The doctreelstm package on PyPI contains malicious code that exfiltrates basic host information such as IP address and username upon installation or import. The package overrides the install command in setup.py to execute this malicious behavior. It serves no legitimate purpose beyond this data exfiltration.
The multi-convert package on PyPI contains malicious code in specific versions of its dependency 'is-it-ai'. Version 0.1.4 of the dependency includes a trigger that fingerprints the environment and contacts a remote server to download and execute a remote executable. Other versions serve as cover to hide the malicious activity. This campaign is identified as having clear malicious intent, including downloading and executing remote code.
The md-to-slides package on PyPI contains malicious code hidden in a specific dependency (is-it-ai) in version 0.1.1. This malicious code fingerprints the environment and contacts a remote server to download and execute a remote executable if instructed. Other versions appear to be decoys to conceal the malicious version. This campaign is clearly malicious and targets users by embedding harmful actions within a library dependency.
The skills-analyzer package on PyPI contains malicious code in its dependency is-it-ai version 0.1.1. This malicious code fingerprints the environment and contacts a remote server, which may respond with a URL to download and execute further malicious payloads. Other versions of the package exist to obscure the presence of the malicious version. The campaign is identified as a targeted attack with clear malicious intent, including downloading and executing remote executables.
The is-it-ai package on PyPI contains malicious code in specific versions (0.1.0, 0.1.1, 0.1.3) that, when triggered, fingerprints the environment and contacts a remote server. If the server responds with a URL, the package downloads and executes a remote executable. This behavior is part of a targeted attack campaign involving intentional inclusion of malicious code in a dependency, designed to hide malicious actions behind legitimate package versions.
The Web 2.0 Directory plugin for WordPress up to version 2.10.12 is vulnerable to a time-based SQL Injection via the 'w2dc_level_filter' parameter. This vulnerability arises from insufficient escaping and improper handling of user input in an integer context, allowing unauthenticated attackers to inject SQL queries that can extract sensitive database information. The vulnerability exploits the lack of protection against time-based payloads such as SLEEP-based conditionals.
The BuddyBoss Platform plugin for WordPress contains a stored cross-site scripting (XSS) vulnerability in all versions up to and including 3.6.0. This flaw arises from insufficient input sanitization and output escaping of the Group Name field. Authenticated users with subscriber-level access or higher can exploit this vulnerability to inject arbitrary scripts that execute when other users view the affected pages. Exploitation requires the "Enable social group creation by all members" setting to be enabled, which is the default configuration. If group creation is restricted to administrators, exploitation is not possible.
The NextGEN Gallery plugin for WordPress versions up to and including 4.4.1 contains a remote code execution vulnerability via the render_image function. This flaw arises from unrestricted mass assignment of user-supplied meta_data keys to the image model, combined with missing realpath containment and a bypassable signature check on the public image delivery route. Authenticated attackers with custom-level access or higher who own at least one NextGEN gallery can exploit this to execute code on the server. Notably, the condition to own a gallery can be met by any Subscriber previously granted the 'NextGEN Manage gallery' capability, which persists indefinitely even after revocation.
The Debug Log Manager plugin for WordPress up to version 2.5.2 is vulnerable to stored cross-site scripting (XSS) via the 'message' and 'pageUrl' parameters. This vulnerability arises from insufficient input sanitization and output escaping, allowing unauthenticated attackers to inject malicious scripts. Exploitation requires that debug logging with JavaScript error logging is enabled and that the attacker can obtain a publicly emitted nonce to bypass endpoint checks.
A file overwrite vulnerability exists in Epiphany browser when installing WebExtension packages from .xpi files. The vulnerability arises because the installer accepts TAR archives disguised as .xpi files, which can contain hard-link entries. This allows an attacker to overwrite existing user-writable files without warning when the user installs or opens a crafted malicious .xpi file. The issue affects Epiphany versions 47.0 and later and has been fixed by restricting support to ZIP format only.
The Germanized for WooCommerce plugin for WordPress versions up to 4.1.4 contains a vulnerability that allows authenticated users with Subscriber-level access or higher to access private customer data. This occurs due to improper handling of activation tokens when the "Disable login for unactivated customers" setting is set to No, which is a non-default configuration. Attackers can change their account email to a victim's billing email and redeem an original activation token to link guest orders to their account, exposing sensitive billing information. Exploitation requires public customer registration, double opt-in enabled, and token redemption within one day.
