espectre

ESPectre Turn an ESP32 into a private, local Wi-Fi motion sensor. When someone moves through a room, they change the way Wi-Fi signals travel through it. ESPectre reads those changes and reports motion in real time. No camera, no microphone, no wearable, and no dedicated radar hardware: just a...

Schneider Electric U.motion Builder - SQL Injection

The vulnerability exists within processing of trackimportexport.php in Schneider Electric U.motion Builder software versions prior to v1.3.4. The underlying SQLite database query is subject to SQL injection on the objectid input parameter. id: CVE-2018-7765 info: name: Schneider Electric U.motion...

Malicious code in @utilitycraft/tailwindcss-motion-atelier (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c599649d975de035ad90c3e00aaa44e013bbac939a4c20e545b8c9669a7ea7ec Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in @utilitycraft/tailwindcss-motion-atelier

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2026-18468 Malicious code in @utilitycraft/tailwindcss-motion-atelier (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c599649d975de035ad90c3e00aaa44e013bbac939a4c20e545b8c9669a7ea7ec Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-60787-POC

CVE-2025-60787 - motionEye Authenticated RCE Authenticated Remote Code Execution in motionEye = 0.43.1b4 via unsanitized motion config parameter Author: d3vn0mi Vulnerability Overview Field| Details ---|--- CVE ID| CVE-2025-60787 CVSS Score| 7.2 High Type| OS Command Injection CWE-78 Affected|...

CVE-2025-60787

CVE-2025-60787 - MotionEye RCE MotionEye v0.43.1b4 OS Command Injection A proof-of-concept exploit OS Command Injection for vulnerability in motionEye, a web frontend for the motion daemon. The vulnerability abuses the imagefilename configuration parameter, which is passed directly to the shell...

CVE-2026-107048

An issue in the WebView rendering path component of MotionCreative Motion UI versionCode 101 allows attackers to execute arbitrary code via supplying a crafted POST request...

Malware in @jasperquinn/postcss-motion-helpers

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2026-18379 Malicious code in @jasperquinn/postcss-motion-helpers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 781da369bb3fa6b157a3ae9e923e3311a8b1bfc6ab3af00b31401240e443a652 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @jasperquinn/postcss-motion-helpers (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2b00f98b05ef64aa83ba1f6d04dfcd96791446c4c45e34f5b5855c56ec2eedb Package @jasperquinn/postcss-motion-helpers at version 0.0.0-stage ships a minimal file set 2 files with no lifecycle scripts, no network activity, n...

CVE-2026-107048

An issue in the WebView rendering path component of MotionCreative Motion UI versionCode 101 allows attackers to execute arbitrary code via supplying a crafted POST request...

EUVD-2026-113265

An issue in the WebView rendering path component of MotionCreative Motion UI versionCode 101 allows attackers to execute arbitrary code via supplying a crafted POST request...

CVE-2026-107048: n/a: An issue in the WebView rendering path component of MotionCreative Motion UI versionCode 101 allows attackers to…

An issue in the WebView rendering path component of MotionCreative Motion UI versionCode 101 allows attackers to execute arbitrary code via supplying a crafted POST request...

CVE-2026-107048

An issue in the WebView rendering path component of MotionCreative Motion UI versionCode 101 allows attackers to execute arbitrary code via supplying a crafted POST request...

CVE-2026-107048

A security vulnerability exists in the WebView rendering path component of MotionCreative Motion UI (version 101). Attackers can exploit this issue by supplying a crafted POST request to execute arbitrary code . The vulnerability is associated with CWE-926 (Improper Export of Android Application ...

PT-2026-132380

Name of the Vulnerable Software and Affected Versions MotionCreative Motion UI version 101 Description An issue in the WebView rendering path component allows attackers to execute arbitrary code by sending a specially crafted POST request. Recommendations At the moment, there is no information...

Malicious code in tailwindcss-keyframe-kit (npm)

tailwindcss-keyframe-kit 3.0.0, 3.0.1, 3.0.2 is a Tailwind CSS plugin from the fake job interview campaign behind MAL-2026-17665 and MAL-2026-17666: the same Animate.css integration template, README and description, published by hackson306623 on 2026-09-28. src/generators/motion-base.js:5 require...

Malicious code in animate-twcss-pack (npm)

animate-twcss-pack 2.0.6 is a Tailwind CSS plugin from the fake job interview campaign behind MAL-2026-17665 and MAL-2026-17666: the same Animate.css integration template, README and description, published by enterprise0908 on 2026-09-28. src/motion.js:5 requires the private scoped package...

Malicious code in tailwind-animationlab (npm)

tailwind-animationlab 2.0.6 is a Tailwind CSS plugin from the fake job interview campaign behind MAL-2026-17665 and MAL-2026-17666: the same Animate.css integration template, README and description, published by adriannamrr on 2026-09-28. src/motion.js:5 requires the private scoped package...