mec

mec MassExploitConsole Intended for mass exploiting Follow thewiki to get started Features Easy-to-use CLI UI Execute adpated exploits with process-level concurrency Built-in exploits automated Hide your IP using proxychains4 and proxypool ZoomEye host scan 10 threads Simple Baidu crawler...

CVE-2026-12960

CVE-2026-12960 华硕路由器应用中的 Android 应用组件导出不当 华硕路由器 Android 应用（com.asus.aihome）中捆绑的一个组件被声明为 android:exported="true"，且未设置 android:permission。同一设备上的任何其他应用，即使不持有任何权限，也可以向其发送精心构造的 Intent，并让华硕路由器应用以用户名义打开攻击者控制的 URI。 于 2026-03-17 向华硕报告。华硕已修复，并作为 CVE-2026-12960 于 2026-07-03 发布。 由 Show Up Show Out Security 的...

randomrepo

SecOpsMaestro POC Github 账户劫持 - Baidu - H1...

CVE-2024-51324

CVE-2024-51324 — BYOVD: BdApiUtil64.sys · 修士論文研究 -orange Bring Your Own Vulnerable Driver BYOVD — Baidu アンチウイルスBdApiUtil64.sys 3つの未ドキュメントのカーネルプリミティブ: プロセス終了、任意ファイル削除、SectionObjectPointer バイパスによる使用中ファイル削除 影響: Baidu アンチウイルス v5.2.3.116083 BdApiUtil64.sys 脆弱ドライバをカーネルにロード中（LOADER モード） 説明 このリポジトリには、Bai...

CDN Tsunami Attack Abuses HTTP/3 Translation for Up to 350x DoS Amplification

Cybersecurity researchers have disclosed two denial-of-service DoS attacks that exploit how major content delivery networks CDNs convert client-facing HTTP/3 traffic into HTTP/1.1 requests to the websites they front, amplifying a low-bandwidth request stream by up to 350x against the origin serve...

Exploit for CVE-2026-12960

CVE-2026-12960 Improper Export of Android Application Compo...

TensorFlow vulnerable to OOB read in `Gather_nd` in TF Lite

ImpactThe GatherNd function takes arguments that determine the sizes of inputs and outputs. If the inputs given are greater than or equal to the sizes of the outputs, an out-of-bounds memory read is triggered. PatchesWe have patched the issue in GitHub commit...

MAL-2026-4562 Malicious code in figma-d2c-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b65db74a06749bbb141552f97e91b15d5bdd91b57a0136dfc8bfb4034b659c8f The package ships dist/report.js, a one-line module that issues an HTTPS POST to https://www.baidu.com carrying values read from process.env. The...

Malicious code in buddyme (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f4ae4b8c00d27e82d54a5d2d960b1dc4f40ba15bc938355bad8421c338d6ef6 buddyme advertises a CLI agent. When installed and run, the default REPL routes every prompt the user types to third-party LLM providers Zhipu GLM at...

Exploit for CVE-2024-51324

CVE-2024-51324 — BYOVD: BdApiUtil64.sys Process Killer · Maste...

CVE-2023-25796

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Include WP BaiDu Submit plugin = 1.2.1 versions...

EUVD-2025-204940

Malicious code in baidu-src-test4 npm...

MAL-2025-192713 Malicious code in baidu-src-test4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15d38e0e00f51e045ab813f8aa805cd532c164ee66f9960af5ba7ee0f286b80c The package baidu-src-test4 was found to contain malicious code...

Malicious code in baidu-src-test4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15d38e0e00f51e045ab813f8aa805cd532c164ee66f9960af5ba7ee0f286b80c The package baidu-src-test4 was found to contain malicious code...

Malicious Package

Overview baidu-tester is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

EUVD-2025-204562

Malicious code in baidu-tester npm...

MAL-2025-192665 Malicious code in baidu-tester (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 421c0014ea5fca29effc2b5cc0a04d984b9c2d557496c3ae31a5724ab6337417 The package baidu-tester was found to contain malicious code. Source: ghsa-malware e3d13abe3b7037aa5d2906857e05ea0f19837a22cf3563951cf23717228d15b2 A...

Malicious code in baidu-tester (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 421c0014ea5fca29effc2b5cc0a04d984b9c2d557496c3ae31a5724ab6337417 The package baidu-tester was found to contain malicious code. Source: ghsa-malware e3d13abe3b7037aa5d2906857e05ea0f19837a22cf3563951cf23717228d15b2 A...

MAL-2025-192424 Malicious code in baidu-oscp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1707ecb3311268a4753a44190db82280e80d16015e5474475863a3e1487aa5c0 The package baidu-oscp was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in baidu-oscp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1707ecb3311268a4753a44190db82280e80d16015e5474475863a3e1487aa5c0 The package baidu-oscp was found to contain malicious code. Source: ossf-package-analysis...