Linpmem

Linpmem -- a physical memory acquisition tool for Linux Linpmem is a Linux x64-only tool for reading physical memory. Like its Windows counterpart, Winpmem, this is not a traditional memory dumper. Linpmem offers an API for reading from any physical address, including reserved memory and memory...

duplicut

Duplicut :scissors: Quickly dedupe massive wordlists, without changing the order Created by nil0x42 and contributors 📖 Overview Nowadays, password wordlist creation usually implies concatenating multiple data sources. Ideally, most probable passwords should stand at start of the wordlist, so most...

exploit-cve-2017-5715

Spectre attack Spectre breaks the isolation between different applications. It allows an attacker to trick error-free programs, which follow best practices, into leaking their secrets. In fact, the safety checks of said best practices actually increase the attack surface and may make applications...

CVE-2021-3156

CVE-2021-3156 Sudo Baron Samedit This repository is CVE-2021-3156 exploit targeting Linux x64. For writeup, please visit https://datafarm-cybersecurity.medium.com/exploit-writeup-for-cve-2021-3156-sudo-baron-samedit-7a9a4282cb31 Credit to Braon Samedit of Qualys for the original advisory. Files...

Malicious code in @k18k/entrypoint-sdk-linux-x64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 01bb254d0d26a850aea04e15a4b52039c1ba200ae62a293370e8e10799d683c2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-18245 Malicious code in @k18k/entrypoint-sdk-linux-x64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 01bb254d0d26a850aea04e15a4b52039c1ba200ae62a293370e8e10799d683c2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in @k18k/entrypoint-sdk-linux-x64

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

CLSA-2026-1792346492 TuxCare security update for @next/swc-linux-x64-gnu (10 CVEs)

TuxCare rebuilt @next/swc-linux-x64-gnu to address 10 CVEs. Fixed in 15.1.2-tuxcare.3...

CLSA-2026-1792346489 TuxCare security update for @next/swc-linux-x64-gnu (1 CVE)

TuxCare rebuilt @next/swc-linux-x64-gnu to address 1 CVE. Fixed in 15.1.2-tuxcare.1...

CLSA-2026-1792346490 TuxCare security update for @next/swc-linux-x64-gnu (28 CVEs)

TuxCare rebuilt @next/swc-linux-x64-gnu to address 28 CVEs. Fixed in 15.1.2-tuxcare.2...

CLSA-2026-1792346472 TuxCare security update for @next/swc-linux-x64-gnu (1 CVE)

TuxCare rebuilt @next/swc-linux-x64-gnu to address 1 CVE. Fixed in 16.0.6-tuxcare.4...

CLSA-2026-1792346470 TuxCare security update for @next/swc-linux-x64-gnu (9 CVEs)

TuxCare rebuilt @next/swc-linux-x64-gnu to address 9 CVEs. Fixed in 16.0.6-tuxcare.7...

CLSA-2026-1792346462 TuxCare security update for @next/swc-linux-x64-gnu (1 CVE)

TuxCare rebuilt @next/swc-linux-x64-gnu to address 1 CVE. Fixed in 15.5.26-tuxcare.1...

CLSA-2026-1792346461 TuxCare security update for @next/swc-linux-x64-gnu (1 CVE)

TuxCare rebuilt @next/swc-linux-x64-gnu to address 1 CVE. Fixed in 15.5.24-tuxcare.1...

CLSA-2026-1792346460 TuxCare security update for @next/swc-linux-x64-gnu (1 CVE)

TuxCare rebuilt @next/swc-linux-x64-gnu to address 1 CVE. Fixed in 15.5.23-tuxcare.1...

CLSA-2026-1792346458 TuxCare security update for @next/swc-linux-x64-gnu (1 CVE)

TuxCare rebuilt @next/swc-linux-x64-gnu to address 1 CVE. Fixed in 15.5.25-tuxcare.1...

MAL-2026-17858 Malicious code in opencode2-linux-x64-musl (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f5865a6de931f6eeceeaa7735203a1da71c5d55a10a580273fc8111210a14eaf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-17857 Malicious code in opencode2-linux-x64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cf9deaf78da8cb6d551cd438b47ce0b248159ff7ee5768fd54427262a271be93 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pay-methods-kmf (npm)

Source: amazon-inspector 07a616a1db0408a0570000c6514224d22e71c3ecee0f08268b5dd9bc96761fd2 [email protected] is a trivial stub empty index.js, manifest description 'Frontend utilities' that ships a prebuilt Linux x64 native addon at prebuilds/linux-x64/addon.node and loads it from...

Malicious code in @galicia-toolkit-nestjs-20/commons (npm)

Source: amazon-inspector 5b719740efc4b3e93e85668e2e787b39a8d91e15abbe9c39f5d156e118745caa On require, index.js loads a bundled ELF native addon at prebuilds/linux-x64/metrics.node inside a silent try/catch. The addon reads CI/cloud credential environment variables AWSSECRETACCESSKEY and related...