Malicious code in img-to-native (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7676788d88c2194b8d5c048decfbe06550798ce342af54f8975bc26422d10c53 On require of img-to-native, index.js reads banner.jpg from the.cache directory of its sole dependency cdn-img-fetch, locates a payload appended afte...

MAL-2026-17216 Malicious code in img-to-native (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7676788d88c2194b8d5c048decfbe06550798ce342af54f8975bc26422d10c53 On require of img-to-native, index.js reads banner.jpg from the.cache directory of its sole dependency cdn-img-fetch, locates a payload appended afte...

Malicious code in native-runner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c057973da17ec629b4cd8c10a2b74108761f4a9ad4a1a31b280031da1f7139ca On require'native-runner', a top-level IIFE in index.js polls for up to two minutes for a file at %APPDATA%\Microsoft\Windows\noderuntimehelper.exe...

MAL-2026-17218 Malicious code in native-runner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c057973da17ec629b4cd8c10a2b74108761f4a9ad4a1a31b280031da1f7139ca On require'native-runner', a top-level IIFE in index.js polls for up to two minutes for a file at %APPDATA%\Microsoft\Windows\noderuntimehelper.exe...

MAL-2026-17220 Malicious code in nebulajs-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07debd960454b52639fee783e21c0c303702d8dce6de5e3320393f1b0abc7077 package.json declares scripts.preinstall = 'node preinstall.cjs'. preinstall.cjs is a single 232KB opaque Function... invocation containing a custom...

MAL-2026-17219 Malicious code in nebula-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0ca45fda7abd51edfeef37be6d19b4070788180b7625f16354223d81dae4d45 The preinstall.cjs lifecycle script embeds a base64-encoded, zlib-compressed Windows PE 257KB as a string literal. On npm install, the script decodes...

MAL-2026-17222 Malicious code in vite-plugin-crypto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54ee82c069dcdf259199f5844c6ff46be3020d79609ff7b7b8ebc82017c59b2c [email protected] exposes a Vite plugin factory whose body concatenates three option fields — secret, salt, and iv — into a single string and...

MAL-2026-17217 Malicious code in my-skibidi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02c4b3433d9f819c70b6ec69fe7bcc0ae0a7ff48540e11394ea5fb8f3c49049c [email protected] contains top-level code in its main module that unconditionally POSTs document.cookie to the hardcoded remote endpoint...

CVE-2018-18387

CVE-2018-18387 playSMS = 1.4.2 - Privilege escalation TMHC TEAM found a vulnerability that lead to a priviledge escalation through playSMS/web/init.php that can lead to a complete system compromise. The attacker need to get access on the box where playSMS is installed and be able to edit playSMS...

Malicious code in kalasnik-npm-simple-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1463688412306d5d6f791bb036bea59aeb7251a3044a52c57119768f27cd463 The package's postinstall script senddata.js runs automatically on npm install. It reads C:\temp\test.txt from the installer's filesystem and POSTs t...

MAL-2026-17206 Malicious code in kalasnik-npm-simple-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1463688412306d5d6f791bb036bea59aeb7251a3044a52c57119768f27cd463 The package's postinstall script senddata.js runs automatically on npm install. It reads C:\temp\test.txt from the installer's filesystem and POSTs t...

CVE-2025-32206

CVE-2025-32206 - WordPress Processing Projects "Unrestricted Upload of File with Dangerous Type vulnerability in LABCAT Processing Projects allows attackers to upload a web shell to a web server. This can lead to full compromise." 🧑‍💻 Exploit Description This Python exploit script targets WordPress...

MAL-2026-17209 Malicious code in tanksync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45dcd24fc5596e9273938687d6878a8927fcdf9ffd63982034556e84c3339065 The package's advertised API downloads a JavaScript file over HTTPS and executes it via spawn'node', payloadPath, detached: true.unref, leaving the...

Malicious code in tanksync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45dcd24fc5596e9273938687d6878a8927fcdf9ffd63982034556e84c3339065 The package's advertised API downloads a JavaScript file over HTTPS and executes it via spawn'node', payloadPath, detached: true.unref, leaving the...

metasploit-pentest-report

Authorized Penetration Test — Metasploit Lab Scope and Authorization All targets used in this project are explicitly authorized: Target| IP| Authorization Basis ---|---|--- Metasploitable2| 192.168.3.130| Self-hosted VM on isolated host-only network. Intentionally vulnerable by design — created...

Ashwesker-CVE-2026-21858

🚨 CVE-2026-21858 — “Ni8mare” A critical, unauthenticated vulnerability allowing full compromise of n8n servers 🆔 Overview...

CVE-2026-21017-LDAP-Anonymous-Bind-Privilege-Escalation

CVE-2026-21017 – LDAP Anonymous Bind Privilege Escalation Program Code Python ldap3 sim root@kitploit: ldapanonsim.py - LDAP server allowing anonymous bind with write access from ldap3 import Server, Connection, ALL Simulated: real server would be misconfigured server =...

CVE-2026-84638

A flaw was found in Red Hat Ansible Automation Platform's automation- controller. When attaching an instance group to a schedule or a workflow job template node through the dedicated API relationship endpoint, the controller verifies only that the requesting user can read view the instance group,...

Malicious code in z-deno-truth-bwhlsz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db0813755b79e157c644502848b1ff5af003fc82fb842b39676490d00f33e814 The package's exports field maps the ./package.json subpath to setup.js, so any consumer resolving require'z-deno-truth-bwhlsz/package.json' executes...

Malicious code in some-tool-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e053568381d2b1cf3b7e62e3152651c843cfc3e32f056574d7a64dae4531b2e The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...