118 matches found
CVE-2017-5124
CVE-2017-5124 UXSS with MHTML デモ： https://bo0om.ru/chromepoc/PoC.php （テスト済み Chrome/61.0.3163.100）...
aiiroverlay
Why an overlay, not a replacement. The thesis. Part of the AI IR Overlay™ framework. SeeCONTENTMAP.md for the full repository map. The AI IR Overlay: Framework Overview Current release: v0.35.0 · 2026-07-09 · CHANGELOG A practical incident-response baseline for AI agents in production. Adapt and...
Playbooks
目录 TOC IR 手册（Playbooks） 本仓库包含公司安全运营中心（SOC）的所有事件响应手册（Incident Response Playbooks）与工作流。 每个文件夹包含一份手册，按照 NIST - 800.61 r2 拆分为 6 个部分。 1- 准备（Preparation） 此部分应包含以下信息： 所有 资产的清单 服务器 端点（+关键端点） 网络 应用程序 员工 安全产品 基线 沟通计划 哪些安全事件 阈值 如何访问安全工具 如何授予访问权限 创建手册 规划演练 桌面推演（Table Top） 实操演练（Hands On） 2- 检测与分析（Detection an...
Next.js has Unbounded Memory Consumption via PPR Resume Endpoint
A denial of service vulnerability exists in Next.js versions with Partial Prerendering PPR enabled when running in minimal mode. The PPR resume endpoint accepts unauthenticated POST requests with the Next-Resume: 1 header and processes attacker-controlled postponed state data. Two closely related...
TencentOS Server 3: freeradius (TSSA-2023:0120)
The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2023:0120 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...
Malicious code in alvino-61 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7470dca2cc7bc4be8bc7566325d1b87239b9f538360edcaf28bb4d584cd7e442 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-143493
Malicious code in alvino-61 npm...
Malicious code in kentung-61 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16944b228cc21ad03f29822599ba83cb6f97ec306bf796ad086e38711d6802b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in bitha-61 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fcf57026c8819f69df99b8325d82c7cc40db1d3902ffbe72c1395e79930ce92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in aril-61 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f504665be9a5cf2c037d3bf244b5f6ee04a110fc0b1f9959ebdb7ad6ccffe0c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in pitra-61 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8b8355f1922aaf26fe868fa96b4c3825359674dff160ed7aebcc0ed3b4c4833 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-152503 Malicious code in alvira-61 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f45f2401b3d0887f2a7976a5448e7583d6668ad6185572a3979890c9e5f07e4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-152863 Malicious code in aril-61 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f504665be9a5cf2c037d3bf244b5f6ee04a110fc0b1f9959ebdb7ad6ccffe0c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in cinta-61 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd3b06d5c029e5e9ad9cbc2307793eea3d9c67c8e3b185781f0e84ad0fe28eca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in rita-61 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c7b2dc6901b1e52d962b8365ed1c9790c1df7c1acae85f105a0973535af6078 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-74666
Malicious code in exuberantwolverinemoccasin-61 npm...
EUVD-2025-74396
Malicious code in originalamphibianmoccasin-61 npm...
EUVD-2025-74275
Malicious code in satisfiedaspivory-61 npm...