C2-Pwn

C2-Pwn Uses Shodan API to pull down C2 servers to run known exploits on them. Requires shodan account for API. https://www.shodan.io/ Rat Exploit Support Dark Comet Remote File Download https://www.rapid7.com/db/modules/auxiliary/gather/darkcometfiledownloader Gh0st Rat buffer Overflow...

Malicious Package

Overview cz-conventional-changelog-comet-prompts-link is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that...

Malicious Package

Overview bellatrix-pino-nebula-comet is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

Breeze Comet Executes Hundreds of Fraudulent Transactions via Brazilian Payment Systems

Brazilian financial services, retail, and e-commerce organizations have become the target of a financially motivated threat actor dubbed Breeze Comet formerly UNC5669 since 2024. Google Threat Intelligence Group GTIG and Mandiant teams described the threat actor as "specializing in manipulating...

Identifying Agentic Automation with Behavioral Telemetry

Learn how Akamai uses Masked Autoencoder Transformer models to detect sparse behavioral telemetry from autonomous AI browser agents, such as Comet...

Malicious Package

Overview hermes-orbit-eslint-config-comet is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and...

Malicious Package

Overview ichnology-blueshift-cache-comet is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and th...

cloudview (0.3.0), comet-common (>=2.0.2, <=2.0.3) +7 more potentially affected by CVE-2026-0994 via protobuf (3.9.1)

protobuf PYPI version 3.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - cloudview 0.3.0 - comet-common =2.0.2, =0.1.3, =1.0.0, =0.1.0a27, =0.1.1, =0.2.0 - openxc 1.0.0 - pytext-nlp 0.2.2 - zfl-ai 0.0.10 Source cves:...

comet-common (>=1.0.5, <=2.0.1), iconrpcserver (>=1.0.3, <=1.1.2.1) +2 more potentially affected by CVE-2026-0994 via protobuf (3.5.1)

protobuf PYPI version 3.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - comet-common =1.0.5, =1.0.3, =1.1.2.1 - melon-music-player 3.0.0a0 - noquant-futu 5.10.2208 Source cves: CVE-2026-0994 Source advisory:...

comet-common (>=1.0.5, <=2.0.3), comet-core (>=1.0.4, <=2.0.1) +5 more potentially affected by CVE-2024-6844 via flask-cors (3.0.4)

flask-cors PYPI version 3.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on flask-cors and may be impacted: - comet-common =1.0.5, =1.0.4, =0.4.4a3, =0.0.24, =0.4.0, =0.4.4a3, =0.4.4 Source cves: CVE-2024-6844 Source advisory: OSV:PYSEC-2026-1385...

New BioShocking Attack Tricks AI Browsers Into Leaking User Credentials

Convince an AI browser that it is playing a game, and it can hand over your login details. That is the finding behind BioShocking , a technique from security firm LayerX that tricked six AI browsers and assistants into copying a user's credentials and sending them to an attacker. The targets...

github-acc-test (>=0.0.1, <=0.3.1), libmultilabel (>=0.0.1, <=0.1.4) +3 more potentially affected by CVE-2024-8019 via pytorch-lightning (1.3.5)

pytorch-lightning PYPI version 1.3.5 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - github-acc-test =0.0.1, =0.0.1, =0.0.1rc1, =0.1.0, =1.0.0rc1, =1.0.1 Source cves: CVE-2024-8019 Source advisory:...

CVE-2026-29200

A critical IDOR vulnerability has been discovered in Comet Backup affecting all versions from 20.11.0 to 26.1.1 and 26.2.1. The vulnerability allows a tenant administrator to impersonate any end-user account of other tenants on the same server via a vulnerable API call...

CVE-2026-32999

Insufficient character filtering in backup agent signing module on Comet Backup server allows authenticated tenant administrator to execute an arbitrary code on behalf of a privileged user on the affected server and connected devices...

CVE-2026-32999

Insufficient character filtering in backup agent signing module on Comet Backup server allows authenticated tenant administrator to execute an arbitrary code on behalf of a privileged user on the affected server and connected devices...

CVE-2026-32999

Insufficient character filtering in backup agent signing module on Comet Backup server allows authenticated tenant administrator to execute an arbitrary code on behalf of a privileged user on the affected server and connected devices...

CVE-2026-32999

Insufficient character filtering in backup agent signing module on Comet Backup server allows authenticated tenant administrator to execute an arbitrary code on behalf of a privileged user on the affected server and connected devices...

CVE-2026-32999

CVE-2026-32999 affects Comet Backup server; the issue is insufficient character filtering in the backup agent signing module. This vulnerability allows an authenticated tenant administrator to execute arbitrary code on behalf of a privileged user on the affected server and connected devices. The ...

CVE-2026-32999

Insufficient character filtering in backup agent signing module on Comet Backup server allows authenticated tenant administrator to execute an arbitrary code on behalf of a privileged user on the affected server and connected devices...

PT-2026-44177

Name of the Vulnerable Software and Affected Versions Comet Backup versions prior to 26.4.3 Comet Backup versions prior to 26.5.0 Description Insufficient character filtering in the backup agent signing module allows an authenticated tenant administrator with branding permissions to execute...