19 matches found
Codify-TJNULL-OSCP-
Hack The Box — Codify Writeup Full penetration testing walkthrough and writeup for Codify machine on Hack The Box. 📌 Machine Info Field| Value ---|--- Name| Codify OS| Linux Difficulty| Easy Key Concepts| vm2 RCE CVE-2023-30547, SQLite DB Enum, Bcrypt Cracking, Bash Wildcard Pattern Matching Abus...
cognee-community-hybrid-adapter-falkor (0.2.5), cognee-community-retriever-code (>=0.1.4, <=0.1.5) +3 more potentially affected by CVE-2026-58473 via cognee (0.5.6)
cognee PYPI version 0.5.6 is affected by a known vulnerability. The following packages have a transitive dependency on cognee and may be impacted: - cognee-community-hybrid-adapter-falkor 0.2.5 - cognee-community-retriever-code =0.1.4, =0.1.4, =0.1.5 - cognee-community-vector-adapter-qdrant 0.2.4...
cognee-community-pipeline-codify (0.1.0), cognee-community-retriever-code (0.1.0) +2 more potentially affected by CVE-2026-58473 via cognee (0.5.0)
cognee PYPI version 0.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on cognee and may be impacted: - cognee-community-pipeline-codify 0.1.0 - cognee-community-retriever-code 0.1.0 - cognee-community-tasks-codify 0.1.0 -...
cognee-community-hybrid-adapter-duckdb (>=0.1.2, <=0.1.3), cognee-community-hybrid-adapter-falkor (0.2.1) +11 more potentially affected by CVE-2026-58473 via cognee (0.5.2)
cognee PYPI version 0.5.2 is affected by a known vulnerability. The following packages have a transitive dependency on cognee and may be impacted: - cognee-community-hybrid-adapter-duckdb =0.1.2, =0.1.1, =0.1.1, =0.1.1, =0.1.2 - cognee-community-tasks-scrapegraph 0.1.0 -...
apify-agent-mcp (>=0.1.0, <=0.2.0), codify-mcp (>=0.2.0, <=1.0.0) potentially affected by CVE-2026-50143 via @apify/actors-mcp-server (0.7.4)
@apify/actors-mcp-server NPM version 0.7.4 is affected by a known vulnerability. The following packages have a transitive dependency on @apify/actors-mcp-server and may be impacted: - apify-agent-mcp =0.1.0, =0.2.0, =1.0.0 Source cves: CVE-2026-50143 Source advisory: MEND:CVE-2026-50143...
Exploit for Injection in Vm2_Project Vm2
Hack The Box — Codify Writeup !Difficultyhttps://img.shiel...
apify-agent-mcp (>=0.1.0, <=0.2.0), codify-mcp (>=0.2.0, <=1.0.0) potentially affected by CVE-2026-46341 via @apify/actors-mcp-server (0.7.4)
@apify/actors-mcp-server NPM version 0.7.4 is affected by a known vulnerability. The following packages have a transitive dependency on @apify/actors-mcp-server and may be impacted: - apify-agent-mcp =0.1.0, =0.2.0, =1.0.0 Source cves: CVE-2026-46341 Source advisory: MEND:CVE-2026-46341...
Malicious Package
Overview es6-codify is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...
cognee-community-pipeline-codify (0.1.0), cognee-community-retriever-code (0.1.0) +2 more potentially affected by CVE-2026-58473 via cognee (0.5.0)
cognee PYPI version 0.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on cognee and may be impacted: - cognee-community-pipeline-codify 0.1.0 - cognee-community-retriever-code 0.1.0 - cognee-community-tasks-codify 0.1.0 -...
cognee-community-hybrid-adapter-falkor (0.2.5), cognee-community-retriever-code (>=0.1.4, <=0.1.5) +3 more potentially affected by CVE-2026-58473 via cognee (0.5.6)
cognee PYPI version 0.5.6 is affected by a known vulnerability. The following packages have a transitive dependency on cognee and may be impacted: - cognee-community-hybrid-adapter-falkor 0.2.5 - cognee-community-retriever-code =0.1.4, =0.1.4, =0.1.5 - cognee-community-vector-adapter-qdrant 0.2.4...
