100Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://support.apple.com/en-us/149035","label":"product-security@apple.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-86919","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-86919 — A stack overflow was addressed with improved input validation. This issue is fixed in iOS 26.7 and i…","description":"A stack overflow was addressed with improved input validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, visionOS 27. An attacker with a paired Bluetooth device may be able to execute arbitrary code.","indicators":{"cves":["CVE-2026-86919"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-20T01:17:27.390Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://support.apple.com/en-us/149034","label":"product-security@apple.com","domainType":"other"},{"url":"https://support.apple.com/en-us/149035","label":"product-security@apple.com","domainType":"other"},{"url":"https://support.apple.com/en-us/149038","label":"product-security@apple.com","domainType":"other"},{"url":"https://support.apple.com/en-us/149041","label":"product-security@apple.com","domainType":"other"},{"url":"https://support.apple.com/en-us/149042","label":"product-security@apple.com","domainType":"other"},{"url":"https://support.apple.com/en-us/149043","label":"product-security@apple.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-86921","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-86921 — A permissions issue was addressed with improved validation. This issue is fixed in iOS 26.7 and iPad…","description":"A permissions issue was addressed with improved validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. A local attacker may be able to overwrite restricted files.","indicators":{"cves":["CVE-2026-86921"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-20T01:17:27.493Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://support.apple.com/en-us/149034","label":"product-security@apple.com","domainType":"other"},{"url":"https://support.apple.com/en-us/149035","label":"product-security@apple.com","domainType":"other"},{"url":"https://support.apple.com/en-us/149038","label":"product-security@apple.com","domainType":"other"},{"url":"https://support.apple.com/en-us/149041","label":"product-security@apple.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-86922","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-86922 — A type confusion issue was addressed with improved state management. This issue is fixed in Safari 2…","description":"A type confusion issue was addressed with improved state management. This issue is fixed in Safari 27, iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. Processing maliciously crafted web content may lead to arbitrary code execution.","indicators":{"cves":["CVE-2026-86922"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-20T01:17:27.600Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://support.apple.com/en-us/149034","label":"product-security@apple.com","domainType":"other"},{"url":"https://support.apple.com/en-us/149035","label":"product-security@apple.com","domainType":"other"},{"url":"https://support.apple.com/en-us/149038","label":"product-security@apple.com","domainType":"other"},{"url":"https://support.apple.com/en-us/149039","label":"product-security@apple.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-86928","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-86928 — A path handling issue was addressed with improved validation. This issue is fixed in macOS Golden Ga…","description":"A path handling issue was addressed with improved validation. This issue is fixed in macOS Golden Gate 27. An app may be able to access protected user data.","indicators":{"cves":["CVE-2026-86928"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-20T01:17:27.697Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://support.apple.com/en-us/149035","label":"product-security@apple.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-86932","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-86932 — An authorization issue was addressed with improved state management. This issue is fixed in macOS Go…","description":"An authorization issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27. An app may be able to access sensitive user data.","indicators":{"cves":["CVE-2026-86932"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-20T01:17:27.793Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://support.apple.com/en-us/149035","label":"product-security@apple.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-86933","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-86933 — A permissions issue was addressed with additional sandbox restrictions. This issue is fixed in macOS…","description":"A permissions issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Golden Gate 27. An app may be able to access information about a user's contacts.","indicators":{"cves":["CVE-2026-86933"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-20T01:17:27.890Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://support.apple.com/en-us/149035","label":"product-security@apple.