166 matches found
lazyrecon
| | | |/ | /| | | | / / |/ | \ | | | / / | | | | | | / | | | ||\ |/ \ || ||/|| |v2 |/ Lazyrecon v2 is a subdomain discovery tool that finds and resolves valid subdomains then performs SSRF/LFI/SQLi fuzzing, brute-force and port scanning. It has a simple modular architecture and is optimized...
poc_monitor
pocmonitor CVE-2024-49112의 POC를 찾는 짧은 스크래퍼 4시간마다 스크립트를 실행하도록 cron 작업을 설정하면 업데이트가 유지됩니다. 알림은 사용자 지정할 수 있지만 Discord 웹훅을 사용하여 Discord 채널에 알림을 보냈습니다. 0 /4 cd /root/monitorscript && /usr/bin/python3 pocmonitor.py /var/log/pocmonitor/pocmonitor.log 2&1 디버그 설정 포함: cd /root/monitorscript &&...
ThreatIntelligenceDiscordBot
脅威インテリジェンス Discordボット vx-underground脅威インテリジェンスDiscordボットは、さまざまなクリアネットドメイン、ランサムウェア脅威アクタードメイン、Telegramチャンネルから更新情報を取得します。このボットは1800秒間隔で更新をチェックします（Telegramボットは除く。これはリアルタイムで取得されます）。 セットアップしたくない？ この脅威インテリジェンスボットは現在Discord上で稼働中です。 Python 3.10 64bitで記述 WindowsまたはLinuxで動作可能 Discord Webhookが必要...
CVE-2025-30208
CVE-2025-30208 이 저장소는 URL 목록에서 CVE-2025-30208을 탐지하고 스캔하는 과정을 자동화하는 Bash 스크립트가 포함되어 있습니다. 스크립트는 실행 상태를 추적하기 위해 Discord 알림을 통합합니다. 특징 detectvite.py를 실행하여 URL 목록에서 Vite 서버를 식별합니다. 식별된 Vite 서버가 포함된 hosts.txt 파일을 생성합니다. scanvite.py를 실행하여 탐지된 CVE-2025-30208을 스캔합니다. 스크립트 실행 시작 및 완료 시 Discord 알림을 전송합니다...
MAL-2026-16346 Malicious code in rrs (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78c488c5d20c788e88c2d4f0a0cb1eb03317bc71edb05964adad62241fd1295e On launch of the rrs CLI, a background thread captures a full-screen screenshot via mss and POSTs the image together with hostname, username,...
Malicious code in rrs (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78c488c5d20c788e88c2d4f0a0cb1eb03317bc71edb05964adad62241fd1295e On launch of the rrs CLI, a background thread captures a full-screen screenshot via mss and POSTs the image together with hostname, username,...
CVE-2026-54544 Fireshare has unauthenticated SSRF via missing login_required on webhook test endpoints
Fireshare facilitates self-hosted media and link sharing. Prior to version 1.6.16, two API endpoints that trigger outbound HTTP requests are missing the @loginrequired decorator. An unauthenticated attacker can call POST /api/test-discord-webhook or POST /api/test-webhook and cause the Fireshare...
CVE-2026-54544 Fireshare has unauthenticated SSRF via missing login_required on webhook test endpoints
Fireshare facilitates self-hosted media and link sharing. Prior to version 1.6.16, two API endpoints that trigger outbound HTTP requests are missing the @loginrequired decorator. An unauthenticated attacker can call POST /api/test-discord-webhook or POST /api/test-webhook and cause the Fireshare...
MAL-2026-16218 Malicious code in tol8t (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c33f4cd3c64d0ca0eb65dc5947fce3700c94ec8bea6083e63da1e6ba31321e27 package.json declares preinstall and postinstall lifecycle hooks that use wget to POST installer host identifiers to a hardcoded Discord webhook at...
Malicious code in tol8t (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c33f4cd3c64d0ca0eb65dc5947fce3700c94ec8bea6083e63da1e6ba31321e27 package.json declares preinstall and postinstall lifecycle hooks that use wget to POST installer host identifiers to a hardcoded Discord webhook at...
CVE-2026-58502
githubtoplanguages generates a user's top GitHub languages as an SVG. The .github/workflows/discord-issue.yml workflow runs when an issue is opened or closed and interpolates github.event.issue.title directly into the Bash assignment for ISSUETITLE before shell parsing. An issue title containing...
EUVD-2026-78911
githubtoplanguages generates a user's top GitHub languages as an SVG. The .github/workflows/discord-issue.yml workflow runs when an issue is opened or closed and interpolates github.event.issue.title directly into the Bash assignment for ISSUETITLE before shell parsing. An issue title containing...
CVE-2026-58502
githubtoplanguages , a tool that renders a user's top GitHub languages as an SVG, is affected by a command injection in its .github/workflows/discord-issue.yml GitHub Actions workflow. The workflow interpolates github.event.issue.title directly into a Bash assignment before shell parsing, so any ...
PT-2026-92173
githubtoplanguages generates a user's top GitHub languages as an SVG. The .github/workflows/discord-issue.yml workflow runs when an issue is opened or closed and interpolates github.event.issue.title directly into the Bash assignment for ISSUE TITLE before shell parsing. An issue title containing...
CVE-2026-54544: Server-Side Request Forgery (SSRF)
Fireshare facilitates self-hosted media and link sharing. Prior to version 1.6.16, two API endpoints that trigger outbound HTTP requests are missing the @loginrequired decorator. An unauthenticated attacker can call POST /api/test-discord-webhook or POST /api/test-webhook and cause the Fireshare...
MAL-2026-16121 Malicious code in websetup (PyPI)
[email protected] is a single module whose only function, setup.settext=None, filepath=None in websetup/sender.py, POSTs the given text and the contents of any local file path to a hardcoded Discord webhook id 1546817174411288617; the name Discord returns for it is "backdoor" and swallows every...
Malicious code in websetup (PyPI)
[email protected] is a single module whose only function, setup.settext=None, filepath=None in websetup/sender.py, POSTs the given text and the contents of any local file path to a hardcoded Discord webhook id 1546817174411288617; the name Discord returns for it is "backdoor" and swallows every...
Malicious code in secret-key-totp (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f662164281fe877686c7eac93e0e6d068ccb16f8bff1b44029b1ace655a76b6 [email protected] declares a postinstall hook node./index.js --setup that executes a credential stealer and dropper on install, and the same...
CVE-2026-54682 DiscordChatExporter: Stored XSS in HTML export when markdown formatting is disabled
DiscordChatExporter saves Discord chat logs to a file. Prior to 2.47.2, HTML exports generated with markdown formatting disabled pass attacker-controlled content through FormatMarkdownAsync and FormatEmbedMarkdownAsync in DiscordChatExporter.Core/Exporting/MessageGroupTemplate.cshtml and render i...
CVE-2026-54682: Improper Neutralization of Input During Web Page Generation
DiscordChatExporter saves Discord chat logs to a file. Prior to 2.47.2, HTML exports generated with markdown formatting disabled pass attacker-controlled content through FormatMarkdownAsync and FormatEmbedMarkdownAsync in DiscordChatExporter.Core/Exporting/MessageGroupTemplate.cshtml and render i...