ColorTokens

Mentions · 7d0
Mentions · 30d0
All mentions3
First seenSep 10, 2026
Last mentionedOct 5, 2026

Timeline

3 articles · newest first

ClingSTUN Malware Turns Unpatched IoT Devices Into Proxy Nodes

ClingSTUN exploits unpatched IoT flaws and uses public STUN servers to run proxy nodes.

Infosecurity MagazineOct 5, 14:30 UTC · Oct 5, 2026MalwareExploitedCVE-2022-36553 CVE-2025-34035 CVE-2024-23625+46 · 1 read

GitHub App keys can still enable takeovers long after they are forgotten

GitGuardian found 474 still-valid leaked GitHub App keys that can enable repository access and organization takeovers.

CSO OnlineSep 23, 15:12 UTC · Sep 23, 2026Research 2 sources

Stealth rootkit targeting F5 BIG-IP could expose enterprise identity gateways

Sophos analyzed a stealth Linux rootkit that hides a web shell in memory on compromised F5 BIG-IP APM identity gateways, evading file-based detection.

CSO OnlineSep 10, 11:51 UTC · Sep 10, 2026MalwareExploitedCVE-2025-535211 · 1 read

Related CVEs

by mentions

CVE-2025-535212%9.3
Stack-Based Buffer Overflow in F5 BIG-IP APM Enables Unauthenticated RCE
published Oct 15, 2025F5 BIG-IP (BIG-IP Access Policy Manager / APM)KEV
CVE-2025-6703821%9.3
Unauthenticated Root Command Injection in Lantronix EDS5000 Device Servers
published Mar 11, 2026lantronix eds5008 firmwareKEV
CVE-2024-21887100%9.1
Command Injection RCE in Ivanti Connect Secure and Policy Secure
published Jan 12, 2024Ivanti Connect Secure (ICS, formerly Pulse Connect Secure)KEVRansomwarePoC
CVE-2023-46805100%8.2
Authentication Bypass in Ivanti Connect Secure and Policy Secure Web Component
published Jan 12, 2024Ivanti Connect Secure (ICS, formerly Pulse Connect Secure)KEVRansomwarePoC
CVE-2025-3403525%10.0
Unauthenticated root command injection in EnGenius EnShare
published Jun 24, 2025EnGenius ESR300 firmwarePoC ×3
CVE-2022-3655391%9.8
Hytec Inter HWL-2511-SS v1.05 and below was discovered to contain a command injection vulnerability via the component /www/cgi-bin/popen.cgi
published Aug 29, 2022hytec hwl-2511-ss firmware
CVE-2024-2362523%9.8
A command injection vulnerability exists in D-Link DAP-1650 devices when handling UPnP SUBSCRIBE messages
published Jan 26, 2024dlink dap-1650 firmware
CVE-2026-3635614%9.1
The GoAhead web server on MeiG Smart FORGE_SLT711 devices (firmware MDM9607.LE.1.0-00110-STD.PROD-1) allows unauthenticated OS command injection via the…
published May 5, 2026

Appears with

D-Linkvendor · 1
Sophosorganization · 1
Crusher.devvictim · 1
Linearvendor · 1
TP-Linkvendor · 1
AVTECHvendor · 1
ClingSTUNmalware · 1
Viakooorganization · 1
BuildBuddyorganization · 1
FortiGuard Labsorganization · 1
Hytecvendor · 1
BeyondTrustorganization · 1
Sierra Nevada Corporationvictim · 1
EnGeniusvendor · 1
Sierra Nevada Corporationorganization · 1
GitHub Actionsproduct · 1

Entities are extracted by the model from each article. First seen Sep 10, 2026, last mentioned Oct 5, 2026. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.