congo-lab (>=0.7.1, <=0.8.0), ezbeq (>=1.0.0b17, <=2.2.1) +8 more potentially affected by CVE-2026-77528 via autobahn (23.6.2)

autobahn PYPI version 23.6.2 is affected by a known vulnerability. The following packages have a transitive dependency on autobahn and may be impacted: - congo-lab =0.7.1, =1.0.0b17, =0.2.0, =7.0.0, =1.2.4, =1.0.0, =3.0.0 - yangsuite-devices 2.8.7 Source cves: CVE-2026-77528 Source advisory:...

lab-security-poc

lab-security-poc Personal lab for testing security concepts I...

DockSec v2026.9.21

!CREATEDhttps://img.shields.io/badge/created-feb,%202025-blue?style=for-the-b...

sqlinjection

SQL Injection Lab A self-contained, offline security training...

Malicious Package

Overview leadconduit-national-renewable-energy-lab is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that...

Malicious code in leadconduit-national-renewable-energy-lab (npm)

The package leadconduit-national-renewable-energy-lab was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in lab-npm-package (npm)

--- Credit: OpenSSF source...

Malicious code in rak-lab-yoav-orca-zrktd2cp5hjmo4x7 (PyPI)

Source: kam193 ee8eb9dfebb1388345acb8b7185f69adcf072f02ea058bc3d64a81e91733b5d0 Package appears to be internal test of dependency confusion. --- Category: PROBABLYPENTEST - Packages looking like typical pentest packages, but also anything that looks like testing, exploring pre-prepared kits,...

Malicious Package

Overview rak-lab-yoav-orca-zrktd2cp5hjmo4x7 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and...

MAL-2026-16241 Malicious code in rak-lab-yoav-orca-zrktd2cp5hjmo4x7 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 486630eaee2b9eb50d03d73886a14b7249b0c28fda2cb3f6a13565c8cd38a9bb pypi package rak-lab-yoav-orca-zrktd2cp5hjmo4x7 version 9.9.9 ships a setup.py that, during pip install, reads the DEPLOYMENTTOKEN environment variab...

Malicious code in rak-lab-yoav-orca-zrktd2cp5hjmo4x7 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 486630eaee2b9eb50d03d73886a14b7249b0c28fda2cb3f6a13565c8cd38a9bb pypi package rak-lab-yoav-orca-zrktd2cp5hjmo4x7 version 9.9.9 ships a setup.py that, during pip install, reads the DEPLOYMENTTOKEN environment variab...

sangfor-ngfw-waf-poc-lab

Sangfor NGFW + WAF POC Lab Customer POC lab materials — demon...

CVE-2026-88618

1024-lab SmartAdmin v3.30.0 contains a stored cross-site scripting vulnerability in its file upload functionality. This allows a remote attacker to execute arbitrary code...

CVE-2026-88619: Missing Authorization

1024-lab SmartAdmin v3.30.0 contains a missing authorization vulnerability in the scheduled-job management module. The AdminSmartJobController exposes scheduled-job management endpoints without method-level permission checks, allowing a low-privileged authenticated user to access functionality...

CVE-2026-88618: Improper Neutralization of Input During Web Page Generation

1024-lab SmartAdmin v3.30.0 contains a stored cross-site scripting vulnerability in its file upload functionality. This allows a remote attacker to execute arbitrary code...

CVE-2026-88618

1024-lab SmartAdmin v3.30.0 contains a stored cross-site scripting vulnerability in its file upload functionality. This allows a remote attacker to execute arbitrary code...

CVE-2026-88619

1024-lab SmartAdmin v3.30.0 contains a missing authorization vulnerability in the scheduled-job management module. The AdminSmartJobController exposes scheduled-job management endpoints without method-level permission checks, allowing a low-privileged authenticated user to access functionality...

PT-2026-92045

1024-lab SmartAdmin v3.30.0 contains a stored cross-site scripting vulnerability in its file upload functionality. This allows a remote attacker to execute arbitrary code...

CVE-2026-88618

1024-lab SmartAdmin v3.30.0 contains a stored cross-site scripting vulnerability in its file upload functionality. This allows a remote attacker to execute arbitrary code...

CVE-2026-88618

The 1024-lab SmartAdmin v3.30.0 software is affected by a stored cross-site scripting (XSS) vulnerability within its file upload functionality . This flaw allows a remote attacker to achieve arbitrary code execution . No specific remediation, exploit links, or detailed technical root causes are p...