CVE-2022-39841

CVE-2022-39841 Medusa's leaky WebSocket For more information please read the blog post Summary A critical vulnerability in Medusa allows for information leakage, including plaintext credentials, by attaching to an unauthenticated WebSocket and waiting for a user to make a configuration change...

Medusa

Medusa Medusa is a cross-platform agent compatible with both Python 3.8 and Python 2.7. Installation To install Medusa, you'll need Mythic v3 installed on a remote computer. You can find installation instructions for Mythic at the Mythic project page. From the Mythic install root, run the command...

medusa

🐍 MEDUSA - AI Security Scanner...

seccubus

About Seccubus Seccubus automates regular vulnerability scans with various tools and aids security people in the fast analysis of its output, both on the first scan and on repeated scans. On repeated scan delta reporting ensures that findings only need to be judged when they first appear in the...

Medusa

Welcome to Medusa...

fortra-goanywhere-mft-vulnerability-detection

Fortra GoAnywhere MFT Vulnerability Detection Nuclei templates for detecting Fortra GoAnywhere MFT vulnerabilities. Created by@rxerium Overview CVE detection templates for Fortra GoAnywhere Managed File Transfer MFT, including multiple CISA KEV vulnerabilities exploited by ransomware groups...

appmon

Welcome to AppMon! As seen at US & EU AppMon is an automated framework for monitoring and tampering system API calls of native macOS, iOS and android apps. It is based on Frida. This project was only possible because of Ole André Vadla Ravnås and I dedicate it to him. Follow him on GitHub, Twitte...

GO-2024-2918 vulnerabilities

Vulnerabilities for packages: buildkitd, chezmoi, pulumi, boring-registry, goreleaser, ksops, druid, airflow, zot, hugo, rclone, flux-image-reflector-controller, hugo-extended, fulcio, sqlpad, sops, zarf, policy-controller, spire-server, nuclei, py3-azure-identity, opentelemetry-collector-contrib...

Malicious code in @zaamx/netme (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ff8cae34ceeb5f691ca4c4f92fbe10d0bc4e6b9eddf081e7c99ab1ee6193c98 This Medusa plugin hardcodes outbound POST requests to https://n8n.lidxi.com/webhook/ in multiple subscribers and admin routes, with no configuration...

Malicious code in @tallyui/connector-medusa (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3acb08c5699637240eec2741252206938cd0e0be4b997523e2100925456e2e39 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-3515 Malicious code in @tallyui/connector-medusa (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3acb08c5699637240eec2741252206938cd0e0be4b997523e2100925456e2e39 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

GHSA-6W46-J5RX-G56G vulnerabilities

Vulnerabilities for packages: py3-cassandra-medusa, open-webui...

CVE-2025-71176 vulnerabilities

Vulnerabilities for packages: py3-cassandra-medusa, open-webui...

CVE-2025-71176 vulnerabilities

Vulnerabilities for packages: py3-cassandra-medusa, request-1276, apache-beam-python-3.12-sdk, localstack, open-webui, apache-beam-python-3.13-sdk, apache-beam-python-3.11-sdk...

GHSA-6W46-J5RX-G56G vulnerabilities

Vulnerabilities for packages: py3-cassandra-medusa, request-1276, apache-beam-python-3.12-sdk, localstack, open-webui, apache-beam-python-3.13-sdk, apache-beam-python-3.11-sdk...

CVE-2026-34591 vulnerabilities

Vulnerabilities for packages: py3-cassandra-medusa...

GHSA-2599-H6XX-HPXP vulnerabilities

Vulnerabilities for packages: py3-cassandra-medusa...

GHSA-2599-H6XX-HPXP vulnerabilities

Vulnerabilities for packages: py3-cassandra-medusa...

CVE-2026-34591 vulnerabilities

Vulnerabilities for packages: py3-cassandra-medusa...

Storm-1175 Deploys Medusa Ransomware Within 24 Hours of Flaw Disclosure

Microsoft researchers have uncovered a fast-moving group, Storm-1175, launching high-speed Medusa ransomware attacks against healthcare and education sectors in the UK, US, and Australia by exploiting security flaws in as little as 24 hours...