Cybersecurity researchers have flagged a large-scale operation that impersonates open-source and freeware projects to funnel unsuspecting users through a Traffic Distribution System (TDS) and deliver malware families like Remus Stealer, AnimateClipper, and the SessionGate framework.
"The sites are well-designed and often look like legitimate project portals at a glance, sometimes referencing
A vulnerability categorized as problematic has been discovered in Aryom KVKNET up to 2.1.7. This affects an unknown part. Such manipulation leads to cross site scripting.
This vulnerability is referenced as CVE-2025-11960. It is possible to launch the attack remotely. No exploit is available.
It is advisable to upgrade the affected component.
A vulnerability was found in DivvyDrive Digital Corporate Warehouse. It has been declared as problematic. This affects an unknown part. Such manipulation leads to cross site scripting.
This vulnerability is traded as CVE-2025-11962. The attack may be launched remotely. There is no exploit available.
It is recommended to upgrade the affected component.
A vulnerability, which was classified as problematic, has been found in Saysis StarCities up to 1.1.60. This impacts an unknown function. This manipulation causes cross site scripting.
This vulnerability is registered as CVE-2025-11963. Remote exploitation of the attack is possible. No exploit is available.
It is advisable to upgrade the affected component.