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-86935","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-86935 — This issue was addressed by removing additional entitlements. This issue is fixed in macOS Golden Ga…","description":"This issue was addressed by removing additional entitlements. This issue is fixed in macOS Golden Gate 27. An app may be able to access user-sensitive data.","indicators":{"cves":["CVE-2026-86935"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-20T01:17:27.990Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://support.apple.com/en-us/149035","label":"product-security@apple.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-86940","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-86940 — This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Golden Gate 2…","description":"This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Golden Gate 27. An app may be able to disclose kernel memory.","indicators":{"cves":["CVE-2026-86940"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-20T01:17:28.080Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://support.apple.com/en-us/149035","label":"product-security@apple.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-86948","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-86948 — This issue was addressed by enforcing library validation on the affected binaries. This issue is fix…","description":"This issue was addressed by enforcing library validation on the affected binaries. This issue is fixed in Xcode 27. An app may be able to break out of its sandbox.","indicators":{"cves":["CVE-2026-86948","CVE-2026-86949"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-20T01:17:28.270Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://support.apple.com/en-us/149040","label":"product-security@apple.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-86955","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-86955 — An authorization issue was addressed with improved state management. This issue is fixed in iOS 27 a…","description":"An authorization issue was addressed with improved state management. This issue is fixed in iOS 27 and iPadOS 27. An app may be able to access sensitive user data.","indicators":{"cves":["CVE-2026-86955","CVE-2026-86976"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-20T01:17:28.570Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://support.apple.com/en-us/149034","label":"product-security@apple.com","domainType":"other"},{"url":"https://support.apple.com/en-us/149035","label":"product-security@apple.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-86957","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-86957 — An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7 a…","description":"An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An attacker in wireless proximity may be able to cause unexpected sy…","indicators":{"cves":["CVE-2026-86957"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-20T01:17:28.660Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://support.apple.com/en-us/149034","label":"product-security@apple.com","domainType":"other"},{"url":"https://support.apple.com/en-us/149035","label":"product-security@apple.com","domainType":"other"},{"url":"https://support.apple.com/en-us/149036","label":"product-security@apple.com","domainType":"other"},{"url":"https://support.apple.com/en-us/149037","label":"product-security@apple.com","domainType":"other"},{"url":"https://support.apple.com/en-us/149038","label":"product-security@apple.com","domainType":"other"},{"url":"https://support.apple.com/en-us/149041","label":"product-security@apple.com","domainType":"other"},{"url":"https://support.apple.com/en-us/149042","label":"product-security@apple.com","domainType":"other"},{"url":"https://support.apple.com/en-us/149043","label":"product-security@apple.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-86959","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-86959 — An input validation issue was addressed with improved input validation. This issue is fixed in iOS 2…","description":"An input validation issue was addressed with improved input validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Processing a maliciously crafted image may lead to unexpected process termination.","indicators":{"cves":["CVE-2026-86959"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-20T01:17:28.763Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://support.apple.com/en-us/149034","label":"product-security@apple.com","domainType":"other"},{"url":"https://support.apple.com/en-us/149035","label":"product-security@apple.com","domainType":"other"},{"url":"https://support.apple.com/en-us/149041","label":"product-security@apple.com","domainType":"other"},{"url":"https://support.apple.com/en-us/149042","label":"product-security@apple.com","domainType":"other"},{"url":"https://support.apple.com/en-us/149043","label":"product-security@apple.