CVE-2026-68489

Static Code Injection in Plesk extensions "Ruby" before 1.6.6 and "Node.js Toolkit" before 2.5.0 allows remote authenticated users to execute arbitrary code as root via custom environment variables...

EUVD-2026-78137

Static Code Injection in Plesk extensions "Ruby" before 1.6.6 and "Node.js Toolkit" before 2.5.0 allows remote authenticated users to execute arbitrary code as root via custom environment variables...

CVE-2026-68489

CVE-2026-68489 is a Static Code Injection vulnerability in two Plesk extensions: Ruby (before 1.6.6) and Node.js Toolkit (before 2.5.0). A remote authenticated user can execute arbitrary code as root by crafting malicious custom environment variables . The vulnerability scores 8.7 (HIGH) under CV...

PT-2026-91729

Static Code Injection in Plesk extensions "Ruby" before 1.6.6 and "Node.js Toolkit" before 2.5.0 allows remote authenticated users to execute arbitrary code as root via custom environment variables...

SocialEngineering

SOCIAL ENGINEER 🎯🕵️‍♂️ 一个功能强大的社会工程学工具包，可自动化网络钓鱼、OTP/邮箱轰炸、伪造邮件等攻击 — 由 @karthithehacker 用 ❤️ 打造 ⚠️ 仅供教育用途。未经明确许可，请不要 使用此工具针对任何人。 📌 功能特性 🎯 网络钓鱼攻击 – 模拟虚假登录页面以窃取凭据 🔢 OTP 轰炸 – 向目标号码发送大量 OTP 请求 📩 邮箱轰炸 – 群发邮件以扰乱收件箱 📧 发送伪造邮件 – 自定义伪造发件人 ❌ 退出 – 正常退出工具包 （键盘记录器和 IP 更换选项已在 JavaScript 移植版中移除。） 💻 技术栈 语言 ：Node.js...