CVE-2023-45966

CVE-2023-45966 SSRF ciego en umputun/remark42 conduce a un SSRF ciego debido a la falta del campo title y al filtrado insuficiente del campo url en la solicitud de creación de comentario. Información adicional Corregido en el commit: efceed6 Tipo de vulnerabilidad: Otro CWE-918: Server Side Reque...

CVE-2026-9277

CVE-2026-9277 - Exploit de Inyección de Comandos en Shell-Quote Un script de exploit Proof of Concept PoC especializado diseñado para verificar y demostrar CVE-2026-9277 , una vulnerabilidad estructural de inyección de comandos encontrada en versiones heredadas de la librería shell-quote = 1.8.3...

spring-break_cve-2017-8046

spring-breakcve-2017-8046 这是一个利用 Spring Break 漏洞（CVE-2017-8046 ）的 Java 程序。 该软件的编写旨在尽可能减少外部依赖。 免责声明 此工具旨在供安全工程师和应用安全人员用于安全评估。请负责任地使用此工具。本人不对任何人使用此应用程序的方式负责。本人对因使用此工具造成的任何损害或犯下的任何罪行概不负责。 漏洞信息 CVE-ID : CVE-2017-8046 链接 : https://vulners.com/cve/CVE-2017-8046 描述 : 在 Pivotal Spring Data REST 版本 2.5.12...

Malicious code in paleobotany-warp-less-uranology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e503cf1f4b68ac4105f21495630d3b3ab9fa830d3e32df743899bc45a7467430 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in public-bundle-class-iota-thread (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03445ba8a939ca18bdd9df7c6eece70c41c352ef40c472e0eb55792092510cd0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-kivod (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbc595edbbce4669227309c3b66ae4aa6a4bf97d8165b1d7b5ef907860e18ea7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-fucub (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8479043242253441b0f80cc5a947b0aba04c926a405c2be6d93e2abd73292b39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kisut-acg-aveudcf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ae85de990594b2d7b5cf0e5b3a3058d5e66215c99194c7178349c67848a80eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-tanjiro27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60102d0337444528d9dbe8c8b067d06a8afb6ab1ab4420afb4fda5be0bb6cb46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-gib-agagaada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d043759fbd2e801c6ab9410c5b899948f80b49ba92a5bc3c9b49d511198c28f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in apasih-me-pa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 435ba157684accb406377a20fa537b95d30b62610991f574d9c0b7010506de34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hassanraza (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c474490892dc4e0716e55c261f04d09b4490fb86ccd7668df43a6583243e465 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164535 Malicious code in prayoga-poke37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 344ab54a7fa8a7deb1be172c7ffa2b70cb378649e722a95cfef04afce52c0f22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165584 Malicious code in saku-ai-ups0i (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b3fa2ceda633e7c0ad8217f6d52049b5e08934078c1ad9c48cdefccd08c46b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163089 Malicious code in nokire-namiresan37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b781c8aba928b3f1fafef55a68b651b3bb7dbdd3614a69380455c39a5fb90b21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in upilka-luzmu-kijnuhigijani (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92ab7eb8bfab350ae000c3626543825a39e45a1efd94a55f5f1a5b030229bf4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namakiki44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f30e36fc36e2940da0a8388582ffb977886796e985a4017b003dd7097d9697a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ramadan-poke44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a1a089e17b548333abb221fb188af9c3e8bf98aaa2c430ef9b22a683762e858 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152996 Malicious code in astia-aloafa12pafeaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1e544e7aed79af9307c6db61ab42adf7544e06292dbfcd83c3096d5d8484fc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163175 Malicious code in nokire-nana23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4f4aaed39f666931840999b063e772e7fc2c9a7774da5377d4c20c051b65a4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...