78367 matches found
Exploit for CVE-2026-63030
wp2shell-cf-bypass Independent PoC for the WordPress batch ro...
zero-copy-web-application-firewall
Z-WAF — Zero-Copy Web Application Firewall Z-WAF is a Windows...
Malicious code in vantrala (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab1a8ea52e1b49fea90687ad77b199bd1ca8eda6666ce05c55e98e52c6da59ec The package presents itself as a 'Python wrapper for the bundled kimichat runtime' but the bundled 32MB ELF at src/vantrala/resources/kimichat is...
MAL-2026-10867 Malicious code in vantrala (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab1a8ea52e1b49fea90687ad77b199bd1ca8eda6666ce05c55e98e52c6da59ec The package presents itself as a 'Python wrapper for the bundled kimichat runtime' but the bundled 32MB ELF at src/vantrala/resources/kimichat is...
Malicious code in nemopush (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58d2958d0307dfe5b73dc1eef5a46e96c25f94ea31a0b4ab8b43a1878d427d2d The package advertises itself as 'A push notification package' but ships an 8.6 MB opaque ELF x86-64 binary named claude and a start.sh wrapper as...
MAL-2026-10866 Malicious code in nemopush (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58d2958d0307dfe5b73dc1eef5a46e96c25f94ea31a0b4ab8b43a1878d427d2d The package advertises itself as 'A push notification package' but ships an 8.6 MB opaque ELF x86-64 binary named claude and a start.sh wrapper as...
SleeperGem Uses Three Malicious RubyGems Packages to Target Developer Machines
Cybersecurity researchers have flagged a new software supply chain attack codenamed SleeperGem targeting the Ruby ecosystem after three malicious gems were published to RubyGems with the end goal of serving additional payloads. The rogue gems are listed below - gitcredentialmanager versions 2.8.0...
Malicious code in kimitalk (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94983bf77f2b110f03fdd52385dfc4d215ad082666b1ac482c805062605c8d35 The package presents itself as a 'Kimi' chat runtime but bundles a 32MB ELF binary at resources/kimichat that is ForgeMiner 1.4.1, a CUDA GPU...
MAL-2026-10865 Malicious code in kimitalk (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94983bf77f2b110f03fdd52385dfc4d215ad082666b1ac482c805062605c8d35 The package presents itself as a 'Kimi' chat runtime but bundles a 32MB ELF binary at resources/kimichat that is ForgeMiner 1.4.1, a CUDA GPU...
MAL-2026-10864 Malicious code in kimichat (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b57c88bce76fccb6cb2b3a99ef53a62402a8d56b4918ba4c7f2b634036317093 The package presents itself as a 'Python wrapper for the bundled kimichat runtime' and exposes a kimichat-run console script plus kimichat.run...
Malicious code in kimichat (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b57c88bce76fccb6cb2b3a99ef53a62402a8d56b4918ba4c7f2b634036317093 The package presents itself as a 'Python wrapper for the bundled kimichat runtime' and exposes a kimichat-run console script plus kimichat.run...
TencentOS Server 3: cups (TSSA-2026:0630)
The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0630 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...
PT-2026-61735
Name of the Vulnerable Software and Affected Versions GRAPHIFY versions 0.3.2 through 0.4.29 Description A remote attacker can execute arbitrary code through the validate url, safe fetch, build opener, fetch html, and download binary functions. Recommendations At the moment, there is no informati...
TencentOS Server 4: grafana (TSSA-2026:0643)
The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0643 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...
Important: composer
Issue Overview: Composer is a dependency Manager for the PHP language. Prior to 2.2.29 and 2.10.2, a Composer package bin entry containing .. path segments can resolve outside the package install directory and cause Composer's binary installation flow to chmod an existing host file to a...
(A)ISpy: Parasitic Trojans for Machine Learning Infrastructure
Modern machine learning ML pipelines depend heavily on third party libraries for graph compilation and hardware acceleration. While current practices audit data and model artifacts or rely on file integrity checks, the execution environment remains implicitly trusted. This blind spot enables acti...
PT-2026-61591
threatreport LowCompleteness Proxying to Compromise: SonicWall Secure Mobile Access 0-day Exploitation | 17-07-2026 Source: https://t.co/LPIxpEauiy Key details below ↓ 🧑💻Actors/Campaigns: Uta0533 💀Threats: Xzfind tool, Rootrun tool, Knuckleball, Suo5 tool, Behinder, Orangetail, 🎯Victims: Vpn...
Amazon Linux 2023 : composer (ALAS2023-2026-1941)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-1941 advisory. Composer is a dependency Manager for the PHP language. Prior to 2.2.29 and 2.10.2, a Composer package bin entry containing .. path segments can resolve outside the package install directory an...