Lucene search
+L

220 matches found

Kitploit
Kitploit
•added 2026/10/28 6:53 a.m.•30 views

HKddos

HKddos First tool in ARABIC language, its ddos attack tool based on hammer. $ cd HKddos $ python3 HK-ddos.py Photos...

6AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/10/28 4:00 a.m.•26 views

hammer

Overview Dow Jones Hammer is a multi-account cloud security tool for AWS. It identifies misconfigurations and insecure data exposures within most popular AWS resources, across all regions and accounts. It has near real-time reporting capabilities e.g. JIRA, Slack to provide quick feedback to...

6.1AI score
SaveExploits0References17
NVD
NVD
•added 2026/10/01 6:17 p.m.•15 views

CVE-2026-12545

A flaw was found in rubygem-hammercli. A command injection vulnerability exists in Hammer CLI and the Railties Ruby on Rails component distributed with Satellite due to the insecure interpolation of the $EDITOR environment variable into the Ruby system method. By passing a single interpolated...

6.7CVSS0.00523EPSS
SaveExploits0References7
Mend
Mend
•added 2026/10/01 5:14 p.m.•11 views

CVE-2026-12545

A flaw was found in rubygem-hammercli. A command injection vulnerability exists in Hammer CLI and the Railties Ruby on Rails component distributed with Satellite due to the insecure interpolation of the $EDITOR environment variable into the Ruby system method. By passing a single interpolated...

6.7CVSS5.8AI score0.00523EPSS
SaveExploits0References7
CVE
CVE
•added 2026/10/01 5:14 p.m.•38 views

CVE-2026-12545

A command injection vulnerability exists in rubygem-hammer_cli , affecting the Hammer CLI and the Railties (Ruby on Rails) component distributed with Red Hat Satellite . The flaw is caused by the insecure interpolation of the $EDITOR environment variable into the Ruby system() method. Because the...

6.7CVSS5.8AI score0.00523EPSS
SaveExploits0References7
RedhatCVE
RedhatCVE
•added 2026/10/01 5:14 p.m.•16 views

CVE-2026-12545

A flaw was found in rubygem-hammercli. A command injection vulnerability exists in Hammer CLI and the Railties Ruby on Rails component distributed with Satellite due to the insecure interpolation of the $EDITOR environment variable into the Ruby system method. By passing a single interpolated...

6.7CVSS5.9AI score0.00523EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/10/01 12:00 a.m.•14 views

PT-2026-103958

Name of the Vulnerable Software and Affected Versions rubygem-hammer cli affected versions not specified Description Command injection is possible in Hammer CLI and the Railties Ruby on Rails component distributed with Satellite. The issue occurs because the $EDITOR environment variable is...

6.7CVSS5.8AI score0.00523EPSS
SaveExploits0References11
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/01 12:00 a.m.•15 views

CVE-2026-12545: Improper Neutralization of Special Elements used in an OS Command

A flaw was found in rubygem-hammercli. A command injection vulnerability exists in Hammer CLI and the Railties Ruby on Rails component distributed with Satellite due to the insecure interpolation of the $EDITOR environment variable into the Ruby system method. By passing a single interpolated...

6.7CVSS5.8AI score0.00523EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/10/01 12:00 a.m.•8 views

CentOS Linux 7 [TuxCare] Security Update: sudo / sudo-devel (CENTOS7:CLSA-2024:1713370315)

The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2024:1713370315 advisory. - Sudo before 1.9.15 might allow row hammer attacks for authentication bypass or privilege escalation because application logic sometimes is base...

7CVSS6.5AI score0.00541EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
•added 2026/09/30 12:00 a.m.•11 views

AlmaLinux 9.2 [TuxCare] Security Update: sudo / sudo-devel / sudo-python-plugin (ALMALINUX9.2:CLSA-2024:1709547826)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2024:1709547826 advisory. - Sudo before 1.9.15 might allow row hammer attacks for authentication bypass or privilege escalation because application logic sometimes is...

7CVSS6.5AI score0.00541EPSS
SaveExploits1References3
Github Security Blog
Github Security Blog
•added 2026/09/10 10:43 a.m.•4 views

Malicious code in elf-stats-wintry-hammer-196 (npm)

Source: amazon-inspector a233b514fe8fba42d7d03ba33cd11c6cc6d54bbf2e0616e6db6528240592d00c The package elf-stats-wintry-hammer-196 was found to contain malicious code. --- Credit: OpenSSF source...

5.8AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/10 10:43 a.m.•7 views

Malicious code in elf-stats-sparkly-hammer-880 (npm)

Source: amazon-inspector f433d87ec9e6dc5f60708a64a7b41917f7f0cea6d13224516b3259948ae4528a The package elf-stats-sparkly-hammer-880 was found to contain malicious code. --- Credit: OpenSSF source...

5.8AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/10 10:43 a.m.•4 views

Malicious code in elf-stats-sleighing-hammer-902 (npm)

Source: amazon-inspector 9b59e6f3e736d07e9305a2c51519d0635a8c24eca451d83955f59221c5f5fb29 The package elf-stats-sleighing-hammer-902 was found to contain malicious code. --- Credit: OpenSSF source...

5.8AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/10 10:43 a.m.•5 views

Malicious code in elf-stats-sleighing-hammer-214 (npm)

Source: amazon-inspector 4449be6df6e0ff670b9d07b349d782058068c40a3bb3b6dfd782e90aac10a58c The package elf-stats-sleighing-hammer-214 was found to contain malicious code. --- Credit: OpenSSF source...

5.8AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/10 10:43 a.m.•6 views

Malicious code in elf-stats-rooftop-hammer-362 (npm)

Source: amazon-inspector 7fdce42bed8ef1e8497eed0aab9a5737b901dc3089d0232b81788dd7dc4fb652 The package elf-stats-rooftop-hammer-362 was found to contain malicious code. --- Credit: OpenSSF source...

5.8AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/10 10:43 a.m.•3 views

Malicious code in elf-stats-merry-hammer-791 (npm)

Source: amazon-inspector e9024a10526d26173fff95d45767e8cf58b479418c69fa68a2264b87f8583daf The package elf-stats-merry-hammer-791 was found to contain malicious code. --- Credit: OpenSSF source...

5.8AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/10 10:43 a.m.•4 views

Malicious code in elf-stats-holly-hammer-741 (npm)

Source: amazon-inspector a25235591605dd437356a4292b190c35fe3980f3540e507cc57ce308917e4bfd The package elf-stats-holly-hammer-741 was found to contain malicious code. --- Credit: OpenSSF source...

5.8AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/10 10:43 a.m.•6 views

Malicious code in elf-stats-ginger-hammer-326 (npm)

Source: amazon-inspector b381aa5a37f1282740de384eeff72f5f4d3e57918e530d486989909249b8c821 The package elf-stats-ginger-hammer-326 was found to contain malicious code. Source: ossf-package-analysis ab28db009d546523ca9bfce3468ed5b176df45db15f988ba15d36c0d6a6e7151 The OpenSSF Package Analysis projec...

5.8AI score
SaveExploits0References2Affected Software1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/08/04 3:48 p.m.•38 views

Malicious code in picasso-plugin-hammer (npm)

npm/picasso-plugin-hammer is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and republish...

6.5AI score
SaveExploits0References6
Github Security Blog
Github Security Blog
•added 2026/08/04 3:48 p.m.•2 views

Malware in picasso-plugin-hammer

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
Rows per page
Query Builder