Lucene search
+L

21 matches found

Kitploit
Kitploit
added 2026/09/02 6:09 a.m.4 views

MasterHttpRelayVPN-RUST

mhrv-rs — elude la censura gratis, con tu propia cuenta de Google Un pequeño programa que se ejecuta en tu ordenador y te permite visitar sitios web bloqueados de forma gratuita, usando un Google Apps Script que despliegas en tu propia cuenta gratuita de Google. Tu ISP solo ve tráfico cifrado hac...

5.9AI score
SaveExploits0References4
Kitploit
Kitploit
added 2026/09/02 4:37 a.m.7 views

mhr-cfw

MHR-CFW MITM Domain-Fronted HTTP Relay + Cloudflare Worker Exit Inglés| Persa ---|--- Cómo Funciona 1 - GAS + Cloudflare Worker Exit root@kitploit: Client - Local Relay - Google/CDN Front - GAS Google Apps Script Relay - Cloudflare Worker - Exit | +- Shows www.google.com to network DPI filter 2 -...

5.9AI score
SaveExploits0References10
Kitploit
Kitploit
added 2026/09/02 3:33 a.m.2 views

MasterHttpRelayVPN

MasterHttpRelayVPN La búsqueda segura de Youtube y la transmisión en vivo ahora están bypaseadas y funcionando por defecto. Por lo que no necesitas youtubeviarelay ni exitnode de Cloudflare / VPS para ello. Idioma: English | Persian / فارسی نسخه فارسی با AI ایجاد شده. ترجیحا از نسخه انگلیسی استفا...

5.9AI score
SaveExploits0References16
The Hacker News
The Hacker News
added 2026/08/17 5:41 p.m.25 views

Cavern C2 Uses DNS and Google Apps Script to Blend Into Legitimate Traffic

Cybersecurity researchers have traced the continued evolution of the Cavern aka Cav3rn command-and-control C2 framework used by Iranian nation-state hackers in attacks targeting entities in Israel. Russian cybersecurity company Kaspersky said its ongoing monitoring of the threat activity cluster...

6.4AI score
SaveExploits0
OSV
OSV
added 2026/07/09 1:15 a.m.11 views

MAL-2026-7026 Malicious code in tailwind-core (npm)

The npm package tailwind-core versions 4.3.1 and 4.3.2 contain remote code execution payloads hidden in the exported Tailwind-style runtime. The package root export reaches code that fingerprints the host, communicates with attacker-controlled Google Apps Script/Drive or Sheets resources, decodes...

6.7AI score
SaveExploits0References4
OSSF Malicious Packages
OSSF Malicious Packages
added 2026/05/26 2:39 p.m.21 views

Malicious code in pywingui (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6db77876bf3b13e55750748761841f7ab77f17bd951bdc1c749e1e56d4416d7e pywingui 6.0.1 advertises itself as a Win32 UI automation framework but ships only Nuitka-compiled cp311-win32.pyd binaries the 4.py files are trivia...

5.8AI score
SaveExploits0References5
OSV
OSV
added 2026/05/26 2:39 p.m.21 views

MAL-2026-4821 Malicious code in pywingui (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6db77876bf3b13e55750748761841f7ab77f17bd951bdc1c749e1e56d4416d7e pywingui 6.0.1 advertises itself as a Win32 UI automation framework but ships only Nuitka-compiled cp311-win32.pyd binaries the 4.py files are trivia...

5.8AI score
SaveExploits0References5
OSV
OSV
added 2026/05/23 8:16 p.m.20 views

MAL-2026-4381 Malicious code in @digicroz/typed-api-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32c8c3e9ffd3f994b21011084101df521e232c2ee5dbe93fd51f36977549f2dc The exported paymentGateways.pay0Pg.createOrder API does not call pay0.shop directly. Instead, dist/index.js hardcodes a base URL of...

5.9AI score
SaveExploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
added 2026/05/23 8:16 p.m.21 views

Malicious code in @digicroz/typed-api-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32c8c3e9ffd3f994b21011084101df521e232c2ee5dbe93fd51f36977549f2dc The exported paymentGateways.pay0Pg.createOrder API does not call pay0.shop directly. Instead, dist/index.js hardcodes a base URL of...

