Kioptrix-Level1-Vulnerability-Analysis

Kioptrix Level 1: Full-Spectrum Vulnerability Audit & Exploitation 🏛️ Professional Objective The objective was to perform a structured penetration test on the Kioptrix Level 1 environment to achieve full 'root' compromise and document technical remediation strategies suitable for both Red and Blue...

DROS-VEP-lite

🛡️ VEP: Open Agent Security Research Testbed A Composable, System-Level Evaluation Infrastructure for Post-Compromise & Physical AI Research "VEP Vulnerability & Exploitability Protocol is an open, implementation-independent research evaluation environment for studying Agent security controls at...

CVE-2026-63157 Omnispace Agora Project < 26.10.0 Stored XSS via Links Module

Omnispace Agora Project before 26.10.0 contains a stored cross-site scripting vulnerability that allows authenticated users to inject malicious scripts by submitting an unsanitized link address adress field that is echoed into an onclick event-handler attribute without neutralizing quotes...

MAL-2026-17856 Malicious code in opencode2-linux-arm64-musl (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 29d77295b1fca10788c9203f4cddd81390c2257ed49c9f260838bf5c383bab8e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-17854 Malicious code in opencode2-darwin-x64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5536c7ac30ec68d1e8ab9f64da77fa154f6d1806df263ad0abaf3af38ab0e378 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-17852 Malicious code in opencode2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e1c255dbe0332f8e9a436b4e71e3a6079680d1b6c64da0537c8600754a9948ac Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-17855 Malicious code in opencode2-linux-arm64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f4a8829a49ed8b89e9b5b2e55e453eb1cec86c288c766ed209e907ee331a76f4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-17857 Malicious code in opencode2-linux-x64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cf9deaf78da8cb6d551cd438b47ce0b248159ff7ee5768fd54427262a271be93 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-17859 Malicious code in opencode2-windows-arm64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 263b5345eacdaa0cb508c1d73db3da28902fd6e018ce8c01dc99ebc6babb9f97 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-17853 Malicious code in opencode2-darwin-arm64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4c6a79212b7f12e5d4cae1e3d44b47da54ab2e77545f488b99f6f2dab8a5e638 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-17860 Malicious code in opencode2-windows-x64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0fe5351d5ca6ebd5f4af15467079d2d442bad22237d10e6d5cb06d0b11beb2a0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-17858 Malicious code in opencode2-linux-x64-musl (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f5865a6de931f6eeceeaa7735203a1da71c5d55a10a580273fc8111210a14eaf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2023-49440

CVE-2023-49440-POC Exploit Title: AhnLab EPP ManagementCentralised Endpoint Security Management - Boolean-based-SQL-Injection SQL Injection that led to RCE Date: 16 July 2023 CVE : CVE-2023-49440 Vendor Homepage: https://www.ahnlab.com/en Software...

MAL-2026-17851 Malicious code in yoodan-github-single-ver-pkg (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d5ec21b694320e65a8b1f38838f14f00ed00b3b1e4f6a5d6aeef960f900d1d55 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

USN-8918-1 linux-azure, linux-azure-fde, linux-azure-fips vulnerabilities

It was discovered that some AMD processors did not properly perform Reverse Map Table RMP checks when the IOMMU accessed certain host buffers. A local attacker with hypervisor access could possibly use this to trigger an out-of-bounds condition and compromise the integrity of SEV-SNP guest memory...

USN-8923-1: Linux kernel vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - SCSI subsystem; - Bluetooth subsystem; CVE-2022-49111, CVE-2022-49114...

MAL-2026-17850 Malicious code in @chatest/baileys (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fe80b7b76923a24948c1d095c3dc2474c0aac3574a3cf2046bf152c7dcde0aac Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

tanstack-compromise-checker

tanstack-compromise-checker ⚠️ Disclaimer: This tool was built for my own use case. All indicators are derived from the following advisory sources: GHSA-g7cv-rxg3-hmpx Snyk: TanStack npm packages compromised StepSecurity: Mini Shai-Hulud deep dive If new IOCs, payload variants, or attacker...

CVE-2026-67165

HCL Connections is vulnerable to a cross-site scripting attack where an attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user which leads to executing malicious script code. This may allow the attacker steal cookie-based authentication credential...

BIT-GHOST-2026-105651 Ghost: Stored XSS via Bookmark Card Images

Ghost is a Node.js content management system. From 5.94.0 until 6.64.0, when creating a bookmark card, Ghost could store non-image files fetched from an external website as bookmark icons or thumbnails. This allowed any staff user, including Contributors, to host arbitrary HTML on the site's...