Roundcube-CVE-2024-42008-and-CVE-2024-42010-POC

Prova de Conceito: CVE-2024-42008 e CVE-2024-42010 Esta prova de conceito PoC demonstra a exploração de duas vulnerabilidades no Roundcube Webmail que permitem injeção de CSS e scripting entre sites XSS. O ataque consiste em duas etapas: 1. XSS por meio de anexo XML malicioso CVE-2024-42008 Devid...

MAL-2026-10752 Malicious code in xxdxa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26a77171f4b68ff814a7a99b5e51e3d59b9d4ca41fefbd650d2a0f8412878360 The package's sole file i.js declared as main is a heavily obfuscated IIFE whose top-level exploit runs unconditionally when the module is loaded. In...