PixPirate malware

PixPirate Resurfaces: Spreading via WhatsApp and Expanding Beyond Brazil

Do Son November 27, 2024

Discover the resurgence of PixPirate malware targeting financial services through WhatsApp. Learn how this highly sophisticated threat has expanded its reach globally.

📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

or try free for 14 days →

CVE-2010-20125CVSS 8.7
DedeCMS before 5.7 contains a file inclusion vulnerability in plus/carbuyaction.php that allows remote unauthenticated attackers to control the...
Watchtower Verified📅 Updated: Oct 30, 2026
CVE-2015-20130CVSS 5.1
Netsweeper before 4.0.11 and 4.1.0 before 4.1.5 contains a reflected cross-site scripting vulnerability in webadmin/reporter/view_server_log.php that allows remote...
Watchtower Verified📅 Updated: Oct 30, 2026
CVE-2026-118527CVSS 4.3
Use of predictable filenames in Ivanti Connect Secure before versions 25.1.1.3 and 22.8R2.6 allows a remote authenticated attacker...
Admin intel📅 Updated: Oct 30, 2026
CVE-2026-118539
This module enables you to sell goods and services to customers through an included shopping cart and checkout...
Admin intel📅 Updated: Oct 29, 2026
CVE-2022-31034CVSS 8.3
Impact All versions of Argo CD starting with v0.11.0 are vulnerable to a variety of attacks when an...
Watchtower Verified📅 Updated: Oct 29, 2026
CVE-2026-112353CVSS 6.2
GFI KerioConnect (Kerio Connect) before 10.0.8 Patch 2 contains a stored cross-site scripting vulnerability in the Webmail component...
Watchtower Verified📅 Updated: Oct 29, 2026
CVE-2026-116779CVSS 9.8
Summary `sofia_presence_handle_sip_i_message()` splits the To user of an inbound SIP MESSAGE on `+` and treats the left half...
Admin intel📅 Updated: Oct 29, 2026
CVE-2026-97229CVSS 10.0
GitLab has remediated an issue that, under certain conditions, could have allowed an unauthenticated user to execute arbitrary...
CISA KEV📅 Added to KEV: Oct 29, 2026

CVE-2026-118333CVSS 9.3
Missing authorization in Video in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to bypass web origin...
📅 Updated: Oct 30, 2026
CVE-2026-118337CVSS 9.3
Improper access control in Forms in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to bypass web...
📅 Updated: Oct 30, 2026
CVE-2026-104339CVSS 9.8
IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote attacker to execute arbitrary code due to improper...
📅 Updated: Oct 30, 2026
CVE-2026-107327CVSS 9.9
IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to execute arbitrary code due to...
📅 Updated: Oct 30, 2026
CVE-2026-107328CVSS 9.9
IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to execute arbitrary code due to...
📅 Updated: Oct 30, 2026
CVE-2026-107329CVSS 9.9
IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to execute arbitrary code due to...
📅 Updated: Oct 30, 2026
CVE-2026-110186CVSS 9.8
IBM Langflow OSS 1.0.0 through 1.12.8 could allow a remote attacker to execute arbitrary code due to improper...
📅 Updated: Oct 30, 2026
CVE-2026-93680CVSS 9.8
IBM Langflow OSS 1.0.0 through 1.12.8 could allow a remote attacker to bypass security restrictions due to improper...
📅 Updated: Oct 30, 2026