LdrShuffle

LdrShuffle Stealthy code execution via modification of the EntryPoint of loaded modules at runtime. Summary Windows processses have various modules loaded at runtime. Each of theses modules has a DllMain function defined, which will be invoked on process or thread creation/destruction four possib...

CVE-2023-6019

CVE-2023-6019 - Anyscale Ray Dashboard Unauthenticated RCE PoC exploit for CVE-2023-6019 — Remote Code Execution via unauthenticated Ray Dashboard Jobs API. Made by oguiii Description Anyscale Ray is an open-source framework for distributed ML/AI workloads. Versions prior to 2.6.4 expose a Jobs...

Exploit for Server-Side Request Forgery in Anyscale Ray

CVE-2023-48022 — Anyscale Ray — RCE через job submission API...

CVE-2026-119136 Wasmtime 42.0.0 before 48.0.6 and 49.0.0 before 49.0.3 Async-Entrypoint Enforcement Bypass

Wasmtime 42.0.0 before 48.0.6 and 49.0.0 before 49.0.3 contains insufficient checks in Store when mixing async-style and sync-style WebAssembly calls. Embedders re-entering WebAssembly via sync APIs from host functions called asynchronously can trigger runtime panics or unsound cross-thread...

CVE-2026-119136

The Wasmtime runtime (versions 42.0.0 before 48.0.6 and 49.0.0 before 49.0.3 ) contains insufficient checks in the Store component when mixing async-style and sync-style WebAssembly calls. This vulnerability allows embedders re-entering WebAssembly via sync APIs from host functions called asynchr...

CVE-2026-119136 Wasmtime 42.0.0 before 48.0.6 and 49.0.0 before 49.0.3 Async-Entrypoint Enforcement Bypass

Wasmtime 42.0.0 before 48.0.6 and 49.0.0 before 49.0.3 contains insufficient checks in Store when mixing async-style and sync-style WebAssembly calls. Embedders re-entering WebAssembly via sync APIs from host functions called asynchronously can trigger runtime panics or unsound cross-thread...

Apple Safari jsToWasm IC Entrypoint Type Confusion Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apple Safari. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the implementation of...

Malware in @k18k/entrypoint-sdk-darwin-arm64

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2026-18243 Malicious code in @k18k/entrypoint-sdk-darwin-arm64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d737b7390bb1f6e91bafe18d3f037a410e18607f3e60e1a92b24f81ccea890ed @k18k/entrypoint-sdk-darwin-arm64 is a platform-specific native artifact package darwin-arm64 variant typical of the optionalDependencies pattern use...

Malicious code in @k18k/entrypoint-sdk-darwin-arm64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d737b7390bb1f6e91bafe18d3f037a410e18607f3e60e1a92b24f81ccea890ed @k18k/entrypoint-sdk-darwin-arm64 is a platform-specific native artifact package darwin-arm64 variant typical of the optionalDependencies pattern use...

Malware in @k18k/entrypoint-sdk-linux-x64

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2026-18245 Malicious code in @k18k/entrypoint-sdk-linux-x64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector daa27c796b86115cf9b0b7113f614ec7e53edb15e4b03b2ec52c10b4a2fb23a2 Package @k18k/[email protected] is a linux-x64 platform-specific companion artifact, consistent with the common npm pattern of...

Malicious code in @k18k/entrypoint-sdk-linux-x64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector daa27c796b86115cf9b0b7113f614ec7e53edb15e4b03b2ec52c10b4a2fb23a2 Package @k18k/[email protected] is a linux-x64 platform-specific companion artifact, consistent with the common npm pattern of...

Malicious code in @k18k/entrypoint-sdk-darwin-x64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd94f9aefc7090d1260bb8123fd1bd78f4fd973b9d00c2423fbc13ea9799699b Package @k18k/[email protected] is a darwin-x64 platform-specific sub-package, following the standard npm pattern for distributing...

Malware in @k18k/entrypoint-sdk-darwin-x64

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2026-18244 Malicious code in @k18k/entrypoint-sdk-darwin-x64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd94f9aefc7090d1260bb8123fd1bd78f4fd973b9d00c2423fbc13ea9799699b Package @k18k/[email protected] is a darwin-x64 platform-specific sub-package, following the standard npm pattern for distributing...

Malicious Package

Overview @k18k/entrypoint-sdk-darwin-x64 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and th...

Malicious Package

Overview @k18k/entrypoint-sdk-linux-x64 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and thi...

Malicious Package

Overview @k18k/entrypoint-sdk-darwin-arm64 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and...

CVE-2026-57146

PraisonAI is a multi-agent teams system. From version 4.5.115 to before version 4.6.61, the published A2U advisory GHSA-f292-66h9-fpmf says unauthenticated A2U event streaming was fixed in praisonai 4.5.115. Current head still exposes the same A2U subscription and event routes without...