Malicious code in prosocks (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb2bf0fd5f445eed9825601f2b4497502054176d106d4fecb9eabf38312dd582 prosocks 1.0.25 enrolls the installer's host as a remote-controlled SOCKS5 exit node under a hardcoded control plane at https://kalnetz.store...

MAL-2026-17167 Malicious code in prosocks (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb2bf0fd5f445eed9825601f2b4497502054176d106d4fecb9eabf38312dd582 prosocks 1.0.25 enrolls the installer's host as a remote-controlled SOCKS5 exit node under a hardcoded control plane at https://kalnetz.store...

CVE-2026-87118 Botslab G980H Dashcams Out-of-bounds Write

The Botslab G980H dash camera firmware contains an out of bounds write vulnerability in its command processing functionality. An authenticated attacker with adjacent network access could submit crafted command data that corrupts memory, potentially disrupting authentication state or causing the...

EUVD-2026-86462

The Botslab G980H dash camera firmware contains an out of bounds write vulnerability in its command processing functionality. An authenticated attacker with adjacent network access could submit crafted command data that corrupts memory, potentially disrupting authentication state or causing the...

CVE-2026-87118

The Botslab G980H dash camera firmware is susceptible to an out-of-bounds write vulnerability within its command processing functionality . An authenticated attacker with adjacent network access can submit crafted command data to corrupt memory. This could lead to the disruption of the authentica...

CVE-2026-87118 Botslab G980H Dashcams Out-of-bounds Write

The Botslab G980H dash camera firmware contains an out of bounds write vulnerability in its command processing functionality. An authenticated attacker with adjacent network access could submit crafted command data that corrupts memory, potentially disrupting authentication state or causing the...

CVE-2026-93289

The affected products are vulnerable to command injection attack that could allow an unauthenticated attacker to execute system commands during the pairing process...

CVE-2026-84399

The Botslab G980H dash camera firmware contains an authorization vulnerability in its session based command functionality. The product does not sufficiently associate an authenticated session with the client connection that established it, and subsequent privileged operations rely on possession o...

EUVD-2026-86461

A security flaw has been discovered in jhen0409 react-native-debugger up to 0.14.0. The impacted element is the function openDevTools of the file electron/window.js of the component Open in Editor Handler. The manipulation of the argument host results in os command injection. It is possible to...

CVE-2026-97366

A security flaw exists in jhen0409 react-native-debugger versions up to 0.14.0 . The vulnerability is located in the openDevTools function within the electron/window.js file of the Open in Editor Handler component. By manipulating the host argument, an attacker can trigger an os command injection...

CVE-2026-97366 jhen0409 react-native-debugger Open in Editor window.js openDevTools os command injection

A security flaw has been discovered in jhen0409 react-native-debugger up to 0.14.0. The impacted element is the function openDevTools of the file electron/window.js of the component Open in Editor Handler. The manipulation of the argument host results in os command injection. It is possible to...

CVE-2026-97366 jhen0409 react-native-debugger Open in Editor window.js openDevTools os command injection

A security flaw has been discovered in jhen0409 react-native-debugger up to 0.14.0. The impacted element is the function openDevTools of the file electron/window.js of the component Open in Editor Handler. The manipulation of the argument host results in os command injection. It is possible to...

system_bt_AOSP_10_r33_CVE-2021-0316

Fluoride 蓝牙协议栈 在 AOSP 上构建和运行 只需构建 AOSP - Fluoride 默认包含在内。 在 Linux 上构建和运行 适用于 Ubuntu 的说明，已在 14.04（使用 Clang 3.5.0）和 16.10（使用 Clang 3.8.0）上测试通过。 下载源码 root@kitploit: mkdir /fluoride cd /fluoride git clone https://android.googlesource.com/platform/system/bt 安装依赖（需要 sudo 权限）： root@kitploit: cd...

Imperva_gzip_WAF_Bypass

Imperva Web 应用防火墙 WAF POST 请求绕过 Imperva Cloud WAF 曾存在一个绕过漏洞，允许攻击者在发送恶意 HTTP POST 载荷（如 log4j 漏洞利用、SQL 注入、命令执行、目录遍历、XXE 等）时规避 WAF 规则。 修复方案 Imperva 团队从收到报告的那一刻起就非常重视此事，并在短短几天内拿出了全球性的修复方案。值得称赞。截至 2021 年 12 月 22 日，所有 Cloud WAF 客户均已自动完成修补。与 Imperva 的合作非常愉快，他们显然拥有一支成熟、专业且能力过硬的安全团队。 如何利用 向 HTTP POST 请求添加...

AgrusScanner

Agrus Scanner Network reconnaissance tool with deep AI/ML service detection. Scans your network to discover hosts, open ports, and identifies AI services running across your infrastructure. Built for security teams, IT admins, and researchers who need visibility into shadow AI, rogue LLM...

BHPAI

プロジェクトドキュメント: BHPAI システムバージョン : V1.6 Enterprise Edition システム機能の全面アップデート 著者 : Rin449 コア言語 & 技術: C++17 MinGW-w64 / MSYS2, Python 3.9+, PyQt6, MinHook, Capstone Engine, Intel PT Processor Trace, PyTorch, LightGBM, OpenSSL 3.x, zlib, Argon2id, Cryptography, Ed25519 マスタ参照ドキュメント :...

react2shell-scanner-CVE-2025-55182

React2Shell エンタープライズスキャナー CVE-2025-55182 および CVE-2025-66478 向けの高精度脆弱性スキャナー - React Server Components / Next.js におけるリモートコード実行RCE脆弱性 📖 詳細な技術分析、エクスプロイトの仕組み、IOC データについては、SECURITY-RESEARCH.md を参照してください ⚠️ 免責事項 このツールは、教育目的および許可を得たセキュリティテスト専用に提供されます。...

CVE-2026-18351

CVE-2026-18351 CVE-2026-18351 の大量エクスプロイトツール — Drag and Drop File Upload for Elementor Forms credit johenlastgen | telegram @johenlastgen | channel @jlgnetworkredirect 機能 パッシブ脆弱性プローブ（アップロードなし） シェルアップロードと RCE 確認を含む完全エクスプロイトモード 単一ターゲットおよびバッチターゲットのサポート マルチスレッドサポート 設定可能なコマンド実行 完全ログ、脆弱性のみ、pwned のみの出力ファ...

siem

Offensive SIEM SIEMを攻撃的ディスカバリーツールとして活用するための実践的なテクニック。防御側が攻撃者のように考え、内側からセキュリティを強化するための支援。 クエリ 上記参照 - queries.md ファイル。 必要に応じて更新を続けます。異なる event.codes/event.providers を使用して、レイヤーごとのカバレッジを実現することを目指しています。 2026年2月に環境変数 PATHS、カーネルドライバー、ログオン/スタートアップスクリプトなどのクエリを公開しました！ 2026年3月に OpenSSL...

BrokenPipe

BrokenPipe - Steam Client Service LPE Vulnerability This is the single-script version. The original compiled C++ PoC is on the legacy branch. Thanks to John Hammond for the suggestion, subscribe to him! PoC video: YouTube John Hammond's breakdown: YouTube Greetz to @MSNIGHTMARE2000 for the inspo ...