Malicious code in svelte-cls-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f9320122ff01bf30c3bd8f4dfb1f84ff1f83fc40e1c0f0e945ca75823c79b810 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-14511 Malicious code in svelte-cls-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f9320122ff01bf30c3bd8f4dfb1f84ff1f83fc40e1c0f0e945ca75823c79b810 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

DEBIAN-CVE-2026-56705

Adminer before 5.4.3 fails to sanitize the server field before constructing a PDO DSN string, allowing unauthenticated attackers to inject ODBC parameters via semicolons. Attackers can inject TraceFile and TraceOn parameters to write PHP code to the web root, achieving remote code execution when...

DEBIAN-CVE-2026-56706

Adminer before 5.4.3 uses a CSRF token scheme that transmits both the XOR mask and the masked value in every token format rand XOR secret:rand, allowing anyone who observes a single CSRF token e.g., via network sniffing, log files, Referrer header, or XSS to recover the session secret with a sing...

DEBIAN-CVE-2026-56703

Adminer before 5.4.3 contains a remote code execution vulnerability in SQLite query handling where VACUUM INTO is not blocked despite ATTACH restrictions. Authenticated attackers can execute VACUUM INTO to write PHP code to arbitrary file paths and execute commands on the server...

DEBIAN-CVE-2026-56702

Adminer versions before 5.4.3 contain an unrestricted file upload vulnerability in the AdminerFileUpload plugin that allows authenticated users to upload PHP files by exploiting a permissive default extension allowlist. Attackers can upload PHP webshells to columns ending in path and execute...

CVE-2024-4577

CVE-2024-4577 Sicherheitslücken-Prüfer Dieses Skript dient zur Überprüfung auf die Sicherheitslücke CVE-2024-4577, die durch die Ausnutzung bestimmter PHP-Konfigurationen die Ausführung von beliebigem Code aus der Ferne ermöglicht. Es sendet eine POST-Anfrage an bestimmte Endpunkte einer Liste vo...

Evilginx-Phishing-Infra-Setup

Einrichtungsleitfaden für Phishing-Engagement-Infrastruktur Hinweis: Dies sind Kopien meiner persönlichen Notizen. Bitte verlasse dich nicht vollständig darauf. Inhaltsverzeichnis Blogs/Vorträge Red Team/Phishing-Infra-Automatisierung Techniken zum Kauf und zur Kategorisierung von Domains...

CheeseTools

CheeseTools Questo repository è stato creato basandosi sul già esistente MiscTool, quindi un grande ringraziamento a rasta-mouse per averli rilasciati e per avermi dato la giusta motivazione per lavorarci. CheeseExec Esecuzione comandi / Movimento laterale tramite funzionalità simile a PsExec. De...

jackhammer

Jackhammer: One Security vulnerability assessment/management tool to solve all the security team problems. What is Jackhammer? Jackhammer is a collaboration tool built with an aim of bridging the gap between Security team vs dev team, QA team and being a facilitator for TPM to understand and trac...

cherrybomb

cherrybombv1.0.png Keine halbfertigen API-Spezifikationen mehr 💣 Was ist Cherrybomb? Cherrybomb ist ein CLI-Tool, geschrieben in Rust, das hilft, fehlerhafte Code-Implementierungen frühzeitig in der Entwicklung zu verhindern. Es funktioniert durch das Validieren und Testen Ihrer API mit einer...

jsmon

JSMon JSMon - JavaScript Change Monitor for BugBounty Using this script, you can configure a number of JavaScript files on websites that you want to monitor. Everytime you run this script, these files will be fetched and compared to the previously fetched version. If they have changed, you will b...

EUVD-2026-65591

There is a memory corruption vulnerability recently discovered in NI LabVIEW that may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted VI. This vulnerability affects NI LabVIEW 2026 Q3 26.3.0 and...

CVE-2026-64202 Out-of-Bounds Read Vulnerability in NI LabVIEW when loading VI

There is a memory corruption vulnerability recently discovered in NI LabVIEW that may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted VI. This vulnerability affects NI LabVIEW 2026 Q3 26.3.0 and...

CVE-2026-64202

CVE-2026-64202 is an out-of-bounds read memory corruption vulnerability in NI LabVIEW triggered when loading a VI (Virtual Instrument) file. Successful exploitation requires a user to open a specially crafted VI , making it a local attack with required user interaction. The impact ranges from inf...

CVE-2026-64202 Out-of-Bounds Read Vulnerability in NI LabVIEW when loading VI

There is a memory corruption vulnerability recently discovered in NI LabVIEW that may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted VI. This vulnerability affects NI LabVIEW 2026 Q3 26.3.0 and...

CVE-2024-6387

CVE-2024-6387 - PoC 📜 Descrizione Nota: questo script è un prototipo PoC veloce; potrebbero verificarsi alcuni errori e bug. Testato su: Kali Linux, ParrotSec, Ubuntu 22.04 Vulnerabilità di esecuzione di codice remoto non autenticato nel server OpenSSH È stata trovata una race condition nel gesto...

Pentest-Windows

Pentest-Windows11 v3.2 The First Windows Penetration Testing Environment on Mac M Chips 中文文档 | English README 📖 Project Overview 📝 System Introduction This environment aims to provide a ready-to-use Windows penetration testing environment. Reposting is welcome. Please indicate the original author...

wifite2

Wifite Este repositório é uma reescrita completa do wifite, um script Python para auditoria de redes sem fio. O Wifite executa as ferramentas de auditoria sem fio existentes para você. Pare de memorizar argumentos e opções de comandos! O Wifite foi projetado para usar todos os métodos conhecidos...

libsodium

Sodium is an easy-to-use software library that provides a wide range of cryptographic operations including encryption, decryption, digital signatures, and secure password hashing. It is a portable, cross-compilable, installable, and packageable fork of NaCl. While maintaining API compatibility,...