CVE-2026-12960

CVE-2026-12960 Improper Export of Android Application Components in the ASUS Router App A component bundled in the ASUS Router Android app com.asus.aihome was declared android:exported="true" with no android:permission. Any other app on the same device, holding zero permissions, could send it a...

mec

mec MassExploitConsole Intended for mass exploiting Follow thewiki to get started Features Easy-to-use CLI UI Execute adpated exploits with process-level concurrency Built-in exploits automated Hide your IP using proxychains4 and proxypool ZoomEye host scan 10 threads Simple Baidu crawler...

randomrepo

SecOpsMaestro POC Github account hijack - Baidu - H1...

CVE-2024-51324

CVE-2024-51324 — BYOVD: BdApiUtil64.sys · Master's Thesis Research -orange Bring Your Own Vulnerable Driver BYOVD — Baidu AntivirusBdApiUtil64.sys Three undocumented kernel primitives: process termination, arbitrary file deletion, and in-use file deletion with SectionObjectPointer bypass Affected...

Malicious code in baidu-oscp (npm)

Source: amazon-inspector 1707ecb3311268a4753a44190db82280e80d16015e5474475863a3e1487aa5c0 The package baidu-oscp was found to contain malicious code. Source: ossf-package-analysis 2758b8fdfed8e0df61c234bf9c6956c5f9970adf98784ba56d0b222b1f8da1a8 The OpenSSF Package Analysis project identified...

Malicious code in baidu-src-test4 (npm)

Source: amazon-inspector 15d38e0e00f51e045ab813f8aa805cd532c164ee66f9960af5ba7ee0f286b80c The package baidu-src-test4 was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in baidu-src-test3 (npm)

Source: amazon-inspector b41154fc2678ab5be471f8ef4eb2065a74e9310ea81b5d3f3fd8617a1e880d67 The package baidu-src-test3 was found to contain malicious code. Source: ossf-package-analysis e50d8f616942eb8beb76f6019780078fb1bc2d6219cc6128c56e311bc5d77a83 The OpenSSF Package Analysis project identified...

Malicious code in baidu-src-test (npm)

Source: amazon-inspector 7b70672e328a6c37f9f5a2f333c52648043af35a44d4a7c33fce30d4dde10869 The package baidu-src-test was found to contain malicious code. Source: ossf-package-analysis 1493238c2d847f5a7cbc807a1306e16c6e68b74612e8a28c1e2ada732eb952bb The OpenSSF Package Analysis project identified...

Malicious code in arno-baidu-test (npm)

The package communicates with a domain associated with malicious activity. --- Credit: OpenSSF source...

Malicious Package

Overview arno-baidu-test is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

CDN Tsunami Attack Abuses HTTP/3 Translation for Up to 350x DoS Amplification

Cybersecurity researchers have disclosed two denial-of-service DoS attacks that exploit how major content delivery networks CDNs convert client-facing HTTP/3 traffic into HTTP/1.1 requests to the websites they front, amplifying a low-bandwidth request stream by up to 350x against the origin serve...

Exploit for CVE-2026-12960

CVE-2026-12960 Improper Export of Android Application Compo...

TensorFlow vulnerable to OOB read in `Gather_nd` in TF Lite

ImpactThe GatherNd function takes arguments that determine the sizes of inputs and outputs. If the inputs given are greater than or equal to the sizes of the outputs, an out-of-bounds memory read is triggered. PatchesWe have patched the issue in GitHub commit...

MAL-2026-4562 Malicious code in figma-d2c-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b65db74a06749bbb141552f97e91b15d5bdd91b57a0136dfc8bfb4034b659c8f The package ships dist/report.js, a one-line module that issues an HTTPS POST to https://www.baidu.com carrying values read from process.env. The...

Malicious code in buddyme (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f4ae4b8c00d27e82d54a5d2d960b1dc4f40ba15bc938355bad8421c338d6ef6 buddyme advertises a CLI agent. When installed and run, the default REPL routes every prompt the user types to third-party LLM providers Zhipu GLM at...

Exploit for CVE-2024-51324

CVE-2024-51324 — BYOVD: BdApiUtil64.sys Process Killer · Maste...

CVE-2023-25796

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Include WP BaiDu Submit plugin = 1.2.1 versions...

Baidu Browser: undisclosed vulnerability (ZAI-2026-ZL8C1X)

Not disclosed. Details are not yet publicly disclosed...

Malicious code in baidu-src-test4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15d38e0e00f51e045ab813f8aa805cd532c164ee66f9960af5ba7ee0f286b80c The package baidu-src-test4 was found to contain malicious code...

MAL-2025-192713 Malicious code in baidu-src-test4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15d38e0e00f51e045ab813f8aa805cd532c164ee66f9960af5ba7ee0f286b80c The package baidu-src-test4 was found to contain malicious code...