12797 matches found
lupo
For instructions on how to use Lupo, visit https://github.com/malienist/lupo/wiki/Lupo-Wiki Lupo — Malware IOC Extractor Debugging module for Malware Analysis Automation For a step by step post on how to use Lupo, with images and instructions, please see this post:...
Ruby on Rails - Open Redirect via Host Header Injection
Ruby on Rails action pack before 6.1.2.1, 6.0.3.5 contains an open redirect caused by special crafted Host headers in combination with allowed host formats, letting attackers redirect users to malicious websites, exploit requires attacker to control Host headers. id: CVE-2021-22881 info: name: Ru...
cve-2024-36401-security-simulator
CVE-2024-36401 Security Incident Analysis & Detection Simulator A Python-based educational simulator that models a fictional network-security incident inspired by the real-world exploitation of CVE-2024-36401. The project demonstrates how vulnerability management, network segmentation, least...
MAL-2026-14108 Malicious code in junofficial-userbot (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 167c22b6f010e1ce90c0a5e1ac3ea0d0b6340486f3c83df4d5f2342724575b4a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in @caspianph/first-npm-package (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a101ff8ca989c2598cab444a54d3518cecc3a385934f97b7cb1ce36ea4fb6761 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
The Ack3 H1 2026 DeFi Incident Dataset: Audit Scope across 135 Security Incidents
Smart-contract audits cover defined artifacts at a specific time, but the label audited is often treated as project-wide assurance. We analyze audit history and incident-path scope across 135 DeFi security incidents using the H1 2026 DeFi Incident Dataset published by cybersecurity company ack3...
MAL-2026-13803 Malicious code in dzcvhfruwluwe (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94746f13a653388ae268279888acdb3aceabbdbc5c7444e406af0dfb6317a6d9 The package's sole shipped file is index.html, a fake 'Cloudflare Verifying...' page containing an obfuscator.io-style script that reconstructs the U...
CVE-2026-16955
creationtimestamp| type| source ---|---|--- 2026-08-08 07:30:24+00:00| seen| https://infosec.exchange/users/offseq/statuses/117058713911525712 2026-08-08 07:30:26+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mskkg4ykio2a 2026-08-08 08:50:01+00:00| seen|...
CVE-2026-67689
creationtimestamp| type| source ---|---|--- 2026-08-07 15:52:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msivy7oiw62u...
CVE-2026-18359
creationtimestamp| type| source ---|---|--- 2026-08-06 19:00:12+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msgpzom4fi2z...
Malicious code in @voxepay/checkout (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ce33339fdc1c4c994f6062588e4f4278ee9074ddb04759504100e89084f4a96 No suspicious behaviors were identified in this package version. There are no install-time lifecycle scripts performing remote fetches, no hardcoded...
CVE-2026-18991
creationtimestamp| type| source ---|---|--- 2026-08-06 04:29:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/f4wuerlimpf34...
CVE-2026-18990
creationtimestamp| type| source ---|---|--- 2026-08-06 04:27:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/geeega7yl6k7m...
CVE-2026-71191
creationtimestamp| type| source ---|---|--- 2026-08-05 17:38:10+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/7mq5ik4363ci5...
CVE-2026-71289
creationtimestamp| type| source ---|---|--- 2026-08-05 13:30:26+00:00| seen| https://infosec.exchange/users/offseq/statuses/117043142705707824 2026-08-05 13:30:28+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3msdn56d7is2i 2026-08-05 15:02:18+00:00| seen|...
Malicious code in polyclob-api (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2af83ef240193bc56c6a1080c0e804e9fab62a4d49c3c67016f152a11b121949 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-13382 Malicious code in polyclob-api (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2af83ef240193bc56c6a1080c0e804e9fab62a4d49c3c67016f152a11b121949 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2026-70588
creationtimestamp| type| source ---|---|--- 2026-08-05 11:31:33+00:00| seen| https://gist.github.com/alon710/98861561e950349ba52fdd407f74f7c8...
CVE-2026-5062
creationtimestamp| type| source ---|---|--- 2026-08-05 06:42:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/4wo5wjdsnkavp 2026-08-06 07:15:08+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3msfimwvxgu23...