37 matches found
klar
Klar Integration of Clair and Docker Registry supports both Clair API v1 and v3 Klar is a simple tool to analyze images stored in a private or public Docker registry for security vulnerabilities using Clair https://github.com/coreos/clair. Klar is designed to be used as an integration tool so it...
Exploit for CVE-2026-97163
CVE-2026-97163 — UP Plugin GitHub Remote Code Installation Jo...
CVE-2026-97163
Joomla Extension - lomart.fr - Unauthenticated remote code installation in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.0.29...
CVE-2026-97163 Joomla Extension - lomart.fr - Unauthenticated remote code installation in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.0.29
Joomla Extension - lomart.fr - Unauthenticated remote code installation in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.0.29...
CVE-2026-97163 Joomla Extension - lomart.fr - Unauthenticated remote code installation in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.0.29
Joomla Extension - lomart.fr - Unauthenticated remote code installation in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.0.29...
CVE-2026-97163
The UP (Universal Plugin) extension for Joomla (specifically the mini package) is vulnerable to unauthenticated remote code installation in versions 5.0.0–5.2.0 and 6.0.0–6.0.29 . The root cause is that an anonymous request can trigger an on-demand download of action code from the maintainer's Gi...
EUVD-2026-87780
Joomla Extension - lomart.fr - Unauthenticated remote code installation in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.0.29...
CVE-2026-97163: Improper Limitation of a Pathname to a Restricted Directory
Joomla Extension - lomart.fr - Unauthenticated remote code installation in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.0.29...
PT-2026-99398
Name of the Vulnerable Software and Affected Versions Joomla UP plugin versions 5.0.0 through 5.2.0 Joomla UP plugin versions 6.0.0 through 6.0.29 Description An issue exists that allows unauthenticated remote code installation within the Joomla UP plugin extension. Recommendations At the moment,...
Malicious code in tap-wordpress (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 53e2ce83230d861f844469c970eee52f778a63852ef04de9007e9bb8f883256e Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...
MAL-2026-842 Malicious code in amplify-python-logging (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 2e12fee1c4154d81de6e4575af21aa6a760da4f5694746264a2de50e2c5782fe Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...
EUVD-2020-18493
Malware in sbrugna...
CVE-2021-41033
In all released versions of Eclipse Equinox, at least until version 4.21 September 2021, installation can be vulnerable to man-in-the-middle attack if using p2 repos that are HTTP; that can then be exploited to serve incorrect p2 metadata and entirely alter the local installation, particularly by...
MAL-2025-2610 Malicious code in @agateh/solana-headless-adapter-base (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 45f33c6ddd09439d626d2670e9e3fc38e407415cf98fb2f96b5f3d4d2dda52dc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in wehaveatogether (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 2b9ca08882196c44c275e3690b4f186ef0df469070563abbd190b8194475023a Packages that might be part of testing for pentesting / malicious activity / joy, with suspicious activity that does not present any real harm. --- Category:...
MAL-2024-12268 Malicious code in expkg-am (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 36b7980049911172764372f2e4d93b74e1ff019b9c6f9860be544e91f7f79a28 Packages that might be part of testing for pentesting / malicious activity / joy, with suspicious activity that does not present any real harm. --- Category:...
CVE-2024-2307
A flaw was found in osbuild-composer. A condition can be triggered that disables GPG verification for package repositories, which can expose the build phase to a Man-in-the-Middle attack, allowing untrusted code to be installed into an image being built...
CVE-2024-2307: Improper Verification of Cryptographic Signature
A flaw was found in osbuild-composer. A condition can be triggered that disables GPG verification for package repositories, which can expose the build phase to a Man-in-the-Middle attack, allowing untrusted code to be installed into an image being built...
Cisco Unified IP Phones 7900 Series Unsigned Code Installation (CVE-2011-1637)
Cisco Unified IP Phones 7900 devices aka TNP phones with software before 9.2.1 do not properly verify signatures for software images, which allows local users to gain privileges via a crafted image, aka Bug ID CSCtn65962. This plugin only works with Tenable.ot. Please visit...
