1234 matches found
foolav
foolav Executable compiled with this code is useful during penetration tests where there is a need to execute some payload meterpreter maybe? while being certain that it will not be detected by antivirus software. The only requirement is to be able to upload two files: binary executable and paylo...
CVE-2023-33977
CVE-2023-33977 Stored XSS Via SVG Upload in kiwitcms/kiwi - by M Nadeem Qazi Description This repository addresses the stored XSS vulnerability discovered in the kiwitcms/kiwi application, which was assigned the CVE-2023-33977 identifier. The vulnerability allows for the execution of malicious...
Malicious Package
Overview liquid-amber-kiwi is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
Malicious code in liquid-amber-kiwi (npm)
Source: amazon-inspector b099d18035ca7fad7bf1e455b43b1003b9492074903171c2b9f9f6419d93fc94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in lima-oscar-kiwi-ogzar (npm)
The package lima-oscar-kiwi-ogzar was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in lima-ugli-kiwi-ytpln (npm)
The package lima-ugli-kiwi-ytpln was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in lima-kiwi-gxxg (npm)
The package lima-kiwi-gxxg was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in lima-kiwi-ohzr (npm)
The package lima-kiwi-ohzr was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in lemon-foxtrot-kiwi-kcomt (npm)
The package lemon-foxtrot-kiwi-kcomt was found to contain malicious code. --- Credit: OpenSSF source...
CVE-2026-49292
Kiwi TCMS is an open source test management system. Prior to 16.0, the unauthenticated /init-db/ page handled by InitDBView in tcms/core/views.py remains reachable after initial setup and proxies repeated requests to Kiwi/manage.py migrate. The migration command is reentrant, so repeated access...
CVE-2026-49292
Kiwi TCMS is an open source test management system. Prior to 16.0, the unauthenticated /init-db/ page handled by InitDBView in tcms/core/views.py remains reachable after initial setup and proxies repeated requests to Kiwi/manage.py migrate. The migration command is reentrant, so repeated access...
CVE-2026-49292 Kiwi TCMS: The /init-db/ page renders and responds to requests after first use
Kiwi TCMS is an open source test management system. Prior to 16.0, the unauthenticated /init-db/ page handled by InitDBView in tcms/core/views.py remains reachable after initial setup and proxies repeated requests to Kiwi/manage.py migrate. The migration command is reentrant, so repeated access...
CVE-2026-49292
Kiwi TCMS prior to 16.0 leaves the unauthenticated /init-db/ endpoint (handled by InitDBView in tcms/core/views.py) reachable after initial database setup. The page proxies requests to manage.py migrate, which is reentrant , so repeated access only reports "No migrations to apply." The advisory s...
CVE-2026-49292 Kiwi TCMS: The /init-db/ page renders and responds to requests after first use
Kiwi TCMS is an open source test management system. Prior to 16.0, the unauthenticated /init-db/ page handled by InitDBView in tcms/core/views.py remains reachable after initial setup and proxies repeated requests to Kiwi/manage.py migrate. The migration command is reentrant, so repeated access...
EUVD-2026-82384
Kiwi TCMS is an open source test management system. Prior to 16.0, the unauthenticated /init-db/ page handled by InitDBView in tcms/core/views.py remains reachable after initial setup and proxies repeated requests to Kiwi/manage.py migrate. The migration command is reentrant, so repeated access...
CVE-2026-49292 Kiwi TCMS: The /init-db/ page renders and responds to requests after first use
Kiwi TCMS is an open source test management system. Prior to 16.0, the unauthenticated /init-db/ page handled by InitDBView in tcms/core/views.py remains reachable after initial setup and proxies repeated requests to Kiwi/manage.py migrate. The migration command is reentrant, so repeated access...
Malicious code in kiwi-uniform-tango-lsird (npm)
The package kiwi-uniform-tango-lsird was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in kiwi-watermelon-banana-zabnl (npm)
The package kiwi-watermelon-banana-zabnl was found to contain malicious code. --- Credit: OpenSSF source...