extrude

extrude Analyse binaries for missing security features, information disclosure and more. 🚧 Extrude is in the early stages of development, and currently only supports ELF and MachO binaries. PE Windows binaries will be supported soon. Usage Usage: extrude flags file Flags: -a, --all Show details o...

sqlmc

SQLMC - SQL Injection Massive Checker Demo Information This tool is for educational purpose only, usage of SQLMC for attacking targets without prior mutual consent is illegal. Developers assume no liability and are not responsible for any misuse or damage cause by this program. Overview SQLMC SQL...

shocker

Shocker A tool to find and exploit servers vulnerable to Shellshock Ref: https://en.wikipedia.org/wiki/Shellshocksoftwarebug Released as open source by NCC Group Plc - https://www.nccgroup.trust/ Developed By: Tom Watson, tom dot watson at nccgroup dot trust https://github.com/nccgroup/shocker...

Malicious code in @walknpm/todo-cli (npm)

@walknpm/[email protected] is a new release of a todo-list CLI and web app whose only change from 2.0.0 is a postinstall script, sh scripts/miner.sh, that runs on npm install. The script downloads a gzip carrier from amplify-gursha-dev-121835-deployment.s3.amazonaws.com to /tmp/.smh; as root or with...

Malicious code in @walknpm/todo-cli (npm)

@walknpm/[email protected] is a new release of a todo-list CLI and web app whose only change from 2.0.0 is a postinstall script, sh scripts/miner.sh, that runs on npm install. The script downloads a gzip carrier from amplify-gursha-dev-121835-deployment.s3.amazonaws.com to /tmp/.smh; as root or with...

MAL-2026-18320 Malicious code in @walknpm/todo-cli (npm)

@walknpm/[email protected] is a new release of a todo-list CLI and web app whose only change from 2.0.0 is a postinstall script, sh scripts/miner.sh, that runs on npm install. The script downloads a gzip carrier from amplify-gursha-dev-121835-deployment.s3.amazonaws.com to /tmp/.smh; as root or with...

Malicious code in @beloved-lenora/opencode-todo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3b77fc053f72d1eaff51ad3b9af235119b5aa1dbb28d216c084e7023d4e963f6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

NETGEAR Debug Auth Bypass (CVE-2020-27866)

Exploits CVE-2020-27866 on multiple NETGEAR routers: unauthenticated access to /setup.cgi?todo=debug exposes debug mode and configuration pages. !/usr/bin/env python3 -- coding: utf-8 -- """NETGEAR password recovery auth bypass CVE-2020-27866.""" from kittysploit import from...

NETGEAR DGN syscmd RCE (CVE-2024-12847)

Exploits CVE-2024-12847 in NETGEAR DGN routers: unauthenticated command injection via setup.cgi todo=syscmd&cmd= parameter. !/usr/bin/env python3 -- coding: utf-8 -- """NETGEAR DGN setup.cgi syscmd RCE CVE-2024-12847.""" import re import urllib.parse from kittysploit import from...

CVE-2026-90582

A vulnerability was identified in evanchiu serverless-todo 1.0.3/2.0.0. Impacted is the function saveTodos of the file src/index.js of the component API Todo Endpoint. Such manipulation of the argument event.body leads to resource consumption. The attack can be executed remotely. The exploit is...

CVE-2026-90582 evanchiu serverless-todo API Todo Endpoint index.js saveTodos resource consumption

A vulnerability was identified in evanchiu serverless-todo 1.0.3/2.0.0. Impacted is the function saveTodos of the file src/index.js of the component API Todo Endpoint. Such manipulation of the argument event.body leads to resource consumption. The attack can be executed remotely. The exploit is...

EUVD-2026-77072

A vulnerability was identified in evanchiu serverless-todo 1.0.3/2.0.0. Impacted is the function saveTodos of the file src/index.js of the component API Todo Endpoint. Such manipulation of the argument event.body leads to resource consumption. The attack can be executed remotely. The exploit is...

CVE-2026-90582

evanchiu serverless-todo (versions 1.0.3 and 2.0.0) is affected by a remote resource exhaustion vulnerability in the saveTodos function of src/index.js (API Todo Endpoint). An attacker can manipulate the event.body argument to trigger excessive resource consumption, leading to availability degrad...

CVE-2026-90582 evanchiu serverless-todo API Todo Endpoint index.js saveTodos resource consumption

A vulnerability was identified in evanchiu serverless-todo 1.0.3/2.0.0. Impacted is the function saveTodos of the file src/index.js of the component API Todo Endpoint. Such manipulation of the argument event.body leads to resource consumption. The attack can be executed remotely. The exploit is...

CVE-2026-90582 evanchiu serverless-todo API Todo Endpoint index.js saveTodos resource consumption

A vulnerability was identified in evanchiu serverless-todo 1.0.3/2.0.0. Impacted is the function saveTodos of the file src/index.js of the component API Todo Endpoint. Such manipulation of the argument event.body leads to resource consumption. The attack can be executed remotely. The exploit is...

CVE-2026-90582: Uncontrolled Resource Consumption

A vulnerability was identified in evanchiu serverless-todo 1.0.3/2.0.0. Impacted is the function saveTodos of the file src/index.js of the component API Todo Endpoint. Such manipulation of the argument event.body leads to resource consumption. The attack can be executed remotely. The exploit is...

PT-2026-90954

A vulnerability was identified in evanchiu serverless-todo 1.0.3/2.0.0. Impacted is the function saveTodos of the file src/index.js of the component API Todo Endpoint. Such manipulation of the argument event.body leads to resource consumption. The attack can be executed remotely. The exploit is...

ahmedraza-atm (>=2.0.0, <=2.0.3), cli-03-todo-list (1.0.0) +3 more potentially affected by unknown CVE via chlak (0.0.1-security)

chlak NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on chlak and may be impacted: - ahmedraza-atm =2.0.0, =1.0.0, =1.0.0, =1.0.1 - todo-list-with-anila-waqar 1.0.0 Source cves: unknown CVE Source advisory: GHSA-5QJ8-X2G9-J89R...

on-duty-js (3.0.0), todo-app-23426 (1.0.0) potentially affected by unknown CVE via chalkk (0.0.1-security)

chalkk NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on chalkk and may be impacted: - on-duty-js 3.0.0 - todo-app-23426 1.0.0 Source cves: unknown CVE Source advisory: GHSA-6XVJ-W5GP-P2H4...

Malicious code in checkout-todo-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a87cb6c1e9ab39c21cd5d1031cadd2c192f86aaa337a62a7476657d5ee3f7f39 On require of this package, index.js loads platform.js, which asynchronously downloads a platform-specific binary from anonymous Cloudflare Workers...