CVE-2026-20820

CVE-2026-20820 winver win1021h219044.6693amd64 win1123h222631.6345amd64 Build basic information Windows SDK version: 10.0 latest installed version Platform toolset: Visual Studio 2022 v143 C++ language standard: Default ISO C++14 standard...

cve-2026-111497-wordpress-poc

CVE-2026-111497: pinned WordPress image RCE PoC This source-only PoC reproduces unauthenticated command execution against one pinned Docker Official Image for WordPress. One pingback.ping request makes WordPress fetch an attacker URL twice during the same PHP request. The first response corrupts ...

debian-lenny-bash_3.2.52-cve-2014-6271

debian-lenny-bash3.2.52-cve-2014-6271 Debian Lenny Bash packages with cve-2014-6271 patches i386 and amd64 You can test the flaw by running: env x=' :;; echo vulnerable' bash -c "echo this is a test"...

Malware in @ai-ecoverse/slicc-windows-amd64

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in @ai-ecoverse/slicc-windows-amd64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ff47f1460fce06cddef5a6a77557395053917a94e987ddbc0f8d5348dc2034cb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

php2shell version frontier — measured RCE per PHP build amd64...

Malicious code in @camera.ui/camera-ui-nvr-windows-amd64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c000e7f2af1a8ca7d6255b3f8fdc035f9b39bc84a8227e29e5cfc388c6a2e22c Package @camera.ui/camera-ui-nvr-windows-amd64 appears to be a platform-specific prebuilt binary distribution Windows amd64 variant for the camera.ui...

MAL-2026-18337 Malicious code in @camera.ui/camera-ui-nvr-windows-amd64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c000e7f2af1a8ca7d6255b3f8fdc035f9b39bc84a8227e29e5cfc388c6a2e22c Package @camera.ui/camera-ui-nvr-windows-amd64 appears to be a platform-specific prebuilt binary distribution Windows amd64 variant for the camera.ui...

Withdrawn Advisory: Malware in @camera.ui/camera-ui-nvr-windows-amd64

Withdrawn Advisory This advisory has been withdrawn because it does not describe a security vulnerability. This link is maintained to preserve external references. Original Description Any computer that has this package installed or running should be considered fully compromised. All secrets and...

Malicious Package

Overview @camera.ui/camera-ui-nvr-windows-amd64 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization...

Malware in @pkgship/frps-linux-amd64

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2026-18199 Malicious code in @pkgship/frps-linux-amd64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f2c1a511013dd65df6260ab26fef946005adb17532ab20070c95e1d5157608c Package appears to distribute a platform-specific binary frps linux-amd64 under a scoped npm name. Only two files were present in scope and no...

Malicious code in @pkgship/frps-linux-amd64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f2c1a511013dd65df6260ab26fef946005adb17532ab20070c95e1d5157608c Package appears to distribute a platform-specific binary frps linux-amd64 under a scoped npm name. Only two files were present in scope and no...

Malicious code in @pkgship/frpc-linux-amd64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 342b27b61267fcea7e459b9079bf0ab2eca982a2421c4d497685126ac6931d31 Package @pkgship/[email protected] is a platform-specific npm distribution for an frpc binary targeting linux-amd64. No install, preinstall,...

MAL-2026-18198 Malicious code in @pkgship/frpc-linux-amd64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 342b27b61267fcea7e459b9079bf0ab2eca982a2421c4d497685126ac6931d31 Package @pkgship/[email protected] is a platform-specific npm distribution for an frpc binary targeting linux-amd64. No install, preinstall,...

Malware in @pkgship/frpc-linux-amd64

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious Package

Overview @pkgship/frpc-linux-amd64 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

Malicious Package

Overview @pkgship/frpc-darwin-amd64 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

Malicious Package

Overview @pkgship/frps-linux-amd64 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

Malicious code in @pkgship/frpc-darwin-amd64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86e33dd3c91ccce255b85fe38d92b75fa31dc4959cc6f443984603add37971c4 Package ships a platform-specific darwin-amd64 build of frpc, a reverse-proxy client, as a prebuilt binary artifact. No install-time scripts, network...