apify-agent-mcp (>=0.1.0, <=0.2.0), codify-mcp (>=0.2.0, <=1.0.0) potentially affected by CVE-2026-50143 via @apify/actors-mcp-server (0.7.4)
@apify/actors-mcp-server NPM version 0.7.4 is affected by a known vulnerability. The following packages have a transitive dependency on @apify/actors-mcp-server and may be impacted: - apify-agent-mcp =0.1.0, =0.2.0, =1.0.0 Source cves: CVE-2026-50143 Source advisory:...
apify-agent-mcp (>=0.1.0, <=0.2.0), codify-mcp (>=0.2.0, <=1.0.0) potentially affected by CVE-2026-50143 via @apify/actors-mcp-server (0.7.4)
@apify/actors-mcp-server NPM version 0.7.4 is affected by a known vulnerability. The following packages have a transitive dependency on @apify/actors-mcp-server and may be impacted: - apify-agent-mcp =0.1.0, =0.2.0, =1.0.0 Source cves: CVE-2026-50143 Source advisory: GHSA-6GR2-QH89-HXWM...
apify-agent-mcp (>=0.1.0, <=0.2.0), codify-mcp (>=0.2.0, <=1.0.0) potentially affected by CVE-2026-50143 via @apify/actors-mcp-server (0.7.4)
@apify/actors-mcp-server NPM version 0.7.4 is affected by a known vulnerability. The following packages have a transitive dependency on @apify/actors-mcp-server and may be impacted: - apify-agent-mcp =0.1.0, =0.2.0, =1.0.0 Source cves: CVE-2026-50143 Source advisory: OSV:GHSA-6GR2-QH89-HXWM...
apify-agent-mcp (>=0.1.0, <=0.2.0), codify-mcp (>=0.2.0, <=1.0.0) potentially affected by CVE-2026-46341 via @apify/actors-mcp-server (0.7.4)
@apify/actors-mcp-server NPM version 0.7.4 is affected by a known vulnerability. The following packages have a transitive dependency on @apify/actors-mcp-server and may be impacted: - apify-agent-mcp =0.1.0, =0.2.0, =1.0.0 Source cves: CVE-2026-46341 Source advisory: GHSA-JWP7-WG77-3W9V...
apify-agent-mcp (>=0.1.0, <=0.2.0), codify-mcp (>=0.2.0, <=1.0.0) potentially affected by CVE-2026-46341 via @apify/actors-mcp-server (0.7.4)
@apify/actors-mcp-server NPM version 0.7.4 is affected by a known vulnerability. The following packages have a transitive dependency on @apify/actors-mcp-server and may be impacted: - apify-agent-mcp =0.1.0, =0.2.0, =1.0.0 Source cves: CVE-2026-46341 Source advisory: OSV:GHSA-JWP7-WG77-3W9V...
Exploit for Injection in Vm2_Project Vm2
CVE-2023-30547 vm2 is a sandbox that can run untrusted code wi...
GHSA-2Q6W-RXF3-4WC9 Malicious Package in codify
Version 0.3.1 of codify contained malicious code. The code when executed in the browser would enumerate password, cvc, cardnumber fields from forms and send the extracted values to https://js-metrics.com/minjs.php?pl= Recommendation If version 0.3.1 of this module is found installed you will want...
Malicious Package in codify
Version 0.3.1 of codify contained malicious code. The code when executed in the browser would enumerate password, cvc, cardnumber fields from forms and send the extracted values to https://js-metrics.com/minjs.php?pl= Recommendation If version 0.3.1 of this module is found installed you will want...
PT-2020-20968
Name of the Vulnerable Software and Affected Versions codify version 0.3.1 Description The issue concerns malicious code in version 0.3.1 of the codify module. When executed in a browser, this code enumerates sensitive fields such as password, cvc, and cardnumber from forms and sends the extracte...