waldo

Waldo es una herramienta ligera y multihilo de fuerza bruta para directorios y subdominios implementada en Python. Se puede utilizar para localizar recursos web ocultos y subdominios no descubiertos del objetivo especificado. Características Principales Genera rápida y fácilmente una lista de tod...

User Impersonation

Overview Affected versions of this package are vulnerable to User Impersonation via the request.params:subjectid parameter when no authenticateproc is configured. An attacker can gain unauthorized access and impersonate other users by supplying arbitrary subject IDs in the request parameters. Thi...

Malicious code in waldo-validator-catalyst (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ba587d457551237e7ba3d7fb5f5e2642cd0b38d50acd43c1787e089dc8a62f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-80085

Malicious code in waldo-validator-catalyst npm...

Malicious code in waldo-wallet-val (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8397fb5436e0bf8164d9bfde11b73721649d47b5824daa265bac1944d2a44ee0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110650 Malicious code in waldo-wallet-val (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8397fb5436e0bf8164d9bfde11b73721649d47b5824daa265bac1944d2a44ee0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-80086

Malicious code in waldo-soluble-pot npm...

MAL-2025-110649 Malicious code in waldo-validator-catalyst (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ba587d457551237e7ba3d7fb5f5e2642cd0b38d50acd43c1787e089dc8a62f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-80084

Malicious code in waldo-wallet-val npm...

Waldo & Friends - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Waldo & Friends published at the 'play' market has multiple vulnerabilities...