hostintel

hostintel This tool is used to collect various intelligence sources for hosts. Hostintel is written in a modular fashion so new intelligence sources can be easily added. Hosts are identified by FQDN host name, Domain, or IP address. This tool only supports IPv4 at the moment. The output is in CSV...

Malicious code in @brick-v2/brand (npm)

Source: amazon-inspector a194395a620ef40055a22d7beccbab1e1ca0c662afe83b9ee2fb23d07ebaedc5 package.json declares a preinstall hook node index.js || true that loads a prebuilt native addon at prebuilds/-/metrics.node. The addon reads credential-grade environment variables AWSSECRETACCESSKEY and oth...

Malicious code in @brick-v2/tour (npm)

Source: amazon-inspector aabec40c085d56f59b4ca696eefe600f450a03284df0d77f562d861fed091bee The package presents itself as an Angular-style module exposing forRoot/createLogger stubs and a version field, but these exports are no-ops. The real behavior is in a bundled prebuilt native addon at...

Malicious code in @brick-v2/table (npm)

Source: amazon-inspector 1fdd2bc5b913543c62603b366fb4e1261407f63541e4b01ff7e0052e522523e0 @brick-v2/table presents a trivial Angular-style logger/table shim forRoot/createLogger/version no-ops while index.js unconditionally side-loads prebuilds/-/metrics.node on require. The native addon reads...

Malicious code in @brick-v2/core (npm)

Source: amazon-inspector 90c1fd9505ce4256620f9cb647e3a57a5af52539aa1e717a3eecb0485dec8c83 The package's main entry index.js loads a prebuilt native binary at prebuilds/-/metrics.node inside a top-level try/catch, executing native code within the Node process as soon as the module is required. The...

Malicious code in @brick-v2/form (npm)

Source: amazon-inspector 61727d51587469176de52cbc3c82a53b4572ecfc6c7f7b4c7edf534950b0f536 The package ships a tiny JavaScript stub at index.js that silently requires a compiled native addon at prebuilds/linux-x64/metrics.node inside a try/catch that suppresses errors. On load, the addon reads a...

Malicious code in @brick-v2/icons (npm)

Source: amazon-inspector 915977ddb276c313e2977875d853dfba4eebd12f75ad0826008866b5059c68a8 @brick-v2/[email protected] is a dependency-confusion credential stealer. The package's package.json declares a preinstall script node index.js, and index.js's only behavior is to require a platform-specific...

MAL-2026-17714 Malicious code in @brick-v2/brand (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a194395a620ef40055a22d7beccbab1e1ca0c662afe83b9ee2fb23d07ebaedc5 package.json declares a preinstall hook node index.js || true that loads a prebuilt native addon at prebuilds/-/metrics.node. The addon reads...

MAL-2026-17717 Malicious code in @brick-v2/icons (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 915977ddb276c313e2977875d853dfba4eebd12f75ad0826008866b5059c68a8 @brick-v2/[email protected] is a dependency-confusion credential stealer. The package's package.json declares a preinstall script node index.js, and...

cotopaxi

.d8888b. 888 d8b d88P Y88b 888 Y8P 888 888 888 888 .d88b. 888888 .d88b. 88888b. 8888b. 888 888 888 888 d88""88b 888 d88""88b 888 "88b "88b 'Y8bd8P' 888 888 888 888 888 888 888 888 888 888 .d888888 X88K 888 Y88b d88P Y88..88P Y88b. Y88..88P 888 d88P 888 888 .d8""8b. 888 "Y8888P" "Y88P" "Y888 "Y88P...

pe-bear

PE-bear PE-bear هي أداة عكسية متعددة المنصات لملفات PE. هدفها تقديم "نظرة أولى" سريعة ومرنة لمحللي البرامج الضارة، مع ثبات وقدرة على التعامل مع ملفات PE التالفة. التوقيعات لـ PE-bear: SIG.txt مُحدَّثة: 17 أكتوبر 2022 - تحتوي على توقيعات منقاعدة مستخدمي PEid - تم تحويلها بواسطة سكريبت قدمه crashis...

CVE-2026-21005-Docker-Registry-V2-Schema-1-Image-Poisoning

CVE-2026-21005 – Envenenamiento de imágenes en Docker Registry V2 Schema 1 Código del programa Python Flask + Shell dockerregistrysim.py - Simulated registry that serves schema1 manifests from flask import Flask, request, jsonify app = Flaskname images = 'myapp': 'v1': 'layers': 'sha256:abc',...

qemu-t8030

QEMU README QEMU 是一个通用且开源的全机器模拟器及用户态模拟器与虚拟化器。 QEMU 能够完全通过软件模拟一台完整的机器，无需任何硬件虚拟化支持。通过使用动态翻译技术，它可以实现非常出色的性能。QEMU 也可以与 Xen 和 KVM 虚拟机监控程序集成，以提供模拟硬件，同时让虚拟机监控程序管理 CPU。借助虚拟机监控程序支持，QEMU 能够使 CPU 达到接近原生的性能。当 QEMU 直接模拟 CPU 时，它能够在一台机器（例如 x8664 PC 主板）上运行为另一台机器（例如 ARMv7 主板）设计的操作系统。 QEMU 还能够为 Linux 和 BSD 内核接口提供用...

EUVD-2026-95405

TP-Link Tapo C325WB V2 contains an unauthenticated authorization bypass vulnerability in the HTTPS JSON API dispatcher on TCP port 443. An attacker on the adjacent network can append an onboarding-scoped object to a JSON request to bypass session verification and invoke privileged actions without...

EUVD-2026-95406

TP-Link Tapo C325WB V2 generates the pre-shared key used by its local media streaming service with a time-seeded pseudo-random number generator, making the key predictable and recoverable. An unauthenticated attacker on the adjacent network can recover the key and authenticate to the media...

CVE-2026-105672

TP-Link Tapo C325WB V2 contains an unauthenticated authorization bypass vulnerability in the HTTPS JSON API dispatcher on TCP port 443. An attacker on the adjacent network can append an onboarding-scoped object to a JSON request to bypass session verification and invoke privileged actions without...

CVE-2026-105673

An unauthenticated denial-of-service vulnerability exists in Tapo C325WB v2 in the RTSP streaming service on TCP port 554 when the Camera Account feature is enabled. A crafted pair of RTSP-over-HTTP tunneling requests can cause memory corruption and crash the streaming daemon. Successful...

CVE-2026-105674

TP-Link Tapo C325WB V2 generates the pre-shared key used by its local media streaming service with a time-seeded pseudo-random number generator, making the key predictable and recoverable. An unauthenticated attacker on the adjacent network can recover the key and authenticate to the media...

CVE-2026-97147

In OpenStack Mistral through 23.0.0, several of the v2 API write paths resolve the target object with a query that can return another project's resource, then write to it. An authenticated project member can use this to rewrite and un-publish another project's public action definitions and...

CVE-2026-93860

In OpenStack Mistral through 23.0.0, the /v2/maintenance API controller clears the request context and calls the maintenance service directly without any policy enforcement. Any holder of a valid Mistral token, regardless of assigned role, can read and change the service's cluster-wide maintenanc...