CVE-2025-23172 Archives - x86.se

Home CVE-2025-23172

3 Min Read

Stealth C2: Hackers Abuse Discord Webhooks for Covert Data Exfiltration in npm, PyPI, and RubyGems Supply Chain Attacks

October 14, 2025

Stealth C2: Hackers Abuse Discord Webhooks for Covert Data Exfiltration in npm, PyPI, and RubyGems Supply Chain Attacks

The Socket Threat Research Team has uncovered a growing trend among malicious package developers: leveraging Discord webhooks as…

2 Min Read

DoS Flaws in Argo CD: Unauthenticated Attackers Can Crash Kubernetes Server with Single Request

October 2, 2025

DoS Flaws in Argo CD: Unauthenticated Attackers Can Crash Kubernetes Server with Single Request

The Argo CD project has released patches addressing several denial-of-service (DoS) that could allow attackers to crash the argocd-server…

3 Min Read

Backdoor Disguised as SOCKS5 Proxy: Malicious PyPI Package SoopSocks Grants Root Access

October 1, 2025

Backdoor Disguised as SOCKS5 Proxy: Malicious PyPI Package SoopSocks Grants Root Access

The of the open-source software supply chain was once again tested when JFrog’s research team uncovered a malicious package on PyPI. The…