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-86961","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-86961 — A race condition was addressed with additional validation. This issue is fixed in iOS 27 and iPadOS…","description":"A race condition was addressed with additional validation. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27. A malicious app may be able to break out of its sandbox.","indicators":{"cves":["CVE-2026-86961"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-20T01:17:28.857Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://support.apple.com/en-us/149034","label":"product-security@apple.com","domainType":"other"},{"url":"https://support.apple.com/en-us/149035","label":"product-security@apple.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-86962","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-86962 — A double free issue was addressed with improved memory management. This issue is fixed in iOS 26.7 a…","description":"A double free issue was addressed with improved memory management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able to cause unexpected system termination.","indicators":{"cves":["CVE-2026-86962"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-20T01:17:28.957Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://support.apple.com/en-us/149034","label":"product-security@apple.com","domainType":"other"},{"url":"https://support.apple.com/en-us/149035","label":"product-security@apple.com","domainType":"other"},{"url":"https://support.apple.com/en-us/149036","label":"product-security@apple.com","domainType":"other"},{"url":"https://support.apple.com/en-us/149037","label":"product-security@apple.com","domainType":"other"},{"url":"https://support.apple.com/en-us/149038","label":"product-security@apple.com","domainType":"other"},{"url":"https://support.apple.com/en-us/149041","label":"product-security@apple.com","domainType":"other"},{"url":"https://support.apple.com/en-us/149042","label":"product-security@apple.com","domainType":"other"},{"url":"https://support.apple.com/en-us/149043","label":"product-security@apple.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-86963","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-86963 — A denial-of-service issue was addressed with improved input validation. This issue is fixed in iOS 2…","description":"A denial-of-service issue was addressed with improved input validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27. An attacker in a privileged network position may be able to cause a denial-of-service.","indicators":{"cves":["CVE-2026-86963"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-20T01:17:29.060Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://support.apple.com/en-us/149034","label":"product-security@apple.com","domainType":"other"},{"url":"https://support.apple.com/en-us/149041","label":"product-security@apple.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-86975","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-86975 — An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 27 and…","description":"An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted image may lead to unexpected process termination.","indicators":{"cves":["CVE-2026-86975"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-20T01:17:29.160Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://support.apple.com/en-us/149034","label":"product-security@apple.com","domainType":"other"},{"url":"https://support.apple.com/en-us/149035","label":"product-security@apple.com","domainType":"other"},{"url":"https://support.apple.com/en-us/149036","label":"product-security@apple.com","domainType":"other"},{"url":"https://support.apple.com/en-us/149037","label":"product-security@apple.com","domainType":"other"},{"url":"https://support.apple.com/en-us/149038","label":"product-security@apple.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-86977","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-86977 — An authorization issue was addressed with improved network restrictions. This issue is fixed in iOS…","description":"An authorization issue was addressed with improved network restrictions. This issue is fixed in iOS 27 and iPadOS 27. An app may be able to initiate calls or send messages.","indicators":{"cves":["CVE-2026-86977"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-20T01:17:29.353Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://support.apple.com/en-us/149034","label":"product-security@apple.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-86979","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-86979 — A privacy issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27. An…","description":"A privacy issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27. An app may be able to access sensitive user data.","indicators":{"cves":["CVE-2026-86979"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-20T01:17:29.450Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://support.apple.com/en-us/149035","label":"product-security@apple.