402 matches found
MAL-2026-10779 Malicious code in mlflow-ui (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7192c53fc1e0b62e2c373a8a6beabfeb3777cae3aacfe23ca374eab1c2839a7 The package impersonates the MLflow project author 'MLflow Community' , homepage https://github.com/mlflow/mlflow but provides no MLflow UI...
Malicious code in mlflow-ui (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7192c53fc1e0b62e2c373a8a6beabfeb3777cae3aacfe23ca374eab1c2839a7 The package impersonates the MLflow project author 'MLflow Community' , homepage https://github.com/mlflow/mlflow but provides no MLflow UI...
AutoPWN-Suite v2.4.5
AutoPWN Suite AutoPWN Suite is a project for scanning vulnerabilities and exploiting systems automatically. Features CLI Fully automatic scanning and exploitation Detect network IP range without any user input Vulnerability detection based on service versions Web app vulnerability testing LFI, XS...
tools-hacking
HackerAI Tools Collection Koleksi lengkap 85 tools hackin...
[SECURITY] Fedora 43 Update: nmap-7.92-8.fc43
Nmap is a utility for network exploration or security auditing. It supports ping scanning determine which hosts are up, many port scanning techniques determine what services the hosts are offering, and TCP/IP fingerprinting remote host operating system identification. Nmap also offers flexible ta...
nmap-enumeration-lab
Network Scanning & Host Enumeration with Nmap Host discovery,...
[SECURITY] Fedora 44 Update: nmap-7.92-11.fc44
Nmap is a utility for network exploration or security auditing. It supports ping scanning determine which hosts are up, many port scanning techniques determine what services the hosts are offering, and TCP/IP fingerprinting remote host operating system identification. Nmap also offers flexible ta...
MAL-2026-6722 Malicious code in date-fns-lite (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4694a079d83e33dcee7f87140c41737009d9f0b19f351c23f2ae3dbce9a47a51 [email protected] presents as a lightweight date-formatting utility but ships a malicious postinstall.js that runs automatically on npm install. T...
libnetutil/netutil.cc Heap Buffer Overflow DoS
The vulnerability of the ipv6getdataprimitive function in the libnetutil/netutil.cc library, a networking scanning tool for Nmap, is related to a countable loss of significance. Exploiting this vulnerability could allow a remote attacker to cause a service failure...
pentest-cheatsheet
pentest-cheatsheet Commands, techniques and notes for penetrat...
CVE-2026-56771
NewsBlur before version 14.5.0 contains a server-side request forgery vulnerability in the addurl endpoint that allows authenticated users to make arbitrary server requests to internal networks by failing to filter private IP addresses. Attackers can exploit this to access localhost services and...
CVE-2026-56771
NewsBlur before version 14.5.0 contains a server-side request forgery vulnerability in the addurl endpoint that allows authenticated users to make arbitrary server requests to internal networks by failing to filter private IP addresses. Attackers can exploit this to access localhost services and...
CVE-2026-56771: Server-Side Request Forgery (SSRF)
NewsBlur before version 14.5.0 contains a server-side request forgery vulnerability in the addurl endpoint that allows authenticated users to make arbitrary server requests to internal networks by failing to filter private IP addresses. Attackers can exploit this to access localhost services and...
exploit-scripts
Offensive Security Toolkit ╔═════════════════════════════...
OffSploit
OffSploit: Autonomous Exploit Adaptation & C2 Framework !Py...
ember
🔥 Ember AI systems burn brightly but hide their secrets. Em...
CVE-2026-26379
Koha versions up to 25.11 contain a Server-Side Request Forgery SSRF vulnerability via the Z39.50/SRU server configuration. This allows authenticated attackers to perform internal network scanning and identify running services by analyzing server response times...
CVE-2026-26379: Server-Side Request Forgery (SSRF)
Koha versions up to 25.11 contain a Server-Side Request Forgery SSRF vulnerability via the Z39.50/SRU server configuration. This allows authenticated attackers to perform internal network scanning and identify running services by analyzing server response times...