glimmer

Glimmer Adversary emulation framework for offensive security research and purple team operations. Glimmer is a custom C2 framework built from scratch to explore persistence, evasion, and detection engineering across workstation, cloud, and embedded environments. This is a research and portfolio...

Malicious code in ember-glimmer (npm)

The package communicates with a domain associated with malicious activity. --- Credit: OpenSSF source...

CVE-2026-71286: Improper Neutralization of Special Elements Used in a Template Engine

The render-template component of ember-dynamic-render-template addon/components/render-template.js passes its property directly into Ember/Glimmer's compileTemplate from @ember/template-compilation with no sanitization, allow-listing, or validation of the input...

MAL-2025-5400 Malicious code in ember-glimmer (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in ember-glimmer (npm)

The package communicates with a domain associated with malicious activity...

glimmer_pocs

This is a proof-of-concept PoC repository for the tool "glimmer". The repository contains various PoCs for different types of vulnerabilities and information disclosure. The PoCs are implemented as Python scripts, each targeting a specific vulnerability or information disclosure. The PoCs are...

Glimmer (luminous alarm clock) - Base64 encoded String, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Glimmer luminous alarm clock published at the 'play' market has multiple vulnerabilities...