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-86981","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-86981 — An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in mac…","description":"An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to cause unexpected system termination.","indicators":{"cves":["CVE-2026-86981"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-20T01:17:29.540Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://support.apple.com/en-us/149042","label":"product-security@apple.com","domainType":"other"},{"url":"https://support.apple.com/en-us/149043","label":"product-security@apple.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-102438","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-102438 — An uncontrolled search path element vulnerability in ASUS Armoury Crate allows local users to execut…","description":"An uncontrolled search path element vulnerability in ASUS Armoury Crate allows local users to execute arbitrary code with SYSTEM privileges via replacement of a dynamic-link library (DLL) that is later loaded by a high-privilege process.\nRefer to the '\nSecurity Update for Armoury Crate App ' section…","indicators":{"cves":["CVE-2026-102438"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-20T02:17:08.147Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://www.asus.com/security-advisory","label":"54bf65a7-a193-42d2-b1ba-8e150d3c35e1","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-17518","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-17518 — Buffer Copy without Checking Size of Input in certain ASUS router models allows an adjacent authenti…","description":"Buffer Copy without Checking Size of Input in certain ASUS router models allows an adjacent authenticated user to corrupt device operations and cause a denial of service via an HTTP request with input exceeding the expected length.\nRefer to the ' Security Update for ASUS Router Firmware' section on…","indicators":{"cves":["CVE-2026-17518"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-20T02:17:11.307Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://www.asus.com/security-advisory","label":"54bf65a7-a193-42d2-b1ba-8e150d3c35e1","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-75753","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-75753 — Missing Authentication for a Critical Function in certain ASUS routers allows an unauthorized nearby…","description":"Missing Authentication for a Critical Function  in certain ASUS routers allows an unauthorized nearby user to send specific commands via HTTP requests, causing the router to return device identification information and switch into a specific mode. As a result, when the router encounters abnormal con…","indicators":{"cves":["CVE-2026-75753"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-20T02:17:11.840Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://www.asus.com/security-advisory","label":"54bf65a7-a193-42d2-b1ba-8e150d3c35e1","domainType":"other"}],"feedLabel":null},{"id":"vendor-dispel-zero-trust-engine-for-oems-to-secure-remote-industrial-service-standardiz","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"Dispel Zero Trust Engine for OEMs to secure remote industrial service, standardize access, strengthen compliance","description":"Dispel announced the launch of Dispel Zero Trust Engine for OEMs, a solution purpose-built for OEMs and machine...\nThe post Dispel Zero Trust Engine for OEMs to secure remote industrial service, standardize access, strengthen compliance appeared first on Industrial Cyber.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T15:34:17.000Z","fetchedAt":"2026-10-20T03:00:13.997Z","references":[{"url":"https://industrialcyber.co/news/dispel-zero-trust-engine-for-oems-to-secure-remote-industrial-service-standardize-access-strengthen-compliance/","label":"Industrial Cyber","domainType":"other"}],"feedLabel":null},{"id":"news-nikkei-discloses-third-data-breach-in-a-month-1-8m-records-exposed","source":"general-news","category":"news","severity":"unknown","title":"Nikkei discloses third data breach in a month, 1.8M records exposed","description":"Nikkei Inc. disclosed a new data breach, the third in about a month, that exposed 1.83 million personal information records. [...]","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T21:49:48.000Z","fetchedAt":"2026-10-20T03:00:04.645Z","references":[{"url":"https://www.bleepingcomputer.com/news/security/nikkei-discloses-third-data-breach-in-a-month-18m-records-exposed/","label":"BleepingComputer","domainType":"media"}],"feedLabel":null},{"id":"news-hackers-hijack-aomei-update-servers-to-secretly-spread-malware","source":"general-news","category":"news","severity":"unknown","title":"Hackers hijack AOMEI update servers to secretly spread malware","description":"Hackers reportedly compromised AOMEI's servers to distribute malware through a built-in promotional feature in its backup software, briefly tampering with configuration files before restoring them to their original state to hide the attacks.a [...]","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T19:40:58.000Z","fetchedAt":"2026-10-20T03:00:04.645Z","references":[{"url":"https://www.bleepingcomputer.com/news/security/hackers-hijack-aomei-update-servers-to-secretly-spread-malware/","label":"BleepingComputer","domainType":"media"}],"feedLabel":null},{"id":"news-bullhorn-takes-staffing-platform-offline-to-contain-cyberattack","source":"general-news","category":"news","severity":"unknown","title":"Bullhorn takes staffing platform offline to contain cyberattack","description":"Staffing software company Bullhorn has disabled access to its platform to contain a cyberattack that caused a system-wide outage. [...]","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T18:51:13.000Z","fetchedAt":"2026-10-20T03:00:04.645Z","references":[{"url":"https://www.bleepingcomputer.com/news/security/bullhorn-takes-staffing-platform-offline-to-contain-cyberattack/","label":"BleepingComputer","domainType":"media"}],"feedLabel":null},{"id":"news-opencode-hack-exposes-api-keys-amid-ai-distillation-attacks","source":"general-news","category":"news","severity":"unknown","title":"OpenCode hack exposes API keys amid AI distillation attacks","description":"The open-source AI coding project OpenCode has notified a small number of users that API keys they used with external providers were exposed in a security breach. [...]","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T17:27:15.000Z","fetchedAt":"2026-10-20T03:00:04.645Z","references":[{"url":"https://www.bleepingcomputer.com/news/security/opencode-hack-exposes-api-keys-amid-ai-distillation-attacks/","label":"BleepingComputer","domainType":"media"}],"feedLabel":null},{"id":"news-microsoft-fixes-game-app-crashes-caused-by-recent-windows-update","source":"general-news","category":"news","severity":"unknown","title":"Microsoft fixes game, app crashes caused by recent Windows update","description":"Microsoft has resolved a bug that caused games and apps using AC-3 (Dolby Digital) audio decoding to crash after installing the September 2026 Windows 11 preview update (KB5124010). [...]","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T14:55:23.000Z","fetchedAt":"2026-10-20T03:00:04.645Z","references":[{"url":"https://www.bleepingcomputer.com/news/microsoft/microsoft-fixes-game-app-crashes-caused-by-windows-kb5124010-preview-update/","label":"BleepingComputer","domainType":"media"}],"feedLabel":null},{"id":"news-hackers-exploit-plex2shell-flaws-to-install-crypto-miners-and-linux-proxy-backdo","source":"general-news","category":"news","severity":"unknown","title":"Hackers Exploit Plex2Shell Flaws to Install Crypto Miners and Linux Proxy Backdoor","description":"Threat actors have begun to exploit a chain of vulnerabilities in Plex Media Server to deploy cryptocurrency miners and reverse proxy software, a day after a proof-of-concept (PoC) went public.\n\nAccording to a researcher who goes by the online alias boredhackerblog, the exploitation activity involve…","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T17:32:13.000Z","fetchedAt":"2026-10-20T03:00:04.645Z","references":[{"url":"https://thehackernews.com/2026/10/hackers-exploit-plex2shell-flaws-to.html","label":"The Hacker News","domainType":"media"}],"feedLabel":null},{"id":"news-popular-wordpress-seo-plugin-rank-math-pro-hijacked-to-deliver-self-restoring-ba","source":"general-news","category":"news","severity":"unknown","title":"Popular WordPress SEO Plugin Rank Math PRO Hijacked to Deliver Self-Restoring Backdoor","description":"Copies of Rank Math PRO, the paid version of the Rank Math SEO plugin for WordPress, that were downloaded from rankmath.com or delivered as updates between 20:02 UTC on October 15 and 07:12 UTC on October 16 contained malware, Rank Math said in a security notice published on October 16.\n\nAny site th…","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T16:28:47.000Z","fetchedAt":"2026-10-20T03:00:04.645Z","references":[{"url":"https://thehackernews.com/2026/10/popular-wordpress-seo-plugin-rank-math.html","label":"The Hacker News","domainType":"media"}],"feedLabel":null},{"id":"news-adfection-turns-ad-impressions-into-zero-click-spyware-delivery","source":"general-news","category":"news","severity":"unknown","title":"'AdFection' Turns Ad Impressions Into Zero-Click Spyware Delivery","description":"Spyware vendors are exploiting targeted ad bidding in the digital ecosystem to identify and track individuals and organizations of interest.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T19:55:01.000Z","fetchedAt":"2026-10-20T03:00:04.645Z","references":[{"url":"https://www.darkreading.com/data-privacy/adfection-online-ads-spyware-delivery","label":"Dark Reading","domainType":"media"}],"feedLabel":null},{"id":"news-connectwise-disables-cloud-backups-amid-concerns-for-downstream-msps","source":"general-news","category":"news","severity":"unknown","title":"ConnectWise Disables Cloud Backups Amid Concerns for Downstream MSPs","description":"Researchers say attackers authenticated into Microsoft 365 tenants using ConnectWise credentials; ConnectWise says customer impact remains unconfirmed.