Threat Intelligence Database

Multiple distributed denial-of-service (DDoS) attacks targeted the Threema secure messaging service earlier this week, causing severe disruptions to communications. [...]

The npm package upload-to-gcp version 3.2.1 contains malicious code that executes a postinstall script during installation. This script collects host system identifiers and environment details, then sends this data to a suspicious external domain unrelated to Google Cloud Platform. This behavior occurs without user consent or disclosure, indicating a privacy and security risk.

A security update for the python36:3.6 module in Red Hat Enterprise Linux addresses a vulnerability in the virtualenv component that could allow command injection via virtual environment activation scripts. The issue is tracked as CVE-2024-53899 and is rated with an Important security impact by Red Hat. This vulnerability relates to improper handling of activation scripts in virtual environments, potentially enabling command injection attacks.

The npm package depcruise-wrap-stream-in-html version 99.9.1 is a hollow package designed to mimic an internal helper of dependency-cruiser. It installs a runtime dependency from an arbitrary HTTPS tarball hosted on an unrelated Google Cloud Storage bucket. This allows the bucket owner to change the tarball contents at any time without republishing to npm, bypassing registry scanning and version pinning. The package appears to be a dependency-confusion or smuggling lure.

A vulnerability in SourceCodester Online Clothing Store 1.0 affects the SQL Database Backup component, specifically in the /db/shopping.sql file. This flaw allows remote attackers to manipulate the system to gain access to files or directories. The vulnerability has a CVSS score of 5.3, indicating medium severity. Exploit details have been publicly disclosed, but no known exploits are currently active in the wild. No patch or remediation guidance is provided at this time.

SourceCodester Class and Exam Timetabling System 1.0 contains a SQL injection vulnerability in an unspecified function within the /edit_teacher.php file. This vulnerability allows remote attackers to manipulate the ID argument to execute unauthorized SQL commands. The vulnerability has a CVSS score of 7.3, indicating a medium severity level. No patch or remediation information is currently available. Exploit code has been publicly disclosed but there are no known exploits in the wild at this time.

A high-severity vulnerability (CVE-2026-19900) exists in LB-LINK X-PRO version 1.0.22-20231206 involving hard-coded credentials related to an unknown function interacting with the /etc/shadow file. The vulnerability can be exploited remotely but requires a high degree of attack complexity. Exploit code is publicly available, though no known exploits in the wild have been reported. The vendor has not responded to disclosure and no patch or remediation information is available.

A vulnerability in mangroup dtale up to version 3.22.0 affects the Login function in dtale/auth.py, allowing improper restriction of excessive authentication attempts. This issue can be exploited remotely but requires high complexity and no user interaction. The vulnerability has been publicly disclosed, but the project has not yet responded or provided a fix. The CVSS score is low (3.7), indicating limited impact primarily on confidentiality.

VictoriaMetrics up to version 1.146.0 contains a vulnerability in the VMAuth Authentication Endpoint's requestHandler function that allows improper restriction of excessive authentication attempts. This issue can be exploited remotely but requires high attack complexity and no privileges or user interaction. The vulnerability has a low severity score and a patch is available in version 1.147.0.

A cross-site scripting (XSS) vulnerability exists in SourceCodester Online Book Store System 1.0 within the System Settings Module at /admin/index.php?page=site_settings. The vulnerability allows remote attackers with high privileges to perform reflected XSS attacks. The vulnerability has a low severity score and no known exploits in the wild have been reported. No patch or remediation information is currently available.