CVE-2022-39841

CVE-2022-39841 Medusa's leaky WebSocket For more information please read the blog post Summary A critical vulnerability in Medusa allows for information leakage, including plaintext credentials, by attaching to an unauthenticated WebSocket and waiting for a user to make a configuration change...

seccubus

About Seccubus Seccubus automates regular vulnerability scans with various tools and aids security people in the fast analysis of its output, both on the first scan and on repeated scans. On repeated scan delta reporting ensures that findings only need to be judged when they first appear in the...

Medusa

Welcome to Medusa...

medusa

🐍 MEDUSA - AI 安全扫描器...

Medusa

Medusa Medusa 是一个跨平台代理，兼容 Python 3.8 和 Python 2.7。 安装 要安装 Medusa，你需要在远程计算机上安装 Mythic v3。你可以在 Mythic 项目页面 找到 Mythic 的安装说明。 在 Mythic 安装根目录下，运行以下命令： ./mythic-cli install github https://github.com/MythicAgents/Medusa.git 安装完成后，重启 Mythic 以构建新代理。 RabbitMQ 配置说明 文件 PayloadType/medusa/rabbitmqconfig.json...

fortra-goanywhere-mft-vulnerability-detection

Fortra GoAnywhere MFT 漏洞检测 用于检测 Fortra GoAnywhere MFT 漏洞的 Nuclei 模板。 由@rxerium 创建 概述 适用于 Fortra GoAnywhere 托管文件传输 MFT 的 CVE 检测模板，涵盖多个被勒索软件组织利用的 CISA KEV 漏洞。 统计 ：1 个 CVE（2021）+ 1 个 CVE（2023）+ 1 个 CVE（2024）+ 1 个 CVE（2025）= 4 个模板 （2 个 CISA KEV） 使用方法 root@kitploit: Scan a single target nuclei -t...

appmon

Welcome to AppMon! As seen at US & EU AppMon is an automated framework for monitoring and tampering system API calls of native macOS, iOS and android apps. It is based on Frida. This project was only possible because of Ole André Vadla Ravnås and I dedicate it to him. Follow him on GitHub, Twitte...

GO-2024-2918 vulnerabilities

Vulnerabilities for packages: flyte, flux-kustomize-controller, grafana-agent-operator, flux, goreleaser, pulumi, sigstore-scaffolding, timestamp-authority, thanos, harbor-registry, trino, tekton-chains, falcoctl, opentelemetry-collector-contrib, bank-vaults, grafana-mimir, velero, hugo, step,...

Malicious code in @zaamx/netme (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ff8cae34ceeb5f691ca4c4f92fbe10d0bc4e6b9eddf081e7c99ab1ee6193c98 This Medusa plugin hardcodes outbound POST requests to https://n8n.lidxi.com/webhook/ in multiple subscribers and admin routes, with no configuration...

Malicious code in @tallyui/connector-medusa (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3acb08c5699637240eec2741252206938cd0e0be4b997523e2100925456e2e39 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-3515 Malicious code in @tallyui/connector-medusa (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3acb08c5699637240eec2741252206938cd0e0be4b997523e2100925456e2e39 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

GHSA-6W46-J5RX-G56G vulnerabilities

Vulnerabilities for packages: open-webui, py3-cassandra-medusa...

CVE-2025-71176 vulnerabilities

Vulnerabilities for packages: open-webui, py3-cassandra-medusa...

GHSA-6W46-J5RX-G56G vulnerabilities

Vulnerabilities for packages: request-1276, apache-beam-python-3.11-sdk, localstack, apache-beam-python-3.12-sdk, apache-beam-python-3.13-sdk, py3-cassandra-medusa, open-webui...

CVE-2025-71176 vulnerabilities

Vulnerabilities for packages: request-1276, apache-beam-python-3.11-sdk, localstack, apache-beam-python-3.12-sdk, apache-beam-python-3.13-sdk, py3-cassandra-medusa, open-webui...

CVE-2026-34591 vulnerabilities

Vulnerabilities for packages: py3-cassandra-medusa...

GHSA-2599-H6XX-HPXP vulnerabilities

Vulnerabilities for packages: py3-cassandra-medusa...

GHSA-2599-H6XX-HPXP vulnerabilities

Vulnerabilities for packages: py3-cassandra-medusa...

CVE-2026-34591 vulnerabilities

Vulnerabilities for packages: py3-cassandra-medusa...

Storm-1175 Deploys Medusa Ransomware Within 24 Hours of Flaw Disclosure

Microsoft researchers have uncovered a fast-moving group, Storm-1175, launching high-speed Medusa ransomware attacks against healthcare and education sectors in the UK, US, and Australia by exploiting security flaws in as little as 24 hours...