virustotalx

virustotalx 엔드포인트용 virustotalx IP용 V2 설치 git clone https://github.com/orwagodfather/virustotalx.git cd virustotalx https://www.virustotal.com/gui/join-us 에서 계정 3개를 만들고 API 키 3개를 복사하세요 === nano orwa.sh & nano orwaV2.sh 여기에 API 키 3개를 붙여넣으세요 .... if $apikeyindex -eq 1 ; then apikey="key-1" elif...

magento2-encryption-key-manager-cli

Magento 2 암호화 키 관리자 CLI Magento 2 암호화 키 로테이션 및 관리를 위한 유틸리티입니다. CVE-2024-34102일명 Cosmic Sting 피해자가 사후 관리를 위해 사용할 수 있습니다. 설계 대상 개발 용도 배포 자동화 CVE-2024-34102일명 Cosmic Sting 사후 관리 CVE-2024-34102일명 Cosmic Sting 보안 패치를 적용한 후, 공격자의 Admin 레벨 WebAPI 접근을 완전히 차단하려면 키 로테이션을 수행해야 합니다. 업그레이드하거나 공식 격리 패치를 적용할 수 ...

CYBERDUDEBIVASH-5G-Core-Key-Rotation-Ghost-Admin-Auditor

CYBERDUDEBIVASH 5G 코어 키 순환 및 Ghost Admin 감사 도구 v1.1 © 2026 CYBERDUDEBIVASH – All Rights Reserved 제로트러스트 5G 및 사설 네트워크 보안 분야 글로벌 권위 기관 인도 오디샤 주 부바네스와르 5G 코어 소프트웨어의 CVE-2026-0622Ghost Admin 권한 상승 및 마스터 키 노출를 탐지하고 해결하기 위한 프로덕션급 도구입니다. 기능 제로트러스트 API 인증 Ghost Admin 이벤트 탐지NRF 로그 마스터 키 순환 상태 확인UDM/AUSF 긴...

CVE-2026-100615 Cap-go capgo.app before 12.267.1 Privilege Escalation via API Key Rotation

Cap-go capgo.app before 12.267.1 fails to validate target API key privilege during rotation, allowing an apikeymanager to rotate a higher-privileged orgsuperadmin sibling key and recover its plaintext credential. Attackers with apikeymanager role can enumerate same-owner API keys, rotate a strong...

CVE-2026-100615 Cap-go capgo.app before 12.267.1 Privilege Escalation via API Key Rotation

Cap-go capgo.app before 12.267.1 fails to validate target API key privilege during rotation, allowing an apikeymanager to rotate a higher-privileged orgsuperadmin sibling key and recover its plaintext credential. Attackers with apikeymanager role can enumerate same-owner API keys, rotate a strong...

CVE-2026-100615

Versions of Cap-go capgo.app prior to 12.267.1 are vulnerable to a privilege escalation flaw because the system fails to validate target API key privileges during the rotation process. An attacker with the apikey_manager role can enumerate API keys owned by the same entity and use the PUT endpoin...

CVE-2026-100615 Cap-go capgo.app before 12.267.1 Privilege Escalation via API Key Rotation

Cap-go capgo.app before 12.267.1 fails to validate target API key privilege during rotation, allowing an apikeymanager to rotate a higher-privileged orgsuperadmin sibling key and recover its plaintext credential. Attackers with apikeymanager role can enumerate same-owner API keys, rotate a strong...

PT-2026-99286

Name of the Vulnerable Software and Affected Versions capgo.app versions prior to 12.267.1 Description Insufficient validation of API key privileges during the rotation process allows a user with the apikey manager role to rotate a sibling key belonging to a higher-privileged org super admin. By...

CVE-2026-82356

Imprivata EAM =26.2.6 lacks the ability to rotate its RSA key pair after deployment when generating an X.509 certificate. Using an RSA key pair indefinitely for certificate generation is against best practices...

EUVD-2026-85537

Imprivata EAM =26.2.6 lacks the ability to rotate its RSA key pair after deployment when generating an X.509 certificate. Using an RSA key pair indefinitely for certificate generation is against best practices...

CVE-2026-82356 Imprivata EAM: Unrotatable X.509 RSA Key Pair in Production

Imprivata EAM =26.2.6 lacks the ability to rotate its RSA key pair after deployment when generating an X.509 certificate. Using an RSA key pair indefinitely for certificate generation is against best practices...

Enterprise Access Management EAM does not rotate RSA keys

Overview Imprivata Enterprise Access Management EAM, an authentication and single sign-on platform for enterprise and clinical environments, contains a vulnerability in versions 26.2.6 and below. The product provides no supported mechanism to rotate its RSA key pair after deployment, meaning the...

CVE-2026-82356: Inadequate Encryption Strength

Imprivata EAM =26.2.6 lacks the ability to rotate its RSA key pair after deployment when generating an X.509 certificate. Using an RSA key pair indefinitely for certificate generation is against best practices...

MAL-2026-16066 Malicious code in @haimiya/baileys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afb1fac619ba416b14b747307762d4e4cf1cfc41f00a244c8e472af5f689deb0 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-16042 Malicious code in krdpass-auth-react-native (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a74ab9e45d4f67b40e21dc7491aff1979b4bf79be24bc49b8588916c18b847f package.json declares a preinstall script preinstall.js that runs automatically on npm install. The script collects os.hostname, os.userInfo, homedir...

MAL-2026-15873 Malicious code in btree-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 180c50a02e5bbe5a57f622112bba7f7b01becd6cf85f6d9d4b8301699f4334b7 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in react-mongoose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3486f0a140ab65c516d0261fefbe67384d5a604715ee6faa7da5591ab456b906 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Security Bulletin: Maximo AI Service uses multiple third party dependencies which are vulnerable to multiple CVEs.

Summary Maximo AI Service uses langchain-text-splitters 0.3.9, flask 3.1.0, coreutils 8.32-39.el9 and libxml2 2.9.13-14.el98.1 which are vulnerable to PSIRT-GHSA-fv5p-p927-qmxr, CVE-2025-47278, CVE-2026-27205, CVE-2025-5278 and CVE-2025-6170. This bulletin contains information regarding the...

Malicious code in h3client (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f46b4326d43002283dd4c729f099bd53573ca46f6c706492214d37df4bf6c51b The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-15569 Malicious code in nuvyra-marketplace-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5db08e65aec25f1dc4fd0c33173154dbd0e6ef6e79aa2f1b7f8b4f8df0b9a3a8 dist/client.js executes initializeProvider at module top level, so the code runs whenever a consumer requires or imports this SDK. The function...