MAL-2026-11127 Malicious code in app-sima-layer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a34ad4e52b9e8255bcfa74cbb6aa18811b0c8d80819a75c6bbfc36d79757b66 The package's postinstall script performs three coordinated attacks against the installer at install time. First, on Linux it fetches an SSH public k...

Malicious code in app-svm-layer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc1e4595c58a335fee4df04e6d25f61c8a88e8c0e6192bce21f13f8e16ff87a1 package.json declares postinstall=node test.js, which auto-executes on npm install and runs two malicious flows. First, test.js fetches an attacker S...

Malicious code in api-node-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8133fdea40df12d51091c8ce094062f366f0c30be0d17667a827ed00b75f78a On npm install, the package's postinstall hook node test.js executes an attacker-controlled workflow against the installer's host. It recursively sca...

CVE-2026-45623

A flaw was found in PostCSS, a tool that processes CSS files. An attacker who provides specially crafted CSS input containing a malicious source map comment can cause the system to read arbitrary files from the local filesystem. This can lead to the disclosure of sensitive information, specifical...

CVE-2026-66913

Lookyloo did not enforce limits on the decompressed size of uploaded capture archives and compressed HAR files. An attacker could submit a specially crafted ZIP, gzip, or zlib-compressed capture containing data that expands to a very large size during processing. Because the application...

gstreamer1-plugins-good: GStreamer: Heap buffer overflow in WavPack decoder via integer overflow

A flaw was found in GStreamer's WavPack audio decoder in gst-plugins-good. When processing a specially crafted WavPack file, an integer overflow in the buffer size calculation 4 blocksamples channels in gstwavpackdechandleframe causes a very small heap allocation. The WavPack library then writes...

JavaScript Environment Configuration - Detect

Multiple common JavaScript environment configuration files were detected. !/usr/bin/env python3 -- coding: utf-8 -- """Multiple common JavaScript environment configuration files were detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

Go.mod Disclosure Detection

go.mod internal file is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """go.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Go.mod Disclosure Detection', 'description': 'go.mod internal file is exposed.',...

Google Api Private Key Detection

Google API private keys are exposed in files. !/usr/bin/env python3 -- coding: utf-8 -- """Google API private keys are exposed in files.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Google Api Private Key...

Elasticsearch - Local File Inclusion Detection

Elasticsearch before 1.4.5 and 1.5.x before 1.5.2 allows remote attackers to read arbitrary files via unspecified vectors when a site plugin is enabled. !/usr/bin/env python3 -- coding: utf-8 -- """Elasticsearch before 1.""" import re from kittysploit import from lib.protocols.http.httpclient...

White Star Software ProTop - Directory Traversal Detection

A directory traversal vulnerability was discovered in White Star Software Protop version 4.4.2-2024-11-27, specifically in the /pt3upd/ endpoint. An unauthenticated attacker can remotely read arbitrary files on the underlying OS using encoded traversal sequences. !/usr/bin/env python3 -- coding:...

Hrsale 2.0.0 - Local File Inclusion Detection

Hrsale 2.0.0 is vulnerable to local file inclusion. This exploit allow you to download any readable file from server without permission and login session !/usr/bin/env python3 -- coding: utf-8 -- """Hrsale 2.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclien...

Pantheon upstream.yml Disclosure Detection

Public Pantheon YAML Configuration Files might include sensitive info !/usr/bin/env python3 -- coding: utf-8 -- """Public Pantheon YAML Configuration Files might include sensitive info.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient...

WordPress Plugin Advanced Dewplayer 1.2 - Directory Traversal Detection

A directory traversal vulnerability in download-file.php in the Advanced Dewplayer plugin 1.2 for WordPress allows remote attackers to read arbitrary files via a .. dot dot in the dewfile parameter. !/usr/bin/env python3 -- coding: utf-8 -- """A directory traversal vulnerability in...

Geddy <13.0.8 - Local File Inclusion Detection

Geddy prior to version 13.0.8 contains a directory traversal vulnerability in lib/app/index.js that allows remote attackers to read arbitrary files via a ..%2f dot dot encoded slash in the PATHINFO to the default URI. !/usr/bin/env python3 -- coding: utf-8 -- """Geddy prior to version 13.""" impo...

D-Link Routers - Local File Inclusion Detection

D-Link routers DWR-116 through 1.06, DIR-140L through 1.02, DIR-640L through 1.02,DWR-512 through 2.02,DWR-712 through 2.02,DWR-912 through 2.02, DWR-921 through 2.02, DWR-111 through 1.01, and probably others with the same type of firmware allows remote attackers to read arbitrary files via a /...

LOYTEC LGATE-902 6.3.2 - Local File Inclusion Detection

LOYTEC LGATE-902 6.3.2 is susceptible to local file inclusion which could allow an attacker to manipulate path references and access files and directories including critical system files that are stored outside the root folder of the web application running on the device. This can be used to read...

Homematic CCU3 - Local File Inclusion Detection

eQ-3 AG Homematic CCU3 3.43.15 and earlier allows remote attackers to read arbitrary files of the device's filesystem, aka local file inclusion. This vulnerability can be exploited by unauthenticated attackers with access to the web interface. !/usr/bin/env python3 -- coding: utf-8 -- """eQ-3 AG...

Mitel MiCollab AWV 8.1.2.4 and 9.1.3 - Directory Traversal Detection

A Directory Traversal vulnerability in the web conference component of Mitel MiCollab AWV before 8.1.2.4 and 9.x before 9.1.3 could allow an attacker to access arbitrary files from restricted directories of the server via a crafted URL, due to insufficient access validation. A successful exploit...

ThinkAdmin 6 - Local File Inclusion Detection

ThinkAdmin version 6 is affected by a local file inclusion vulnerability because an unauthorized attacker can read arbitrary files on a remote server via GET request encode parameter. !/usr/bin/env python3 -- coding: utf-8 -- """ThinkAdmin version 6 is affected by a local file inclusion...