dnscat2

NOTA: ¡La contraseña para las descargas .zip es siempre "password"! Introducción ¡Bienvenido a dnscat2, un túnel DNS que NO te enfermará y te matará! Esta herramienta está diseñada para crear un canal de comando y control C&C cifrado sobre el protocolo DNS, que es un túnel efectivo para salir de...

Malicious code in dotenv-preflight (npm)

Source: amazon-inspector f8e18dd97225f3e61274667a66297cee2224f99b7c3915e5a5f138028f5d0dd0 The npm package [email protected] presents itself as a dotenv-related preflight utility but ships a single index.js whose contents are heavily obfuscated hex-prefixed identifiers such as 0x351140,...

Malicious code in @selfpentest/bin-confusion (npm)

Source: amazon-inspector 40a68543ca2674f2b90d89dd52516736791b7886d617c694d89dd3135e7499f3 package.json registers a bin entry named npm pointing at npm.js, deliberately colliding with the core npm CLI. Once this package is installed as a dependency, any npm... invocation in a consuming project's...

CVE-2026-76442

creationtimestamp| type| source ---|---|--- 2026-09-14 20:45:13+00:00| seen| https://www.acn.gov.it/portale/w/cisco-sfuttamento-in-rete-della-cve-2026-76461-relativa-a-secure-email-gateway 2026-09-15 12:05:06+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mvkliblu3e23...

CVE-2026-36851

Path traversal vulnerability in UnPoller 2.33.0 password field allows arbitrary file read and network exfiltration...

CVE-2026-36851: Improper Limitation of a Pathname to a Restricted Directory

Path traversal vulnerability in UnPoller 2.33.0 password field allows arbitrary file read and network exfiltration...

CVE-2026-36851

Path traversal vulnerability in UnPoller 2.33.0 password field allows arbitrary file read and network exfiltration...

CVE-2026-36851

UnPoller version 2.33.0 is vulnerable to a path traversal vulnerability in the password field. The application fails to perform path checks when a password starts with the file:// prefix, causing it to read arbitrary files from the local disk via os.ReadFile() in pkg/inputunifi/input.go. An attac...

PT-2026-82244

Name of the Vulnerable Software and Affected Versions UnPoller version 2.33.0 Description A path traversal issue exists in the password field, which allows an attacker to read arbitrary files and perform network exfiltration. Path traversal is a technique used to access files and directories that...

CVE-2026-36851

Path traversal vulnerability in UnPoller 2.33.0 password field allows arbitrary file read and network exfiltration...

CVE-2026-36851

Path traversal vulnerability in UnPoller 2.33.0 password field allows arbitrary file read and network exfiltration...

EUVD-2026-66662

Path traversal vulnerability in UnPoller 2.33.0 password field allows arbitrary file read and network exfiltration...

Malicious code in hardhat-hold (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e961a4e9f774d02e73039b143503a3fff7cad6fdbf164123d76a3d5de53c667e The package's main entry index.js unconditionally requires./lib/config, which is a 4MB obfuscator.io-style blob string array of 23,981 entries with a...

Malicious code in @years18/n8n-nodes-utils-helper-c (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55fa2e2abba500f0c2863993fb8d51c3363f22a3fa8917fdf73e4b2545b81ea6 On npm install, the declared postinstall script node callback.js performs two hostile actions against the installer. First, it downloads a tarball fr...

Malicious code in @years18/n8n-nodes-utils-helper-u (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e6a7fb247eadeb1f59c123721fdc49078bb1b723f80ed10f2a29c1c04eb04df The package's postinstall script duplicated as the main module runs unconditionally on npm install. It executes id and hostname, base64-encodes the...

Malicious code in sui-migration-audit-rules (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bc8cd463940a0fe70eee979bd85b9ea41eed627f30cf96be8e0174c9106c7e1 The package presents itself as an audit rule pack but ships a credential harvester in index.js. Its exported postScan routine copies /.sui/sui.keysto...

MAL-2026-11955 Malicious code in @umacloud/cli-linux-arm64 (npm)

npm/@umacloud/cli-linux-arm64 is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...

MAL-2026-11571 Malicious code in @nebula.js/sn-action-button (npm)

npm/@nebula.js/sn-action-button is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...

Malicious code in @servicetitan/anvil-css-utilities (npm)

npm/@servicetitan/anvil-css-utilities is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized a...

Malicious code in omnius (npm)

Source: amazon-inspector 2aceac0879b587bc711c3f156bf0de4bab90f3774816a6cbeb36a2cf9bb03e12 The package's postinstall lifecycle hook launches dist/postinstall-daemon.cjs, which combines childprocess.execSync, os.userInfo, filesystem probes, and network primitives require'http', http.request, GET...