1904 matches found
DesckVB-RAT
DesckVB RAT v2.9 — Modular .NET RAT, Multi-Stage Delivery & Plugin Ecosystem Toolchain Linkage to “Pjoao1578” Author: ShadowOpCode X/Twitter: https://x.com/ShadowOpCode This repository accompanies a full technical report documenting an active malware ecosystem centered around DesckVB RAT , a...
safer-dependencies
Dependencias más seguras para Claude Code Cuando los asistentes de codificación con IA como Claude añaden paquetes a tu proyecto, a menudo eligen la versión que les suena bien, sin comprobar si tiene vulnerabilidades de seguridad conocidas, si el paquete sigue mantenido activamente o si el nombre...
guarddog
GuardDog GuardDog is a CLI tool that identifies malicious PyPI and npm packages, Go modules, Rust crates, RubyGems, GitHub actions, or VSCode extensions. It runs static analysis on package source code through YARA rules and analyzes package metadata to detect supply chain attacks. What makes...
better-auth
Discord · Website · Issues Better Auth Better Auth is a framework-agnostic authentication and authorization framework for TypeScript. It provides a comprehensive set of features out of the box and includes a plugin ecosystem that simplifies adding advanced functionalities with minimal code in a...
ore-mal-pkg-inspector
OreWatch Detección de Paquetes Maliciosos Multi-Ecosistema y Escáner de Seguridad en la Cadena de Suministro Una herramienta de seguridad de grado de producción para detectar paquetes maliciosos y amenazas en la cadena de suministro en los ecosistemas npm, PyPI, Maven, RubyGems, Go y Cargo...
bomber
bomber is an application that scans SBOMs for security vulnerabilities. Overview So you've asked a vendor for an Software Bill of Materials SBOM for one of their closed source products, and they provided one to you in a JSON file... now what? The first thing you're going to want to do is see if a...
ransomware_map
Orange Cyberdefense CERT - Ransomware Ecosystem Map Latest = version 29 January 2026 - incoming Map visualizing relationships and timelines associated to +300 ransomware groups, between 2015 and 2026. Hope this helps! World Watch team - Global CERT Orange Cyberdefense All rights reserved...
serverless
Website • Documentation • X / Twitter • Community Slack • Forum The Serverless Framework – Makes it easy to use AWS Lambda and other managed cloud services to build applications that auto-scale, cost nothing when idle, and result in radically low maintenance. The Serverless Framework is a...
bigint-buffer-safe
bigint-buffer-safe Sustituto directo seguro y en JavaScript puro para bigint-buffer. Corrige CVE-2025-3194 CVSS 7.5, desbordamiento de búfer / DoS. Cero dependencias. Sin enlaces nativos. Funciona en Node.js y navegadores. ¿Por qué existe? El paquete original bigint-buffer tiene una vulnerabilida...
CocoaPods-RCE_CVE-2024-38366
CocoaPods-RCE Este repositorio incluye un análisis un poco más profundo del proceso de investigación y las ideas detrás de la vulnerabilidad RCE encontrada al investigar y romper el CocoaPods Package Manager. La publicación del blog con la investigación se puede leer aquí:...
confused
Confused Una herramienta para verificar espacios de nombres libres persistentes para nombres de paquetes privados referenciados en la configuración de dependencias para Python pypi requirements.txt, JavaScript npm package.json, PHP composer composer.json o MVN maven pom.xml. ¿De qué se trata todo...
OreNPMGuard
OreNPMGuard - Escáner de Paquetes Shai-Hulud Versión 2.0.0 - Detección Shai-Hulud 2.0 y Sistema de Prevención Mejorado Una herramienta de seguridad para detectar paquetes npm comprometidos en los ataques a la cadena de suministro Shai-Hulud septiembre de 2025 original y Shai-Hulud 2.0 noviembre d...
Reposilite >= 3.3.0, < 3.5.12 - Arbitrary File Read
Reposilite is an open source, lightweight and easy-to-use repository manager for Maven based artifacts in JVM ecosystem. Reposilite v3.5.10 is affected by an Arbitrary File Read vulnerability via path traversal while serving expanded javadoc files. Reposilite has addressed this issue in version...
xwiki__xwiki-commons_CVE-2023-29528_14-9-rc-1
XWiki Commons XWiki Commons are technical libraries common to several other top level XWiki projects. These libraries can be used by projects outside of the XWiki ecosystem, are generic and not related to the wiki domain. XWiki Platform, XWiki Commons and XWiki Rendering are part of the XWiki.org...
Presentations
Presentations 2025 CodeBlue 2025 - 18th to 19th November 2025 AI Accelerated Exploiting: Compromising MTE Enabled Pixel from DSP Coprocessor by PAN Zhenpeng & Billy JHENG Bing Jhong Dancing with Exynos Coprocessor: Pwning Samsung for fun and “profit” by Muhammad Ramdhan, PAN Zhenpeng & Billy JHEN...
GHSA-JP53-MHQP-8XCG vulnerabilities
Vulnerabilities for packages: open-webui...
katoolin3
katoolin3 Katoolin3 brings all programs available in Kali Linux to Debian and Ubuntu. Description This program is a port of katoolin from LionSec to python3. Katoolin3 offers several improvements over katoolin: Up to date packages The old katoolin uses an outdated package list. Katoolin3 always...
GHSA-87CJ-725F-6HR5 vulnerabilities
Vulnerabilities for packages: linux-qemu-melange...