Malicious code in @stellarshift/abi-tools (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bebef764845634817dcc9905a146c3ba898707dcc9937ebfe0060a4f10852d27 On npm install, the package's postinstall hook resolves a URL that is stored as an XOR-encoded integer array in endpoint-registry.json self-labeled...

MAL-2026-15821 Malicious code in @stellarshift/abi-tools (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bebef764845634817dcc9905a146c3ba898707dcc9937ebfe0060a4f10852d27 On npm install, the package's postinstall hook resolves a URL that is stored as an XOR-encoded integer array in endpoint-registry.json self-labeled...

CVE-2025-9314

The Developer Tools WordPress plugin through 1.1.3 contains an unauthenticated arbitrary file upload vulnerability in the bundled SWFUpload component...

@noema/mfs (>=0.1.0, <=0.3.0), @storm-software/config-tools (>=1.28.2, <=1.30.2) +1 more potentially affected by unknown CVE via @humanfs/node (>=0.11.0, <=0.16.7)

@humanfs/node NPM version =0.11.0, =0.1.0, =1.28.2, =3.0.0, =3.2.1 Source cves: unknown CVE Source advisory: OSV:GHSA-P498-V437-472G...

CVE-2025-9314 Developer Tools <= 1.1.3 – Unauthenticated Arbitrary File Upload

The Developer Tools WordPress plugin through 1.1.3 contains an unauthenticated arbitrary file upload vulnerability in the bundled SWFUpload component...

CVE-2025-9314 Developer Tools <= 1.1.3 – Unauthenticated Arbitrary File Upload

The Developer Tools WordPress plugin through 1.1.3 contains an unauthenticated arbitrary file upload vulnerability in the bundled SWFUpload component...

EUVD-2025-210834

The Developer Tools WordPress plugin through 1.1.3 contains an unauthenticated arbitrary file upload vulnerability in the bundled SWFUpload component...

CVE-2025-9314

The Developer Tools WordPress plugin through version 1.1.3 contains an unauthenticated arbitrary file upload vulnerability in its bundled SWFUpload component. This allows a remote, unauthenticated attacker to upload arbitrary files over the network with low complexity, rated CVSS 3.1: 9.8 (Critic...

Malicious Package

Overview @stellarshift/abi-tools is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packa...

teamcity-cve-2026-63077-remediation

企业安全修复套件 一套生产级安全工程套件，包含四个专业的事件响应与加固软件包。 📁 仓库模块架构 root@kitploit: . ├── README.md 企业套件索引与快速入门 ├── package.json 主测试运行器（Jest + Python unittest 套件） ├── .gitignore 生产仓库排除项 │ ├── supply-chain-security/ 目标 1：供应链安全即服务（Injective 规范） │ ├── README.md 模块架构与红队测试结果 │ ├── SUPPLYCHAINSECURITYPLAYBOOK.md 主部署手册 │ ├...

firmwalker

firmwalker A simple bash script for searching the extracted or mounted firmware file system. It will search through the extracted or mounted firmware file system for things of interest such as: etc/shadow and etc/passwd list out the etc/ssl directory search for SSL related files such as .pem, .cr...

CVE-2026-84427: Improper Resource Shutdown or Release

A vulnerability was determined in zhayujie CowAgent up to 2.1.7. Affected is an unknown function of the file agent/tools/bash/bash.py of the component Bash Tool. Executing a manipulation can lead to denial of service. The attack can be launched remotely. The exploit has been publicly disclosed an...

PT-2026-84716

The Developer Tools WordPress plugin through 1.1.3 contains an unauthenticated arbitrary file upload vulnerability in the bundled SWFUpload component...

PT-2026-84866

Name of the Vulnerable Software and Affected Versions Reader Tools PDF Reader App version 98.8 Description A path traversal issue exists within the File Handler component. This occurs when the display name argument is manipulated in the ActSplashNew.handleDeeplink function, allowing a local...

CVE-2026-84852: Improper Limitation of a Pathname to a Restricted Directory

A security vulnerability has been detected in Reader Tools PDF Reader App 98.8 on Android. The affected element is the function ActSplashNew.handleDeeplink of the component File Handler. The manipulation of the argument displayname leads to path traversal. An attack has to be approached locally...

CVE-2025-9314: Unrestricted Upload of File with Dangerous Type

The Developer Tools WordPress plugin through 1.1.3 contains an unauthenticated arbitrary file upload vulnerability in the bundled SWFUpload component...

coruna

This repository does not have a README...

NetoolHunter-English-Edition

🛡️ NetoolHunter — English Edition A Kali NetHunter securit...

@antfu/nip (0.1.1), @condu-feature/auto-package-exports (>=1.0.0, <=1.0.3) +92 more potentially affected by unknown CVE via @pnpm/config (>=1002.5.3, <=1004.11.5)

@pnpm/config NPM version =1002.5.3, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =2.0.2, =26.2.0, =1.0.6, =0.6.19, =0.1.0-beta.0, =0.3.1 - @mirta/rollup 0.3.5 and more Source cves: unknown CVE Source advisory: SNYK:JS-PNPMCONFIG-19500674...

USN-8555-2: Ubuntu Advantage Tools (pro client) regression

USN-8555-1 fixed vulnerabilities in Ubuntu Advantage Tools. On Ubuntu 14.04 LTS only, it was discovered that some machines were unable to enable esm-infra-legacy due to a preemptive apt-helper check. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Bil...