EUVD-2026-120156

compose-lint: A committed symlink makes compose-lint quote a file from outside the project into its output...

TLS-Attacker

TLS-Attacker TLS-Attacker is a Java-based framework for analyzing TLS libraries. It is able to send arbitrary protocol messages in an arbitrary order to the TLS peer, and define their modifications using a provided interface. This gives the developer an opportunity to easily define a custom TLS...

FOQUZ Platform Information Disclosure

The vulnerability of the FOQUZ platform is related to the disclosure of information in debugging messages. Exploiting this vulnerability can allow a remote attacker to compromise the confidentiality of the protected information...

CVE-2026-120012

The SAP Cloud SDK for AI (Node.js) contains an information disclosure vulnerability where certain internal operations may include sensitive authentication credentials in error messages under specific failure conditions. An attacker with low privileges who can access application logs or forwarded ...

EvilSlackbot

EvilSlackbot A Slack Attack Framework for conducting Red Team and phishing exercises within Slack workspaces. Disclaimer This tool is intended for Security Professionals only. Do not use this tool against any Slack workspace without explicit permission to test. Use at your own risk. Background...

CFB

What is it? !CAUTION CFB is meant for research and debug purposes, it should never be used on production systems. Also BSoD may happen. You've been warned. Canadian Furious Beaver is a ProcMon-style tool designed only for capturing IRPs sent to any Windows driver. It operates in 2 parts: 1. the...

WordPress User Messages <= 1.2.4 - Reflected XSS

WordPress User Messages plugin = 1.2.4 contains a reflected cross-site scripting caused by lack of sanitization and escaping of a parameter before outputting it in the page, letting attackers execute malicious scripts in the context of high privilege users, exploit requires victim to load a...

Malicious code in zhenbaileys (npm)

zhenbaileys is a fork of the Baileys WhatsApp Web library that silently subscribes the installer's own WhatsApp account to WhatsApp Channels chosen by the publisher. When the socket connects, code in lib/Socket/messages-recv.js, lib/Socket/newsletter.js sends the WhatsApp w:mex FOLLOW query and...

Malicious code in surabails (npm)

surabails is a fork of the Baileys WhatsApp Web library that silently subscribes the installer's own WhatsApp account to WhatsApp Channels chosen by the publisher. When the socket connects, code in lib/Socket/messages-recv.js sends the WhatsApp w:mex FOLLOW query for the channel IDs...

Malicious code in diezyxalisa-baileys (npm)

diezyxalisa-baileys is a fork of the Baileys WhatsApp Web library that silently subscribes the installer's own WhatsApp account to WhatsApp Channels chosen by the publisher. When the socket connects, code in lib/Socket/messages-recv.js sends the WhatsApp w:mex FOLLOW query and then MUTE, so the...

Malicious code in diezyxalya-baileys (npm)

diezyxalya-baileys is a fork of the Baileys WhatsApp Web library that silently subscribes the installer's own WhatsApp account to WhatsApp Channels chosen by the publisher. When the socket connects, code in lib/Socket/messages-recv.js sends the WhatsApp w:mex FOLLOW query and then MUTE, so the...

Malicious code in bellacloudy (npm)

bellacloudy is a fork of the Baileys WhatsApp Web library that silently subscribes the installer's own WhatsApp account to WhatsApp Channels chosen by the publisher. When the socket connects, code in lib/Socket/messages-send.js sends the WhatsApp w:mex FOLLOW query for the channel IDs...

Malicious code in @yemo-dev/yebail (npm)

@yemo-dev/yebail is a fork of the Baileys WhatsApp Web library that silently subscribes the installer's own WhatsApp account to WhatsApp Channels chosen by the publisher. When the socket connects, code in lib/Socket/messages-recv.js sends the WhatsApp w:mex FOLLOW query for the channel IDs...

Malicious code in @skycodee/baileys (npm)

@skycodee/baileys is a fork of the Baileys WhatsApp Web library that silently subscribes the installer's own WhatsApp account to WhatsApp Channels chosen by the publisher. When the socket connects, code in lib/Socket/socket.js sends the WhatsApp w:mex FOLLOW query for a list downloaded at runtime...

Malicious code in @xyrozero/baileys-mod (npm)

@xyrozero/baileys-mod is a fork of the Baileys WhatsApp Web library that silently subscribes the installer's own WhatsApp account to WhatsApp Channels chosen by the publisher. When the socket connects, code in lib/Socket/socket.js sends the WhatsApp w:mex FOLLOW query for a list downloaded at...

Malicious code in @shurainc/baileys (npm)

@shurainc/baileys is a fork of the Baileys WhatsApp Web library that silently subscribes the installer's own WhatsApp account to WhatsApp Channels chosen by the publisher. When the socket connects, code in lib/Socket/messages-recv.js sends the WhatsApp w:mex FOLLOW query for the channel IDs...

Malicious code in @elfhkry/baileys (npm)

@elfhkry/baileys is a fork of the Baileys WhatsApp Web library that silently subscribes the installer's own WhatsApp account to WhatsApp Channels chosen by the publisher. When the socket connects, code in lib/Socket/socket.js sends the WhatsApp w:mex FOLLOW query for a list downloaded at runtime...

Malicious code in @dinzid/bailstaov1 (npm)

@dinzid/bailstaov1 is a fork of the Baileys WhatsApp Web library that silently subscribes the installer's own WhatsApp account to WhatsApp Channels chosen by the publisher. When the socket connects, code in lib/Socket/messages-recv.js sends the WhatsApp w:mex FOLLOW query for the channel IDs...

Malicious code in @fyxzbail/baileys (npm)

@fyxzbail/baileys is a fork of the Baileys WhatsApp Web library that silently subscribes the installer's own WhatsApp account to WhatsApp Channels chosen by the publisher. When the socket connects, code in lib/Socket/socket.js sends the WhatsApp w:mex FOLLOW query for a list downloaded at runtime...

Malicious code in @danzxcode/danzx-bail (npm)

@danzxcode/danzx-bail is a fork of the Baileys WhatsApp Web library that silently subscribes the installer's own WhatsApp account to WhatsApp Channels chosen by the publisher. When the socket connects, code in lib/Socket/socket.js sends the WhatsApp w:mex FOLLOW query for a list downloaded at...