5.9AI score
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2026/03/26 2:58 p.m.9 views

CVE-2026-4092

Path Traversal in Clasp impacting versions 3.2.0 allows a remote attacker to perform remote code execution via a malicious Google Apps Script project containing specially crafted filenames with directory traversal sequences...

8.7CVSS6.5AI score0.00465EPSS
SaveExploits1References1
EUVD
EUVD
added 2026/03/13 8:57 p.m.8 views

EUVD-2026-12047

@google/clasp vulnerable to unsafe path traversal cloning or pulling a malicious script...

8.7CVSS5.8AI score0.00465EPSS
SaveExploits1References5
NVD
NVD
added 2026/03/13 7:55 p.m.10 views

CVE-2026-4092

Path Traversal in Clasp impacting versions 3.2.0 allows a remote attacker to perform remote code execution via a malicious Google Apps Script project containing specially crafted filenames with directory traversal sequences...

8.8CVSS0.00465EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2026/03/13 3:44 p.m.4 views

CVE-2026-4092

Path Traversal in Clasp impacting versions 3.2.0 allows a remote attacker to perform remote code execution via a malicious Google Apps Script project containing specially crafted filenames with directory traversal sequences...

8.7CVSS6.4AI score0.00465EPSS
SaveExploits1References2Affected Software1
Vulnrichment
Vulnrichment
added 2026/03/13 3:44 p.m.4 views

CVE-2026-4092 Arbitrary File Write via Path Traversal in Google clasp leading to RCE

Path Traversal in Clasp impacting versions 3.2.0 allows a remote attacker to perform remote code execution via a malicious Google Apps Script project containing specially crafted filenames with directory traversal sequences...

8.7CVSS6.4AI score0.00465EPSS
SaveExploits1References1
CVE
CVE
added 2026/03/13 3:44 p.m.42 views

CVE-2026-4092

CVE-2026-4092 affects Google clasp prior to 3.2.0. A path traversal in filenames within a Google Apps Script project can lead to remote code execution, enabling an attacker to write arbitrary files on the host. Affected versions:

8.8CVSS6.4AI score0.00465EPSS
SaveExploits1References1Affected Software1
OSV
OSV
added 2026/03/13 3:44 p.m.9 views

CVE-2026-4092 Arbitrary File Write via Path Traversal in Google clasp leading to RCE

Path Traversal in Clasp impacting versions 3.2.0 allows a remote attacker to perform remote code execution via a malicious Google Apps Script project containing specially crafted filenames with directory traversal sequences...

8.7CVSS6.6AI score
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/03/13 12:00 a.m.10 views

PT-2026-25324

Arbitrary File Write via Path Traversal in Google clasp leading to RCE CVE: CVE-2026-4092 Vendor: Google Product: Clasp CVSS: 8.7 Credits: n/a Description: Path Traversal in Clasp impacting versions 3.2.0 allows a remote attacker to perform remote code execution via a malicious Google Apps Script...

8.7CVSS6.4AI score0.00465EPSS
SaveExploits1References15
OSV
OSV
added 2025/08/14 6:52 p.m.5 views

MAL-2025-14738 Malicious code in apps-script-oauth2 (npm)

The package apps-script-oauth2 was found to contain malicious code...

7.2AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/08/14 6:52 p.m.5 views

Malicious code in apps-script-oauth2 (npm)

The package apps-script-oauth2 was found to contain malicious code...

7AI score
SaveExploits0
Filippo.io
Filippo.io
added 2018/05/03 3:53 a.m.35 views

Making a Gmail bot with Apps Script and TypeScript

Google Apps Script is one of the best hidden features of Gmail. Did you ever want just a bit more flexibility from a filter? Maybe the ability to remove a label, or match on a header, or just decide the order they are applied in. Apps Script can do all that and then some. They are simple JavaScri...

7.4AI score
SaveExploits0
Rows per page
Query Builder