mythic_telegram_profile

Telegram C2 profile for Mythic Telegram provides a Mythic C2 profile for the Athena and Apollo agents. It uses Telegram private bot-to-bot messages as a transport and Mythic's Push C2 gRPC service as the controller bridge. Architecture Athena or Apollo agent bot Telegram Bot API controller bot...

Apollo

Apollo A simple, lightweight Remote Access Tool written in Python Apollo is a cross-platform Windows, Linux, FreeBSD & MacOS Remote Access Tool for Python 3.4+. Its features are currently very basic but allow for post-exploitation remote code execution as well as obtaining information on the clie...

GraphCrawler

GraphCrawler THE GraphQL automated testing tookit Graph Crawler is the most powerful automated testing toolkit for any GraphQL endpoint. Version 1.2 is out!! NEW: Can search for endpoints for you using Escape Technology's powerful Graphinder tool. Just point it towards a domain and add the '-e'...

IntelTXE-PoC

Disclaimer All information is provided for educational purposes only. Follow these instructions at your own risk. Neither the authors nor their employer are responsible for any direct or consequential damage or loss arising from any person or organization acting or failing to act on the basis of...

POC-CVE-2026-32621-Apollo-Federation-XSS-Vulnerability

CVE-2026-32621 - Apollo Federation Prototype Pollution PoC Overview Field| Value ---|--- CVE| CVE-2026-32621 CVSS| 9.9 Critical CWE| CWE-1321 Prototype Pollution Affected| Apollo Federation 2.9.6, 2.10.5, 2.11.6, 2.12.3, 2.13.2 Patched| 2.9.6, 2.10.5, 2.11.6, 2.12.3, 2.13.2 GHSA|...

BIT-PARSE-2026-109302 Parse Server 8.2.2 before 8.6.94 and 9.0.0 before 9.10.1 GraphQL Schema Disclosure via Persisted Queries

Parse Server 8.2.2 before 8.6.94 and 9.0.0 before 9.10.1 applies its GraphQL introspection control only to operation text sent directly with a request, not to operations resolved from Apollo Server's automatic persisted query cache. Unauthenticated attackers holding the public Application Id and...

apollo-koa-minimal

CVE-2023-26144...

CVE-2026-109302

Parse Server 8.2.2 before 8.6.94 and 9.0.0 before 9.10.1-alpha.14 applies its GraphQL introspection control only to operation text sent directly with a request, not to operations resolved from Apollo Server's automatic persisted query cache. Unauthenticated attackers holding the public Applicatio...

CVE-2026-109302 Parse Server 8.2.2 before 8.6.94 and 9.0.0 before 9.10.1-alpha.14 GraphQL Schema Disclosure via Persisted Queries

Parse Server 8.2.2 before 8.6.94 and 9.0.0 before 9.10.1-alpha.14 applies its GraphQL introspection control only to operation text sent directly with a request, not to operations resolved from Apollo Server's automatic persisted query cache. Unauthenticated attackers holding the public Applicatio...

CVE-2026-109302: Incorrect Authorization

Parse Server 8.2.2 before 8.6.94 and 9.0.0 before 9.10.1-alpha.14 applies its GraphQL introspection control only to operation text sent directly with a request, not to operations resolved from Apollo Server's automatic persisted query cache. Unauthenticated attackers holding the public Applicatio...

cn.vertxup:up-apollo (>=0.4.2, <=0.4.4), cn.vertxup:up-atlas (>=0.4.2, <=0.4.4) +45 more potentially affected by CVE-2026-107725 via com.hazelcast:hazelcast (3.9.1)

com.hazelcast:hazelcast MAVEN version 3.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - cn.vertxup:up-apollo =0.4.2, =0.4.2, =0.4.2, =0.4.2, =0.4.2, =0.4.2, =0.4.2, =0.4.2, =0.4.2, =0.4.2, =0.4.2,...

GHSA-6W6G-HM98-MHGM vulnerabilities

Vulnerabilities for packages: vector, shadowsocks-rust, ntpd-rs, komodo, apollo-router, sccache, linkerd2-proxy...

GHSA-6F2X-V7Q7-M7M5 vulnerabilities

Vulnerabilities for packages: vector, shadowsocks-rust, ntpd-rs, komodo, apollo-router, sccache, linkerd2-proxy...

GHSA-5J98-2G5X-46V6 vulnerabilities

Vulnerabilities for packages: vector, shadowsocks-rust, ntpd-rs, komodo, apollo-router, sccache, linkerd2-proxy...

WyreStorm Apollo VX20 Config Leak (CVE-2024-25735)

Exploits CVE-2024-25735 in WyreStorm Apollo VX20 1.3.58: unauthenticated GET /device/config exposes SoftAP router credentials in JSON. !/usr/bin/env python3 -- coding: utf-8 -- """WyreStorm Apollo VX20 config leak CVE-2024-25735.""" from kittysploit import from lib.protocols.http.httpclient impor...

apollo-sdk (>=0.1.1, <=0.1.6), bell-nozzle-master (1.0.8) +5 more potentially affected by CVE-2026-15307 via django (4.1.2)

django PYPI version 4.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - apollo-sdk =0.1.1, =3.11.6, =0.61.0, =0.62.0 Source cves: CVE-2026-15307 Source advisory: OSV:PYSEC-2026-4035...

CLSA-2026-1790706458 TuxCare security update for @apollo (1 CVE)

TuxCare rebuilt 2 @apollo packages to address 1 CVE. Fixed in 4.13.0-tuxcare.1...

ROOT-APP-NPM-CVE-2025-64530 CVE-2025-64530 in @apollo/composition - Patched by Root

Root has patched CVE-2025-64530 in the @apollo/composition package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-GHSA-M8JR-FXQX-8XX6 GHSA-m8jr-fxqx-8xx6 in @apollo/composition - Patched by Root

Root has patched GHSA-m8jr-fxqx-8xx6 in the @apollo/composition package for Root:npm. Multiple fixed versions available...

Malicious Package

Overview cygnus-standard-apollo-mira is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...