9205 matches found
Malicious Package
Overview rust-testing-utils is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
Malicious code in rust-testing-utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee33bdedc7938508bcb50e053c441770948d3d69a51c5cab5d4280d84ceffa65 The package impersonates the pino logger in its README, keywords, and API surface. index.js exports middleware that spawns lib/caller.js as a detache...
MAL-2026-14374 Malicious code in rust-testing-utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee33bdedc7938508bcb50e053c441770948d3d69a51c5cab5d4280d84ceffa65 The package impersonates the pino logger in its README, keywords, and API surface. index.js exports middleware that spawns lib/caller.js as a detache...
Malicious code in solidity-testing-utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a7ffd7dfab8f1c168ceb5ae9b26f4221e912d2a444afe029b83b1f214cf3bd8 Package presents itself as a chai/solidity testing helper and pino-style logger, but its exported middleware factory in index.js silently spawns...
MAL-2026-14375 Malicious code in solidity-testing-utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a7ffd7dfab8f1c168ceb5ae9b26f4221e912d2a444afe029b83b1f214cf3bd8 Package presents itself as a chai/solidity testing helper and pino-style logger, but its exported middleware factory in index.js silently spawns...
EUVD-2026-64135
Combodo iTop is a web based IT service management tool. Prior to 3.2.3, there is a Reflected Cross-Site Scripting XSS vulnerability in the testing OQL query functionality. This issue has been fixed in version 3.2.3...
CVE-2026-30826
Combodo iTop is a web-based IT service management tool. Prior to version 3.2.3 , a Reflected Cross-Site Scripting (XSS) vulnerability exists in the testing OQL query functionality of run_query.php. An attacker with low privileges can craft a malicious link that, when clicked by a user, executes a...
Malicious Package
Overview saas-f-testing is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
CVE-2026-77767
Reconmap's API applies a fallback authorization policy in apps/api/app/Program.cs that requires an authenticated user holding the administrator role, so controllers without their own attribute reject anonymous callers. The report preview action in apps/api/app/Controllers/ReportsController.cs...
MINI-XH4W-J8P6-XM8H
Bulletin has no description...
faction v1.8.13
OWASP - FACTION PenTesting Report Generation and Collaboration Framework Faction is now an OWASP Project! You can find more informationhere Sponsors Premium Sponsors otto-js - PCI and Client Side Security | Secninjaz Technologies LLP ---|--- Become a Sponsor ❤️ If you like the project and would...
cybersecurity-projects
Hands-on cybersecurit...
vulnerability-harness
Vulnerability Harness An LLM harness that reads code, for...
akto v2.20.1
Akto.io API Security Contributors What is Akto? How it works • Getting-Started • API Inventory • API testing • Add Test • Join Discord community • Akto is an instant, open source API security platform that takes only 60 secs to get started. Akto is used by security teams to maintain a continuous...
zaproxy w2026-08-19
The Zed Attack Proxy ZAP by Checkmarx is the world’s most widely used web app scanner. Free and open source. A community based GitHub Top 1000 project that anyone can contribute to. It can help you automatically find security vulnerabilities in your we...
IoT-Home-Guard — Updated!
The first version of the hardware tool uses the Raspberry Pi as a development platform. Users need to log in to the Raspberry Pi to launch the software tool through ssh, and then connect the IoT device to be tested to the Raspberry Pi wifi. I am designing a second version, the user only needs to...
ransomwhere v1.3.1
Ransomwhere A Proof of Concept ransomware sample that encrypts your files to test out your ransomware detection & prevention strategies. If no arguments are provided, ransomwherewill automatically execute the encrypt mode without deleting the original files. I am not responsible for any damage...
Awesome-Bug-Bounty-Tools-Contents
Awesome-Bug-Bounty-Tools-Contents A comprehensive Bug Bounty a...
apex v2.3.0-canary.52dcca8a
Pensar Apex AI-powered penetration testing using autonomous agents — directly in your terminal. Run blackbox and whitebox pentests that explore, reason, and surface real vulnerabilities. Want to run from the cloud or integrate it with your CI/CD? See Pensar Console. Use Cases Developers Run...