The FlexStock plugin for WooCommerce on WordPress is vulnerable to stored Cross-Site Scripting (XSS) via the 'products[].post_content' parameter in all versions up to and including 3.17.2. Authenticated users with subscriber-level access or higher can inject malicious scripts that execute when other users view the affected pages. This vulnerability arises from insufficient input sanitization and output escaping, combined with exposure of the REST bearer token in the Dashboard page source without proper capability checks.
The WP Directory Kit plugin for WordPress versions up to and including 1.6.0 is vulnerable to a generic SQL Injection via the 'idfield' parameter. This vulnerability arises from insufficient escaping of user input and inadequate preparation of the SQL query, allowing unauthenticated attackers to inject additional SQL commands. The flaw can be exploited to extract sensitive information from the database without authentication.
The GeoDirectory – WP Business Directory Plugin and Classified Listings Directory plugin for WordPress contains a stored cross-site scripting (XSS) vulnerability in the 'post_images' parameter affecting all versions up to and including 2.8.197. Authenticated users with subscriber-level access or higher can inject malicious scripts that execute in the browsers of administrators or editors when they view the pending listing's edit screen. This vulnerability enables a privilege escalation chain through normal editorial workflows.
The Ninja Forms plugin for WordPress up to version 3.15.5 is vulnerable to reflected DOM-based cross-site scripting (XSS) via a crafted 'querystring:<key>' URL parameter. This vulnerability arises from insufficient input sanitization and output escaping, allowing unauthenticated attackers to inject arbitrary scripts that execute in the context of a victim's browser if they are tricked into clicking a malicious link.
A logic error in Epiphany browser's permission handling causes camera and microphone access to be granted when the user only approves clipboard or website data access permissions. This occurs because the code incorrectly grants audiovisual permissions when handling certain permission types, allowing a malicious site to use getUserMedia without additional prompts after clipboard or website data access is allowed. The vulnerability affects Epiphany versions 45.0 through at least 51.x and requires user interaction to exploit. A fix has been implemented upstream.
A vulnerability in json-glib's JSONPath slice evaluator can cause an infinite loop when processing slice expressions with a negative step. This flaw allows an attacker who can supply crafted JSONPath expressions to cause the application to hang, resulting in a denial of service. No confidentiality or integrity impacts have been reported. No fixed release is currently available, and all shipped Red Hat and Fedora json-glib builds with this evaluator are affected.
The WooCommerce Extra Product Options Pro plugin for WordPress up to version 3.3.2 is vulnerable to reflected cross-site scripting (XSS) via specific parameters related to Date & Time Range Picker fields. This vulnerability allows unauthenticated attackers to inject arbitrary scripts that execute when a user interacts with a crafted link on affected product pages. Exploitation requires no prior knowledge beyond viewing the product page source to identify the vulnerable parameter names.
OAuthlib contains a vulnerability in its token grant handlers where an authenticated low-privilege client can supply a different client_id in the token request body, causing grant and scope validation to be performed under that other client identity. This affects the client_credentials and password grant flows. The flaw allows an attacker with valid credentials for one client to obtain tokens with the privileges of another client if the application validator authorizes based on the attacker-supplied client_id argument. The issue is fixed in OAuthlib version 0.21.0_1.
VOLTA-AUTODOXER is a self-deleting Windows infostealer that uses AI to prioritize stolen victim data by monetization value. After harvesting credentials, sessions, wallets, and other sensitive data, it builds a detailed evidence bundle about the victim, enriched via stolen session access. This bundle is sent to an LLM via OpenRouter, which acts as an intelligence analyst to rank the victim's assets and assess their security posture. The malware uses a multi-model fallback approach to ensure the AI completes the assessment despite model refusals. VOLTA operates as a builder model, allowing customers to compile customized binaries with their own API keys. There is no attacker-owned infrastructure, and exfiltration occurs in multiple stages. The AI integration represents a novel approach in malware by automating victim profiling and prioritization.