tarnish

tarnish tarnish is a static-analysis tool to aid researchers in security reviews of Chrome extensions. It automates much of the regular grunt work and helps you quickly identify potential security vulnerabilities. This tool accompanies the research blog post which can be found here. If you don't...

CVE-2026-100351 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-iam, crossplane-provider-aws-kms-fips, crossplane-provider-aws-mediaconvert-fips, crossplane-provider-aws-networkfirewall-fips, crossplane-provider-aws-route53recoverycontrolconfig, crossplane-provider-azure-operationalinsights,...

CVE-2026-100348 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-iam, crossplane-provider-aws-kms-fips, crossplane-provider-aws-mediaconvert-fips, crossplane-provider-aws-networkfirewall-fips, crossplane-provider-aws-route53recoverycontrolconfig, crossplane-provider-azure-operationalinsights,...

GHSA-MH7X-F8WQ-4JHX vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-iam, crossplane-provider-aws-kms-fips, crossplane-provider-aws-mediaconvert-fips, crossplane-provider-aws-networkfirewall-fips, crossplane-provider-aws-route53recoverycontrolconfig, crossplane-provider-azure-operationalinsights,...

CVE-2026-100347 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-iam, crossplane-provider-aws-kms-fips, crossplane-provider-aws-mediaconvert-fips, crossplane-provider-aws-networkfirewall-fips, crossplane-provider-aws-route53recoverycontrolconfig, crossplane-provider-azure-operationalinsights,...

@adobe/aem-site-template-builder (>=0.1.7, <=2.0.2), @ns3/nx-serverless (>=3.2.2, <=4.1.0) +8 more potentially affected by CVE-2026-80427 via bestzip (>=1.1.3, <=2.2.1)

bestzip NPM version =1.1.3, =0.1.7, =3.2.2, =0.3.0, =0.2.0, =1.0.0, =1.0.0, =1.0.7-6, =1.0.2-1, =0.0.1, =1.0.0, =1.0.2 Source cves: CVE-2026-80427 Source advisory: MEND:CVE-2026-80427...

eventideplugins.elasticbeanstalk.com XSS vulnerability

Vulnerable URL: http://eventideplugins.elasticbeanstalk.com/requestTimedTrial.jsp?productName=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...

AWS Elastic Beanstalk Code Execution

Form:http://en.wooyun.org/bugs/wooyun-2013-040 Abstract£º AWS Elastic Beanstalk is an even easier way for you to quickly deploy and manage applications in the AWS cloud. elasticbeanstalk subdomain exists Struts2 code execution . Details£º poc return /ok:...