Lucene search
+L

7 matches found

Kitploit
Kitploit
added 2026/08/29 11:34 a.m.6 views

CVE-2026-45321-Tanstack

Simulazione di Attacco alla Supply Chain — CVE-2026-45321 TanStack Laboratorio didattico per comprendere gli attacchi alla supply chain npm, l'abuso di CI/CD e l'esecuzione di codice al momento dell'installazione Disclaimer Questo progetto è stato creato solo per: apprendimento della sicurezza...

9.6CVSS8.8AI score0.02342EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/08/29 8:47 a.m.5 views

CVE-2026-45321-Tanstack

Simulation eines Supply-Chain-Angriffs – CVE-2026-45321 TanStack Bildungs-Labor zum Verständnis von npm-Supply-Chain-Angriffen, CI/CD-Missbrauch und Installationszeit-Codeausführung Haftungsausschluss Dieses Projekt wurde nur erstellt für: Cybersicherheitsausbildung, defensive Sicherheitsforschun...

9.6CVSS7.4AI score0.02342EPSS
SaveExploits3
Snyk
Snyk
added 2026/05/11 9:00 p.m.24 views

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code that conceals a credential stealer worm. A malicious actor managed to extract a GitHub Actions OIDC token from the runner process and publish tampered versions of 42 @tanstack/ packages to npm, which then spread ...

9.8CVSS6AI score0.02342EPSS
SaveExploits3References2
Snyk
Snyk
added 2026/05/11 9:00 p.m.22 views

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code that conceals a credential stealer worm. A malicious actor managed to extract a GitHub Actions OIDC token from the runner process and publish tampered versions of 42 @tanstack/ packages to npm, which then spread ...

9.8CVSS5.8AI score
SaveExploits0References2
Snyk
Snyk
added 2026/05/11 9:00 p.m.17 views

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code that conceals a credential stealer worm. A malicious actor managed to extract a GitHub Actions OIDC token from the runner process and publish tampered versions of 42 @tanstack/ packages to npm, which then spread ...

9.8CVSS6AI score0.02342EPSS
SaveExploits3References2
Snyk
Snyk
added 2026/05/11 9:00 p.m.18 views

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code that conceals a credential stealer worm. A malicious actor managed to extract a GitHub Actions OIDC token from the runner process and publish tampered versions of 42 @tanstack/ packages to npm, which then spread ...

9.8CVSS6AI score0.02342EPSS
SaveExploits3References2
GithubExploit
GithubExploit
added 2026/04/26 2:17 a.m.169 views

ethical-hacking-ctf

🔐 Ethical Hacking CTF Writeup Coventry University — 7072SC...

10CVSS7.2AI score0.97485EPSS
SaveExploits16
Rows per page
Query Builder