1234 matches found
MAL-2026-4639 Malicious code in pg-expense-example (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1d939ad3f0e8e9754bf3562f06692713a76d5c0f18ac13c956f9cb199ed0fbf On require/load, index.js unconditionally collects host identifiers hostname, username, platform, arch, cwd, pid and sends them as URL query paramete...
Exploit for CVE-2026-0211
ISU-SecOps Nginx QUIC RCE Lab Modern web sunucularındaki Ngi...
Malicious code in ignite-market-contracts (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3632f7802511e2852d33925ab4d8612fe588de1f8a1d832011cd3588d23f62bc The package's preinstall lifecycle hook in package.json runs wget --quiet...
MAL-2026-4382 Malicious code in @djessicatony/folk-mcp-canary (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a504172fe0e456bd96cf7b4f9a6b6dda65dee7bd573833bbf5963b0be7a05ae8 index.js contains a beacon-style exfiltration primitive: a fetch POST at line 60-61 sends process.env data read at lines 30 and 34 to a hardcoded...
Malicious code in @djessicatony/folk-mcp-canary (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a504172fe0e456bd96cf7b4f9a6b6dda65dee7bd573833bbf5963b0be7a05ae8 index.js contains a beacon-style exfiltration primitive: a fetch POST at line 60-61 sends process.env data read at lines 30 and 34 to a hardcoded...
securite-des-reseaux-informatiques
Sécurité des Réseaux Informatiques d'Entreprise - Projet Pytho...
Luban-2040-v2
🛡️ Luban 2040 v2 Advanced Reconnaissance & Vulnerability...
EternalBlue
EternalBlue MS17-010 Exploitation Lab A professional, end-t...
Operation-Molasses
🍯 OPERATION MOLASSES PEKMEZ Zencefil Efendi's Cyber Dow...
AutoPentest-Framework
AutoPentest Framework A modular Automated Penetration Testing...
DHS Plans Experiment Running ‘Reconnaissance’ Drones Along the US-Canada Border
Autonomous drones and ground vehicles will stream “battlefield intelligence” over 5G along the US-Canada border in a bilateral DHS experiment this fall...
Exploit for SQL Injection in Cmsmadesimple Cms_Made_Simple
SimpleCTF-THM-Relatory First CTF successfully completed! This...
CVE-2026-42541 Kubewarden: RBAC Reconnaissance via unchecked can_i host capability call
Kubewarden is a policy engine for Kubernetes. Prior to , An attacker with privileged AdmissionPolicy or AdmissionPolicyGroup create permissions which isn't the default can craft a policy that makes use of the cani host callback. The callback issues a SubjectAccessReview SAR requests to enumerate...
CVE-2026-42541
CVE-2026-42541 (Kubewarden RBAC Reconnaissance) : Affected Kubewarden versions allow an attacker with privileged AdmissionPolicy/AdmissionPolicyGroup create permissions to abuse the can_i host callback, which forwards a SubjectAccessReview (SAR) to the policy-server with elevated privileges. This...
CVE-2026-42541 Kubewarden: RBAC Reconnaissance via unchecked can_i host capability call
Kubewarden is a policy engine for Kubernetes. Prior to , An attacker with privileged AdmissionPolicy or AdmissionPolicyGroup create permissions which isn't the default can craft a policy that makes use of the cani host callback. The callback issues a SubjectAccessReview SAR requests to enumerate...
Best OSINT Tools for Investigations and Threat Intelligence in 2026
Explore the best OSINT tools for your digital investigations, threat intelligence, reconnaissance, and tracking online activity in 2026...
cyber-operation-lab
Full-Spectrum Cyber Operation Lab: Red Team Execution & Blue T...
Kubewarden vulnerable to RBAC Reconnaissance via unchecked can_i host capability call
Impact Kubewarden is a policy engine for Kubernetes. Kubewarden cluster operators can grant permissions to users to deploy namespaced AdmissionPolicies and AdmissionPolicyGroups in their Namespaces. One of Kubewarden promises is that configured users can deploy namespaced policies in a safe manne...