MAL-2026-14522 Malicious code in syntaxerror-package-12345 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 ede434cf61641064a49939821778e511c3fcf8afab7e443582b8b103e13171d9 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

heartbleed.js

heartbleed.js Verificação do bug Heartbleed do openssl para Node.js resultado da verificação root@kitploit: "code":0,"data":"1803021003020ff0d8030253435b909d9b720bbc0cbc2b92a84897cfbd3904cc160a8503909..." code: 0 vulnerável. vulnerável code: 1 não vulnerável. não vulnerável Demonstração...

MilkSad-Mnemonic-Generator

Gerador de Mnemônicos Milk Sad Esta ferramenta foi projetada para gerar frases mnemônicas BIP-39 frases-semente de 24 palavras com base em timestamps Unix, explorando especificamente frases que poderiam ser geradas por meio da vulnerabilidade "Milk Sad" CVE2023-39910. O que esta ferramenta faz O...

CVE-2017-12617

Primeiros passos O objetivo desta Prova de Conceito é demonstrar como é possível usar o CVE-2017-12617 para ter controle remoto em um servidor Apache Tomcat. Instruções 1. Execute este comando para iniciar o servidor. make serverup 2. Execute este comando para executar o ataque e enviar um web...

CVE-2018-10933

Authentifizierungsumgehung im Server-Code CVE-2018-10933 Versionen 0.7.6 bis 0.8.4 Beschreibung libssh-Versionen ab 0.6 weisen eine Authentifizierungsumgehungsschwachstelle im Server-Code auf. Durch das Übermitteln einer SSH2MSGUSERAUTHSUCCESS-Nachricht an den Server anstelle der...

COPG v6.6.0

🎮 COPG The most advanced device & CPU spoofer for Android — bypass restrictions and unlock premium graphics, higher FPS and exclusive features on most games and apps. ✨ Why COPG? COPG is a Zygisk module that makes most games and apps believe they are running on a different, fully‑featured flagshi...

Malicious code in array-shuffler-utils-99 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 233594ba444a80cbd5c49ac1da879d813b4ca97677dbe05930931496cd29582c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-14519 Malicious code in array-shuffler-utils-99 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 233594ba444a80cbd5c49ac1da879d813b4ca97677dbe05930931496cd29582c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fivem-tool-helper-v2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b33a1f643603b3bbf0f4e15b104240715e0de6a10025eeeafb9b015d684ca5f1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-14521 Malicious code in fivem-tool-helper-v2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b33a1f643603b3bbf0f4e15b104240715e0de6a10025eeeafb9b015d684ca5f1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fivem-tool-helper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 11831d8204f695d6cfc23750c0899851f375e519e715e845730f90b7fc8d51a9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-14520 Malicious code in fivem-tool-helper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 11831d8204f695d6cfc23750c0899851f375e519e715e845730f90b7fc8d51a9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Exploit for OS Command Injection in Synacor Zimbra_Collaboration_Suite

CVE-2026-73570 — Zimbra ZCS SNMP Notification RCE exploit PoC...

[SECURITY] [DSA 6467-1] freecad security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6467-1 [email protected] https://www.debian.org/security/ Aron Xu August 26, 2026 https://www.debian.org/security/faq -...

irflow-timeline v1.0.12

IRFlow Timeline Native macOS forensic timeline analysis. Import, search, and investigate EVTX, CSV, XLSX, Plaso, $MFT, $J, and local AI assistant artifacts — with AI Secret Hunt and the analytics DFIR professionals actually need. Built on Electron + SQLite to handle millions of rows without...

WP Triggers Lite - Cross-Site Scripting

WP Triggers Lite WordPress plugin v2.5.3 contains a reflected cross-site scripting caused by lack of sanitization and escaping of a parameter before outputting it in the page, letting attackers execute malicious scripts in the context of high privilege users, exploit requires attacker to craft a...

Oliver 5 Library Server <8.00.008.053 - Local File Inclusion

Oliver 5 Library Server versions prior to 8.00.008.053 are vulnerable to local file inclusion via the FileServlet function. id: CVE-2021-45027 info: name: Oliver 5 Library Server 8.00.008.053 - Local File Inclusion author: gy741 severity: high description: Oliver 5 Library Server versions prior t...

WP Planet <= 0.1 - Cross-Site Scripting

A cross-site scripting vulnerability in rss.class/scripts/magpiedebug.php in the WP-Planet plugin 0.1 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the url parameter. id: CVE-2014-4592 info: name: WP Planet = 0.1 - Cross-Site Scripting author:...

Liferay Portal - Cross-site Scripting

A Cross-site scripting XSS vulnerability in the Portal Search module in Liferay Portal 7.1.0 through 7.4.2, and Liferay DXP 7.1 before fix pack 27, 7.2 before fix pack 15, and 7.3 before service pack 3 allows remote attackers to inject arbitrary web script or HTML via the tag parameter. id:...

WpStickyBar <= 2.1.0 - SQL Injection

The plugin does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection id: CVE-2024-5765 info: name: WpStickyBar = 2.1.0 - SQL Injection author: theamanrawat severity: high description: | Th...