wePWNise

wePWNise wePWNise is proof-of-concept Python script which generates VBA code that can be used in Office macros or templates. It was designed with automation and integration in mind, targeting locked down environment scenarios. The tool enumerates Software Restriction Policies SRPs and EMET...

kismet

https://www.kismetwireless.net The Kismet docs can be most easily found and read at the Kismet website The docs repository is at: $ git clone https://www.kismetwireless.net/git/kismet-docs.git and mirrored on Github at: $ git clone https://www.github.com/kismetwireless/kismet-docs...

chart-down

chart-down Download and scan Helm charts for secrets using TruffleHog. Given a Helm repository URL, chart-down fetches the repo index, downloads every chart archive, extracts it, and runs TruffleHog against the contents. Requirements Go 1.19+ TruffleHog on PATH brew install trufflehog Install go...

OWASP-VWAD

OWASP-VWAD 2024-10-26 ⚠️ This repo is being wound down. Future work should be via www-project-vulnerable-web-applications-directory The OWASP Vulnerable Web Applications Directory Project VWAD, https://owasp.org/www-project-vulnerable-web-applications-directory/ is a comprehensive and well...

CVE-2026-77058 Cross-Site Request Forgery (CSRF) in boneIO

boneIO Black is vulnerable to Cross-Site Request Forgery CSRF on all state-changing API endpoints because it lacks CSRF tokens and does not validate Origin or Referer headers. A remote attacker can craft a malicious webpage that, when visited by a user on the internal network, sends cross-origin...

SUSE CVE-2026-98480

In the Linux kernel, the following vulnerability has been resolved: nfc: trf7970a: power down on startup RX gain failure trf7970astartup powers up the device before applying the optional RX gain reduction. If the register read or write fails, it returns without undoing that power-up. Probe's unwi...

Malicious code in avail-able-albu-m-down-load-almanac-tdedm-bajrnj (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6fbfae8c8219b49be917e78b5668d07f23cd264736a397f20286d7219f0aab6c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in down-load-available-zip-now-265533-the-safeway-elhem-xoyofv

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in down-lo-ad-now-zip-mp3-year-of-the-gentleman-8mpja-vdihqg

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in down-load-available-zip-now-42301-gloria-tp7wn-dcxkwl

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in ava-ilable-down-load-mp3-today-157397-polymer-0dwv9-btizmd

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in ava-ilable-down-load-mp3-today-5767-all-eyez-on-me-9vh62-ohwdae (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f7797df85d43924e2e0f8273078fa2d5d7f13d0a9a9737a35f1e3318ab9c6fc4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ava-ilable-down-load-mp3-today-157397-polymer-0dwv9-btizmd (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0de6f2e8761f78435572cd45fcf6c33ce59d7fa48330a3ed734f2e2760c391b8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ava-ilable-down-load-mp3-today-2018-120200-young-sick-camellia-qvg9z-dqpzyh (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 610da12d69e2277db16814fdc159beca04e87a596e0192e8913997d8f510b083 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ava-ilable-down-load-mp3-today-75491-life-after-youth-hfdu7-yzwkck (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ffcae389b13920a2780e75730643b36a8d92334c04c28cc27606fe05521d6865 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in avail-able-albu-m-down-load-almanac-tdedm-bajrnj

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in avail-able-albu-m-down-load-9815-young-americans-vygt4-atskbj

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in ava-ilable-down-load-mp3-today-5767-all-eyez-on-me-9vh62-ohwdae

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2026-17972 Malicious code in ava-ilable-down-load-mp3-today-157397-polymer-0dwv9-btizmd (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0de6f2e8761f78435572cd45fcf6c33ce59d7fa48330a3ed734f2e2760c391b8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-17973 Malicious code in ava-ilable-down-load-mp3-today-2018-120200-young-sick-camellia-qvg9z-dqpzyh (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 610da12d69e2277db16814fdc159beca04e87a596e0192e8913997d8f510b083 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...