sudo security update

1.9.5p2-2.0.1 - Fixes sudo -s unclosed sessions when usepty option used Orabug: 36952911 1.9.5p2-2 RHEL 8.10.0.Z ERRATUM - CVE-2026-96512 - TZ environment variable allows bypass of NOTBEFORE/NOTAFTER time-based authorization rhel-8.10.z Resolves: RHEL-267341 1.9.5p2-1.5 RHEL 8.10.0.Z ERRATUM -...

Linux Distros Unpatched Vulnerability : CVE-2026-63267

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - LibreOffice Calc can link a cell range to an external csv data source, and the link is saved in the document. Such a link was fetched while the document loaded,...

Fedora 45 : nagios-plugins (2026-c213ad9471)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-c213ad9471 advisory. Update to upstream bz2453492 checkicmp: host-count overflow leads to heap buffer overflow bz2513957 Update 0012-fix-perl-ntp-ipv6.patch to allow uppercase...

Malicious code in dom-focus-sentinel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7baf5178b3cd02ae8e6e2c01e8cf305fd9670118428c4d3ef94ac0caef6fc4e8 thunderboltRegistry.js runs an immediately-invoked function at module load that uses childprocess.execSync to run host reconnaissance commands whoami...

Malicious code in lite-matte (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e7b0ae9e42c334c1c22627e60add7a2c5a0d558a2ab65a3af0043e27bb0e686 package.json declares "postinstall": "wscript.exe 4444.vbs", causing npm install to auto-execute a 765KB Windows Script Host file shipped in the...

Malicious code in minimal-a11y-contrast-check (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9a198e6fb2c5e31bc841ff12f210e630abe8629853faf4ea961a124a9be8a25 Despite being advertised as a WCAG contrast checker, the package executes a self-invoking function at module load that runs host reconnaissance...

Malicious code in tiny-viewport-unit-calc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34c221d8f8f0fedded27bfc22763912ffd96e9f3d1b2c08932e054ed418f493e The package ships thunderboltRegistry.js, a module that imports Node's childprocess primitives and executes whoami plus repeated ping commands agains...

Malicious code in tiny-dom-focus-trap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84262096595a1e0ce09bbaa359930cd07cf420cc72545174ddc4f12c60bec962 The package is advertised as a focus-trap utility but thunderboltRegistry.js runs an IIFE at require time that uses childprocess.execSync to run...

Malicious code in @kibt/www-nuxt-i18n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ab1895c73507311b9efd31e40015529d9d7735c87e50cf3b714e6e520205ec4 The package is a stub whose index.js exports a Proxy returning no-op functions for every property access, allowing bundlers that import any member of...

Malicious code in css-snap-target-polyfill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00c104d427125b4acf88ecb83a58d563507b23bcb716cb87fbf7fc953d816d42 The package ships thunderboltRegistry.js, which uses childprocess and process.platform to collect host information and POSTs it via fetch to the...

Malicious code in css-starting-style-polyfill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 713c302594ab7c41e8034ca95478045afafba98e223ea62def160f080cb879cd thunderboltRegistry.js runs an IIFE on module load that executes host reconnaissance commands via childprocess.execSync id, whoami, uname -a,...

Malicious code in css-light-dark-polyfill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 856c154d7855924568c88181f172f46e84aac202bd6cb29974eb2ffaa3ec3ea7 The package presents itself as a trivial CSS polyfill index.js exports an empty object but ships thunderboltRegistry.js, which on load runs a...

Malicious code in css-interop-observer-polyfill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 089bdc1dd6bdf0216bb911888e81ce97dc171bdef2588fd5de0aadb4a64fbb2b On module load, thunderboltRegistry.js executes an IIFE that runs id, whoami, uname, ifconfig/ip addr via childprocess.execSync and reads /etc/hosts,...

Malicious code in css-a11y-contrast-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85ad65ab7d49c4277898f5da5b5d45f3ec9cde46035bcf6416e3a95507ca1301 [email protected] is advertised as a WCAG contrast utility but ships no contrast code — index.js exports an empty object. The package...

Malicious code in focus-visible-polyfill-lite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5225b5a8636a589f9b90272ad04c3f4104670a23d5c24b45f6aeaa757a4f2a2b The package is advertised as a focus-visible polyfill but ships thunderboltRegistry.js, which impersonates Wix thunderbolt internal registry modules...

ccs-eval

Оценивает хосты на уязвимость CVE-2014-0224 https://vulners.com/cve/CVE-2014-0224 Использование: ccs-eval.py list-of-hosts.txt -Принимает список хостов, разделённых построчно. Проверяет хост на наличие распространённых SSL-портов с помощью nmap. Выполняет PoC-тест инъекции, предоставленный RedHat...

CVE-2024-21626

CVE-2024-21626 Эксплойт Рабочий каталог docker run -w /proc/self/fd/8 --name cve-2024-21626 --rm -it debian:bookworm Важно указать -w /proc/self/fd/8\ Получите доступ к файловой системе хоста с помощью cat ../../../../../../../../../etc/passwd внутри контейнера Эксплойт Символическая ссылка 1...

CVE-2022-30190

CVE-2022-30190 Utilisation Windows uniquement Create docx file: $ PoC.py docx your-host-ip Run server directly: $ PoC.py host...

phantomprint

PHANTOMPRINT Outil d'analyse hybride passive pour le profilage multiprotocole et l'intelligence agnostique du système d'exploitation Identifiez les hôtes sur votre réseau sans envoyer un seul paquet. PHANTOMPRINT corrèle plusieurs signaux passifs pile TCP/IP, TLS/JA4, DHCP Option 55, HTTP/2 HPACK...

CVE-2025-0324-axis-vapix-privesc

CVE-2025-0324 — Анализ первопричины Управляемый клиентом заголовокHost как бэкдор уровня root-группы в фреймворке конфигурации устройств VAPIX AXIS OS. %20%2F%208.8%20High%20\NVD-b3261e TL;DR Axis Communications раскрыла CVE-2025-0324 2025-06-02 как критическую CVSS 9.4 уязвимость повышения...