119 matches found
pigeon
Pigeon Your agent spawned a sub-agent and handed it the same API key. That sub-agent can now deploy to production, read the payments database, and merge to main. Pigeon stops that. You hand the child a Pigeon Pass : a narrowed, signed credential for what it may do, not a copy of everything you ca...
blue-pigeon
Blue Pigeon: 基于蓝牙的数据外泄与代理工具（红队专用） 1. 动机 | 鸽子的诞生 Blue Pigeon 如何工作？ 鸽子的关键需求 2. 组件 | 剖析这只小波波 1. Blue Pigeon - 移动应用 2. Blue Beak - 自定义 EdXposed 框架钩子 3. Blue Dispatcher - 用于被入侵主机的 .NET 模块 3. 设置 Blue Pigeon 要求 安装与使用 4. 安全考虑 5. 许可与贡献 Blue Pigeon: 基于蓝牙的数据外泄与代理工具（红队专用） Blue Pigeon...
CVE-2026-32616
Pigeon is a message board/notepad/social system/blog. Prior to 1.0.201, the application uses $SERVER'HTTPHOST' without validation to construct email verification URLs in the register and resendmail flows. An attacker can manipulate the Host header in the HTTP request, causing the verification lin...
CVE-2026-32616
Pigeon is a message board/notepad/social system/blog. Prior to 1.0.201, the application uses $SERVER'HTTPHOST' without validation to construct email verification URLs in the register and resendmail flows. An attacker can manipulate the Host header in the HTTP request, causing the verification lin...
Pigeon 注入漏洞
Pigeon is a lightweight bulletin board/notepad/social system/blog developed by Akkariin Meiko as an individual project. Versions of Pigeon prior to 1.0.201 contained a injection vulnerability. This vulnerability stemmed from the application’s use of unvalidated $SERVERHTTPHOST in the email...
CVE-2026-32616: Improper Neutralization of Special Elements in Output Used by a Downstream Component
Pigeon is a message board/notepad/social system/blog. Prior to 1.0.201, the application uses $SERVER'HTTPHOST' without validation to construct email verification URLs in the register and resendmail flows. An attacker can manipulate the Host header in the HTTP request, causing the verification lin...
CVE-2026-32616 Pigeon has a Host Header Injection in email verification flow
Pigeon is a message board/notepad/social system/blog. Prior to 1.0.201, the application uses $SERVER'HTTPHOST' without validation to construct email verification URLs in the register and resendmail flows. An attacker can manipulate the Host header in the HTTP request, causing the verification lin...
CVE-2026-32616 Pigeon has a Host Header Injection in email verification flow
Pigeon is a message board/notepad/social system/blog. Prior to 1.0.201, the application uses $SERVER'HTTPHOST' without validation to construct email verification URLs in the register and resendmail flows. An attacker can manipulate the Host header in the HTTP request, causing the verification lin...
PT-2026-25381
Pigeon is a message board/notepad/social system/blog. Prior to 1.0.201, the application uses $ SERVER'HTTP HOST' without validation to construct email verification URLs in the register and resendmail flows. An attacker can manipulate the Host header in the HTTP request, causing the verification...
Malicious code in involved-amethyst-pigeon (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc184b63fe725240edae92c06b75e82b34d273e905edcb0272e0eb47c7ebd110 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-117287
Malicious code in involved-amethyst-pigeon npm...
EUVD-2025-117239
Malicious code in mature-olive-pigeon npm...
Malicious code in reliable-sapphire-pigeon (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d415cdb3b27d3a025bec726f6bb6bf6c68fa1d5b0a883b2f8f947f9ee180e061 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-139107 Malicious code in vulnerable-plum-pigeon (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a894703ee849bb67c5b9e8c54abe66797e0f3ee6b9e34ff534a946b2aa758ab1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-117038
Malicious code in tasteless-ivory-pigeon npm...
EUVD-2025-116995
Malicious code in vulnerable-plum-pigeon npm...
Malicious code in mass-lavender-pigeon (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39323fc49189bdc215d3a69c5d427e192d7c99984ebec3c5fb5d146e6cf91de6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-117129
Malicious code in reliable-sapphire-pigeon npm...
Malicious code in mature-olive-pigeon (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c51b1e0332300270e88dc7b8badb6746f7ee2ef8a163e80bfee954b250041dc4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...