Malicious code in vellutts (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 a36ed984afc7ca3475fe4852ef18158dc5569b049a35f4a23fd9260dc342c795 This campaign consists of similar loader packages, which provide executing code from a given URL. While they do not contain the malicious payload and the usage...

Malicious code in grommatts (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 19b2f82a5bea773c2f47efa91e029f047a508d4c8d117eb102728056d0ac5bc3 This campaign consists of similar loader packages, which provide executing code from a given URL. While they do not contain the malicious payload and the usage...

Malicious code in zennittts (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 8a405494d56b12c5eabd44355e1b97dd09406522e9e2211193e6df2123592dda This campaign consists of similar loader packages, which provide executing code from a given URL. While they do not contain the malicious payload and the usage...

Malicious code in aurenatts (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 ecc8915a04d9fbab4ecc0437f5eb05357d2e63bc3d30f629d67c7b3eb2c98eeb This campaign consists of similar loader packages, which provide executing code from a given URL. While they do not contain the malicious payload and the usage...

Malicious code in phonoviatts (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 0ad248ff66471a497d4c3a6d16384648636101a927c384cd4870adf920eced97 This campaign consists of similar loader packages, which provide executing code from a given URL. While they do not contain the malicious payload and the usage...

MAL-2026-18143 Malicious code in phonoviatts (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 0ad248ff66471a497d4c3a6d16384648636101a927c384cd4870adf920eced97 This campaign consists of similar loader packages, which provide executing code from a given URL. While they do not contain the malicious payload and the usage...

Malicious code in voxilaratts (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 39377b8b4c1d6d3243cb82f3e86bdc38869bf56e3800bf02ae817a1555ddb11b This campaign consists of similar loader packages, which provide executing code from a given URL. While they do not contain the malicious payload and the usage...

Malicious code in brummatts (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 605ea05e6c6344e7ddfb713297d7689ee050288b74ecbf0821039603dc3cdd45 This campaign consists of similar loader packages, which provide executing code from a given URL. While they do not contain the malicious payload and the usage...

Malicious code in melcuratts (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 8bd7e6eda0ded5ef0e82eac489faca560422a8b8e46fd9c8d9b8215d9e89e6ba This campaign consists of similar loader packages, which provide executing code from a given URL. While they do not contain the malicious payload and the usage...

Malicious code in quillonatts (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 6297f0fae1c96dd5abefc4dd7f67a51ee7a737d1bb437fcffaed067d44d637a4 This campaign consists of similar loader packages, which provide executing code from a given URL. While they do not contain the malicious payload and the usage...

Malicious code in shellgrip (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 9e23472f83d676f848fc137b96283dd8819ee900b3f371400aa8263bb4f70339 This campaign consists of similar loader packages, which provide executing code from a given URL. While they do not contain the malicious payload and the usage...

Malicious code in batchspar (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 76a342534dec5ecb047459f9123ae99c1b91ef8e84305854529a260b8d2a3acd This campaign consists of similar loader packages, which provide executing code from a given URL. While they do not contain the malicious payload and the usage...

Malicious code in crenelatts (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 4ccd88fc743d2fd427510543af873fff8780bb4ec4916a565afb729315f28068 This campaign consists of similar loader packages, which provide executing code from a given URL. While they do not contain the malicious payload and the usage...

CVE-2026-76305

Splunk SOAR versions below 8.7.0 are vulnerable to an improper access control issue (CWE-862) where the system fails to verify permissions before returning an app archive. An authenticated user without the necessary permissions to view apps can download these archives, potentially exposing propri...

CVE-2026-76293

In Splunk Enterprise versions below 10.4.3, 10.2.8, 10.0.11, and 9.4.16, an attacker with the edit_manager_xml capability can achieve Remote Code Execution (RCE) . The vulnerability exists because Splunk Web evaluates user-controlled expressions from Manager XML without sufficient syntax restrict...

CVE-2026-76293 Remote Code Execution (RCE) through Splunk Web Manager Extensible Markup Language (XML) in Splunk Enterprise

In Splunk Enterprise versions below 10.4.3, 10.2.8, 10.0.11, and 9.4.16, a user that holds a role with the editmanagerxml capability could execute arbitrary operating-system commands using the permissions of the user account running Splunk Enterprise by opening the affected configuration in the...

[slackware-security] php

New php packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: extra/php80/php80-8.0.30-i586-2slack15.0.txz: Rebuilt. This update fixes the following critical remote code execution flaw: Avoid state corruption via...

CVE-2018-6537.RCE

CVE-2018-6537 The exploit targets Sync Breeze running on Windows 10 x86, build: 16299 , affecting version 10.4.18 , where an unauthenticated attacker can perform a SEH overflow via a TCP-connection, resulting in remote code execution. This exploit assumes all security mitigations are disabled e.g...

CVE-2017-14980.RCE

CVE-2017-14980 The exploit targets Sync Breeze Enterprise running on Windows 10 x86, build: 16299 , affecting version 10.0.28 , where an unauthenticated attacker can perform a buffer overflow via an HTTP-request body , resulting in arbitrary code execution. This exploit assumes all security...

CVE-2025-55182-Test-Server

CVE-2025-55182-Test-Server Play with react2shell in a safe environment! Quick Start Clone the repo git clone https://github.com/CharlesTheGreat77/CVE-2025-55182-Test-Server cd CVE-2025-55182-Test-Server Run the docker file docker compose up --build -d PoC curl -s -X POST http://localhost:3000/adf...