PT-2026-115597

Name of the Vulnerable Software and Affected Versions MapSVG versions prior to 8.16.2 Description An improper neutralization of input during web page generation allows for Stored Cross-site Scripting XSS, a flaw where malicious scripts are permanently stored on the target server and later execute...

Joern 4.0.655

Joern is the bug hunter's workbench. With this tool, you can uncover attack surface, sloppy coding practices, and variants of known vulnerabilities using an interactive code analysis shell. Joern supports C, C++, LLVM bitcode, x86 binaries via Ghidra, JVM bytecode via Soot, and Javascript...

intercept

!zreadhttps://img.shields.io/badge/AskZread-.svg?style=plastic&color=00b0aa&labelColor=000000&logo=data:image/svg+xml;base64,PHN2ZyB3aWR0aD0iMTYiIGhlaWdodD0iMTYiIHZpZXdCb3g9IjAgMCAxNiAxNiIgZmlsbD0ibm9uZSIgeG1sbnM9Imh0dHA6Ly93d3cudzMub3JnLzIwMDAvc3ZnIj4KPHBhdGggZD0iTTQuOTYxNTYgMS42MDAxSDIuMjQxNTZD...

lowkey

Agentes de Codificación de IA Auto-Alojados en AWS — OpenClaw, Claude Code, Codex, Kiro, NemoClaw, Hermes ▶️ Mira el tutorial completo en YouTube 📝 Lee el artículo del blog: "Le di a mi agente su propia cuenta de AWS" TL;DR — despliega Lowkey: curl -sfL install.lowkey.run | bash Funciona en bash ,...

digital-forensics-lab

Laboratorio de Informática Forense y Repositorio Compartido de Inteligencia Forense Cibernética Características del Repositorio Laboratorios interactivos de informática forense: Diseñados para la participación de estudiantes y profesores Entorno de laboratorio centrado en Linux: Utiliza Kali Linu...

Malicious code in staking-apr-fetcher (RubyGems)

Source: amazon-inspector 405ab5b9651b8e8817ae91290042ec22673c5c99c1b58f45747e47cbb85aeacf The gem declares a native extension whose build script extconf.rb decodes a base64-embedded Ruby payload and executes it via eval during gem install. The payload double-forks a detached background process th...

Malicious code in ton-jetton-tools (RubyGems)

Source: amazon-inspector 30e70156c49000f2a02130da13465705bea1e9663b3ba57246a4e264bb12db25 The gem's native-extension build script extconf.rb contains a base64-encoded Ruby payload that is decoded and executed via eval during gem install. The decoded payload forks a detached, delayed child process...

Malicious code in defi-yield-calculator (RubyGems)

Source: amazon-inspector ee8b3e50479b61d2ff6e2f5a19de20473cf8fc3c91f99945aff51f112a617192 The gem ships an ext/extconf.rb that base64-decodes an embedded Ruby payload and runs it via eval inside a double-forked, detached, stdio-nulled background process after a 20–40 minute sleep. Execution is...

Malicious code in btc-fee-estimator (RubyGems)

Source: amazon-inspector ad1e7bee3158f729d88fdaf6a35ebfd32dcdab26ee9de3d8362d1973774b4b7c The gem's extconf.rb decodes a base64-encoded Ruby payload and evals it inside a detached forked process during gem install. The decoded payload opens a TCP connection to the hardcoded host 45.138.12.177 on...

wuzz

wuzz Herramienta CLI interactiva para inspección HTTP. Los argumentos de línea de comandos de Wuzz son similares a los argumentos de cURL, por lo que puede usarse para inspeccionar/modificar peticiones copiadas desde el inspector de red del navegador con la función "copy as cURL". Instalación y u...

Malicious code in btc-fee-estimator (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad1e7bee3158f729d88fdaf6a35ebfd32dcdab26ee9de3d8362d1973774b4b7c The gem's extconf.rb decodes a base64-encoded Ruby payload and evals it inside a detached forked process during gem install. The decoded payload open...

MAL-2026-17781 Malicious code in btc-fee-estimator (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad1e7bee3158f729d88fdaf6a35ebfd32dcdab26ee9de3d8362d1973774b4b7c The gem's extconf.rb decodes a base64-encoded Ruby payload and evals it inside a detached forked process during gem install. The decoded payload open...

Malicious code in defi-yield-calculator (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee8b3e50479b61d2ff6e2f5a19de20473cf8fc3c91f99945aff51f112a617192 The gem ships an ext/extconf.rb that base64-decodes an embedded Ruby payload and runs it via eval inside a double-forked, detached, stdio-nulled...

patching

Patching - Parcheo Binario Interactivo para IDA Pro Resumen No es poco común en el análisis de malware, la ingeniería inversa de software y campos más amplios de investigación en seguridad, parchear código ensamblador para cambiar el comportamiento de un programa existente. Este proyecto extiende...

Malicious code in staking-apr-fetcher (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 405ab5b9651b8e8817ae91290042ec22673c5c99c1b58f45747e47cbb85aeacf The gem declares a native extension whose build script extconf.rb decodes a base64-embedded Ruby payload and executes it via eval during gem install...

MAL-2026-17796 Malicious code in staking-apr-fetcher (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 405ab5b9651b8e8817ae91290042ec22673c5c99c1b58f45747e47cbb85aeacf The gem declares a native extension whose build script extconf.rb decodes a base64-embedded Ruby payload and executes it via eval during gem install...

MAL-2026-17794 Malicious code in seed-phrase-validator (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb8d12a066c24d672bf16efe57267c46c727592ee21beb0e2accb3bb6e4bfb3a The gem declares a native extension but ships no C/C++/Rust source. extconf.rb exists solely to execute at gem install time. It decodes a...

MAL-2026-17787 Malicious code in evm-tx-decoder (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e478aa0270779720106fc6169e89fde089af352214fc720fbf8c284d51415f59 The gem's native-extension build script ext/extconf.rb decodes a base64-embedded Ruby payload and executes it via eval inside a double-forked, detach...

Malicious code in nft-metadata-resolver (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee87c382dfd443e81b4cf0e8dc66749f9a129bd4239f984859aaaf760e84c629 The gem ships a native-extension script at ext/nftmetadataresolver/extconf.rb that RubyGems auto-executes during gem install. The script carries a...

MAL-2026-17792 Malicious code in nft-metadata-resolver (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee87c382dfd443e81b4cf0e8dc66749f9a129bd4239f984859aaaf760e84c629 The gem ships a native-extension script at ext/nftmetadataresolver/extconf.rb that RubyGems auto-executes during gem install. The script carries a...