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T19:19:33.000Z","fetchedAt":"2026-10-20T03:00:04.645Z","references":[{"url":"https://www.darkreading.com/identity-access-management-security/connectwise-disables-cloud-backups-downstream-msps","label":"Dark Reading","domainType":"media"}],"feedLabel":null},{"id":"news-siemens-software-center-vulnerability-exploited-in-clickfix-malware-attacks","source":"general-news","category":"news","severity":"unknown","title":"Siemens Software Center Vulnerability Exploited in ClickFix Malware Attacks","description":"Attackers paired a genuine, signed copy of Siemens Software Center with malicious DLLs to infect Windows PCs via ClickFix lures.\nThe post Siemens Software Center Vulnerability Exploited in ClickFix Malware Attacks appeared first on SecurityWeek.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T18:15:39.000Z","fetchedAt":"2026-10-20T03:00:04.645Z","references":[{"url":"https://www.securityweek.com/siemens-software-center-vulnerability-exploited-in-clickfix-malware-attacks/","label":"SecurityWeek","domainType":"media"}],"feedLabel":null},{"id":"news-exploited-vulnerabilities-typically-take-three-months-to-patch-moody-s-finds","source":"general-news","category":"news","severity":"unknown","title":"Exploited Vulnerabilities Typically Take Three Months to Patch, Moody’s Finds","description":"Known exploited vulnerabilities take a median time of 87 days to be patched, according to a new Moody’s report","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T15:25:00.000Z","fetchedAt":"2026-10-20T03:00:04.645Z","references":[{"url":"https://www.infosecurity-magazine.com/news/exploited-vulnerabilities-three/","label":"InfoSecurity Magazine","domainType":"media"}],"feedLabel":null},{"id":"news-ahold-delhaize-confirms-malicious-actions-behind-cyber-outages-affecting-grocery","source":"general-news","category":"news","severity":"unknown","title":"Ahold Delhaize confirms 'malicious actions' behind cyber outages affecting grocery brands","description":"Ahold Delhaize, the Dutch multinational grocery retailer, said Monday that a cyberattack forced it to take systems offline across most of its U.S. and European brands, impacting shoppers on both sides of the Atlantic.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T16:45:00.000Z","fetchedAt":"2026-10-20T03:00:04.645Z","references":[{"url":"https://therecord.media/ahold-delhaize-cyberattack-grocery","label":"The Record","domainType":"media"}],"feedLabel":null},{"id":"news-dhs-to-ban-deepseek-from-federal-civilian-agencies","source":"general-news","category":"news","severity":"unknown","title":"DHS to ban DeepSeek from federal civilian agencies","description":"The order cites national security concerns, including sending data to servers in China, the potential for malware and the overall risk to federal IT systems.\nThe post DHS to ban DeepSeek from federal civilian agencies appeared first on CyberScoop.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T15:27:20.000Z","fetchedAt":"2026-10-20T03:00:04.645Z","references":[{"url":"https://cyberscoop.com/dhs-bans-deepseek-federal-agencies/","label":"CyberScoop","domainType":"media"}],"feedLabel":null}],"llmPrompt":"You are a cybersecurity analyst. Summarize this daily threat intelligence report for 2026-10-20.\nTotal items collected: 5076 from sources: cisa-kev: 7, nvd: 4259, otx: 29, cisa-advisories: 14, vendor-blogs: 627, malware-bazaar: 20, abuse-ipdb: 20, threatfox: 3, general-news: 110.\n\nTop threats by severity:\n1. [CRITICAL] CVE-2026-109432 — Camunda 7.24.0 before 7.24.14 and 7.23.0 before 7.23.17 contains an expression injection vulnerabili…\n2. [CRITICAL] CVE-2026-111057 — Mercury is a Python framework for sharing Jupyter notebooks as web applications and dashboards. From…\n3. [CRITICAL] CVE-2026-111058 — Mercury is a Python framework for sharing Jupyter notebooks as web applications and dashboards. Prio…\n4. [CRITICAL] CVE-2026-107083 — SENAYAN Library Management System (SLiMS) Bulian (slims9_bulian) 9.8.0 is vulnerable to SQL Injectio…\n5. [CRITICAL] CVE-2026-107188 — A user can upload export reports with any file contents and specify any contents. JSP code can be up…\n6. [CRITICAL] CVE-2026-111862 — Rank Math SEO PRO for WordPress is affected by a supply-chain compromise in a subset of version 3.0.…\n7. [CRITICAL] CVE-2026-109437 — Cognition before 0.13.0 contains an unauthenticated remote code execution vulnerability due to defau…\n8. [CRITICAL] CVE-2026-112776 — Craft CMS from 5.0.0 before 5.11.0 contains an authorization bypass vulnerability that allows site-s…\n9. [CRITICAL] CVE-2026-112779 — Grav API plugin (grav-plugin-api) 1.0.40 before 1.0.42 caches a full translation dictionary for ever…\n10. [CRITICAL] CVE-2026-112370 — A vulnerability was found in H3C Magic NX15 100R017. This issue affects the function sub_416874 of t…\n\nProvide: (1) Executive summary (2-3 sentences), (2) Key threats to watch,\n(3) Recommended actions for security teams, (4) Notable trends.\nBe concise and actionable. Focus on what matters most to defenders."}