Chronos Panel - Detect

Chronos Login Panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Chronos Login Panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Chronos Panel - Detect', 'description': 'Chronos Login...

Malicious Package

Overview Chronos.Platform.Linux.API is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

bigdl-chronos (2.0.0), bigdl-chronos-spark2 (2.0.0) +10 more potentially affected by CVE-2026-31221 via pytorch-lightning (1.6.4)

pytorch-lightning PYPI version 1.6.4 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - bigdl-chronos 2.0.0 - bigdl-chronos-spark2 2.0.0 - bigdl-chronos-spark3 2.0.0 - dicee =0.0.2, =0.1.5, =0.0.2, =0.0.3, =1.0.0,...

PT-2026-54509

The RegistrationMagic – User Registration Forms Plugin plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 6.0.9.1. This is due to missing or incorrect nonce validation on the process request function. This makes it possible for unauthenticated...

CVE-2026-12158: Cross-Site Request Forgery (CSRF)

The RegistrationMagic – User Registration Forms Plugin plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 6.0.9.1. This is due to missing or incorrect nonce validation on the processrequest function. This makes it possible for unauthenticated...

com.codbex.aion:codbex-aion-platform (>=0.5.6, <=0.5.7), com.codbex.aion:codbex-aion-platform-keycloack (>=0.5.6, <=0.5.7) +95 more potentially affected by CVE-2024-45296 +1 more via org.webjars.npm:path-to-regexp (>=0.1.7, <=8.4.2)

org.webjars.npm:path-to-regexp MAVEN version =0.1.7, =0.5.6, =0.5.6, =0.5.6, =0.4.0, =0.4.0, =0.5.3, =0.5.5 - com.codbex.kronos:codbex-kronos-coverage-aggregate 0.4.0 - com.codbex.kronos:codbex-kronos-modules-all 0.4.0 - com.codbex.kronos:codbex-kronos-modules-engines-all 0.4.0 -...

Malicious code in tombac-chronos (npm)

Suspicious install script executing index.js and an untrustworthy author email domain sl4x0.xyz strongly suggest this package is malware. --- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69e040ef4bdedbed143a5a8d1a1bb0389fa07848772a87c03da1c67557ced13e The package...

MAL-2026-2418 Malicious code in tombac-chronos (npm)

Suspicious install script executing index.js and an untrustworthy author email domain sl4x0.xyz strongly suggest this package is malware. --- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69e040ef4bdedbed143a5a8d1a1bb0389fa07848772a87c03da1c67557ced13e The package...

Malicious Package

Overview chronos-web-ui is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

aleksis-app-alsijil (>=3.0.0.dev0, <=3.0.0b0), aleksis-app-chronos (>=3.0.0.dev1, <=3.0.0b0) +40 more potentially affected by CVE-2026-27982 via django-allauth (0.63.6)

django-allauth PYPI version 0.63.6 is affected by a known vulnerability. The following packages have a transitive dependency on django-allauth and may be impacted: - aleksis-app-alsijil =3.0.0.dev0, =3.0.0.dev1, =0.1.0, =2.0.0.dev0, =2.0.1.dev0, =3.0.0b0, =4.0.0.dev11, =4.0.0.dev15 and more Sourc...

aleksis (>=2023.1.0b0, <=2023.6.0b1), aleksis-app-alsijil (>=2.0.0a3.dev0, <=2.0.0rc7.post0) +11 more potentially affected by CVE-2026-27982 via django-allauth (0.53.1)

django-allauth PYPI version 0.53.1 is affected by a known vulnerability. The following packages have a transitive dependency on django-allauth and may be impacted: - aleksis =2023.1.0b0, =2.0.0a3.dev0, =1.0.7.dev0, =2.0.0b0, =2.0.0b0, =2.0.0b0, =2.0.0b0, =2.0.0a1, =1.0.0, =2.0.0b0, =3.0.0b3,...

aleksis (>=2022.6.0.post0, <=2023.1.0.dev0), aleksis-app-alsijil (>=2.0.0, <=2.1.1) +31 more potentially affected by CVE-2025-65431 via django-allauth (0.51.0)

django-allauth PYPI version 0.51.0 is affected by a known vulnerability. The following packages have a transitive dependency on django-allauth and may be impacted: - aleksis =2022.6.0.post0, =2.0.0, =1.0.0, =2.0.0, =2.1.0, =2.0.0, =0.1.0, =2.0.0, =2.0.0, =2.0.0, =0.1.1, =2.0.0b0, =1.0.0, =1.0.2 a...

aleksis-app-alsijil (>=3.0.0, <=3.0.1), aleksis-app-chronos (>=3.0.0, <=3.0.2) +18 more potentially affected by CVE-2025-65430 via django-allauth (0.56.1)

django-allauth PYPI version 0.56.1 is affected by a known vulnerability. The following packages have a transitive dependency on django-allauth and may be impacted: - aleksis-app-alsijil =3.0.0, =3.0.0, =3.0.0, =2.0.0, =0.2.0, =0.5.0, =3.0.0, =3.1.0 - aleksis-app-stoelindeling 2.0.0 and more Sourc...

MAL-2024-11246 Malicious code in chronos-web-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b2042645907ee513e1705e5796c7860a5a694174e1033111fdf762a0ca05525c The OpenSSF Package Analysis project identified 'chronos-web-ui' @ 0.0.5 npm as malicious. It is considered malicious because: - The package...

Malicious code in chronos-web-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b2042645907ee513e1705e5796c7860a5a694174e1033111fdf762a0ca05525c The OpenSSF Package Analysis project identified 'chronos-web-ui' @ 0.0.5 npm as malicious. It is considered malicious because: - The package...

Malicious code in Chronos.Platform.Linux.API (NuGet)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in Chronos.Platforms (NuGet)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-4445 Malicious code in Chronos.Platform.Linux.API (NuGet)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in Chronos.Contracts.Net (NuGet)

--- -= Per source details. Do not edit below this line.=-...

CVE-2023-26455

RMI was not requiring authentication when calling ChronosRMIService:setEventOrganizer. Attackers with local or adjacent network access could abuse the RMI service to modify calendar items using RMI. RMI access is restricted to localhost by default. The interface has been updated to require...