131 matches found
See-SURF
See-SURF Security scanner now powered with AI 🤖 to find potential Server Side Request Forgery SSRF parameters in your web application. See-SURF not only helps you detect potential SSRF parameters but also helps you validate it, protecting your application with system and user data compromise. 🎓...
surf
Surf - 현대 클라우드 환경에서 SSRF 취약점을 확장하세요 surf를 사용하면 호스트 목록을 필터링하여 유효한 SSRF 후보 목록을 반환할 수 있습니다. 이 도구는 사용자 머신에서 각 호스트로 HTTP 요청을 보내 응답하지 않은 모든 호스트를 수집한 후, 외부 및 내부 호스트 목록으로 필터링합니다. 그런 다음 SSRF 취약점이 있을 수 있는 모든 곳에서 이 호스트들을 시도할 수 있습니다. 대부분의 SSRF 필터는 내부 또는 제한된 IP 범위에만 초점을 맞추기 때문에, 사용자 머신에서 HTTPs로 접근할 수 없는 외부 IP...
hm-surf
HM-Surf 평가 도구 일반적인 macOS 브라우저의 CVE-2024-44133 취약성 여부를 평가합니다. 또한 스크린샷을 찍고 위치 정보 추출과 함께 다운로드하는 HTML을 포함합니다. 사용법 - 평가 도구 모든 일반적인 macOS 브라우저에서 CVE-2024-44133을 평가하는 평가 도구를 실행하려면 다음을 실행하세요: python3 -m pip install -r ./requirements.txt ./hm-surf-eval.py 실행 시 도구는 모든 일반적인 macOS 브라우저의 TCC 우회 기능을 평가합니다. 사용법...
seans-surf-and-skate
Sean's Surf & Skate Co. — सील सिक्योरिटी डेमो Maven / Java स्प्रिंग बूट के साथ बनाया गया एक छोटा लेकिन वास्तविक दिखने वाला ई-कॉमर्स स्टोरफ्रंट "Sean's Surf & Skate Co."। यह ज्ञात कमज़ोरियों वाली ओपन-सोर्स डिपेंडेंसियों के साथ आता है ताकि इसका उपयोग यह प्रदर्शित करने के लिए किया जा सके कि Seal...
Malicious code in slow-surf (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9f66d2ad1de3674c7aa5dd5efdb00624f0d1ff7f6f1ed38f054e6ca018dea673 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious Package
Overview slow-surf is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...
MAL-2026-5848 Malicious code in slow-surf (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9f66d2ad1de3674c7aa5dd5efdb00624f0d1ff7f6f1ed38f054e6ca018dea673 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-5808 Malicious code in surf-lending (npm)
Sibling of [email protected] campaign C2 path /surflending/. Sentinel-9.9.9 dep-confusion squat; preinstall node index.js || true exfils env secrets mnemonic/key/token/blockfrost to raw C2 2.25.140.71:8443/surflending/npm-confusion. c913 + c252. --- -= Per source details. Do not edit below this...
Malicious code in surf-lending (npm)
Sibling of [email protected] campaign C2 path /surflending/. Sentinel-9.9.9 dep-confusion squat; preinstall node index.js || true exfils env secrets mnemonic/key/token/blockfrost to raw C2 2.25.140.71:8443/surflending/npm-confusion. c913 + c252. --- -= Per source details. Do not edit below this...
surf is unmaintained
The surf crate is unmaintained, and all versions are affected. For alternatives, consider using reqwest or ureq. See this issue for more context...
adx (>=4.0.0, <=4.1.0), aicommits-rs (>=0.1.0, <=0.2.0) +302 more potentially affected by unknown CVE via surf (>=1.0.1, <=2.3.2)
surf CARGO version =1.0.1, =4.0.0, =0.1.0, =1.0.0, =0.3.0, =0.10.0, =0.3.0, =0.5.0, =0.1.0, =0.6.0, =0.3.0, =0.1.0, =0.0.1, =0.2.4 - async-bybit 0.0.1 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0169...
RUSTSEC-2026-0169 surf is unmaintained
The surf crate is unmaintained, and all versions are affected. For alternatives, consider using reqwest or ureq. See this issue for more context...
PT-2026-49130
The surf crate is unmaintained, and all versions are affected. For alternatives, consider using reqwest or ureq. See this issue for more context...
Detecting Data Exfiltration through I2P Anonymity Networks: A Two-Phase Machine Learning Approach
The Invisible Internet Project I2P provides strong anonymity through garlic routing and distributed network architecture, making it attractive for legitimate privacy needs. Nevertheless, the same properties can be exploited by malicious actors to steal sensitive information from corporate network...
CVE-2025-29699
NetSurf 3.11 is vulnerable to Use After Free in domnodesettextcontent function...
CVE-2025-45663
An issue in NetSurf v3.11 causes the application to read uninitialized heap memory when creating a domevent structure...
EUVD-2001-0954
Malware in sbrugna...
EUVD-2009-4427
Malware in sbrugna...