Malicious code in @stellarshift/abi-tools (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bebef764845634817dcc9905a146c3ba898707dcc9937ebfe0060a4f10852d27 On npm install, the package's postinstall hook resolves a URL that is stored as an XOR-encoded integer array in endpoint-registry.json self-labeled...

Malicious code in @stellarshift/chain-metadata (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 932d9a57667edad733439fadfc1754573429369cb8e65fe094c7bed1ed81c5e6 The package's postinstall lifecycle script fetches and executes arbitrary code from a remote URL that is stored XOR-encoded in endpoint-registry.json...

MAL-2026-15821 Malicious code in @stellarshift/abi-tools (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bebef764845634817dcc9905a146c3ba898707dcc9937ebfe0060a4f10852d27 On npm install, the package's postinstall hook resolves a URL that is stored as an XOR-encoded integer array in endpoint-registry.json self-labeled...

MAL-2026-15822 Malicious code in @stellarshift/chain-metadata (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 932d9a57667edad733439fadfc1754573429369cb8e65fe094c7bed1ed81c5e6 The package's postinstall lifecycle script fetches and executes arbitrary code from a remote URL that is stored XOR-encoded in endpoint-registry.json...

CVE-2026-82522 libjxl < 0.12.0 Container Box Parser Integer Underflow via 32-bit Size Truncation

libjxl before 0.12 contains an integer underflow vulnerability in the container box parser that allows remote attackers to inject arbitrary metadata by exploiting 64-bit box size truncation to sizet on 32-bit platforms. Attackers can supply a crafted JPEG XL file causing the decoder to parse...

EUVD-2026-70241

libjxl before 0.12 contains an integer underflow vulnerability in the container box parser that allows remote attackers to inject arbitrary metadata by exploiting 64-bit box size truncation to sizet on 32-bit platforms. Attackers can supply a crafted JPEG XL file causing the decoder to parse...

CVE-2026-82522

libjxl before version 0.12.0 contains an integer underflow vulnerability in the container box parser . On 32-bit platforms , 64-bit box sizes are truncated to size_t, allowing a remote attacker to supply a crafted JPEG XL file that causes the decoder to parse attacker-controlled codestream bytes ...

CVE-2026-82522

libjxl before 0.12 contains an integer underflow vulnerability in the container box parser that allows remote attackers to inject arbitrary metadata by exploiting 64-bit box size truncation to sizet on 32-bit platforms. Attackers can supply a crafted JPEG XL file causing the decoder to parse...

CVE-2026-82522 libjxl < 0.12.0 Container Box Parser Integer Underflow via 32-bit Size Truncation

libjxl before 0.12 contains an integer underflow vulnerability in the container box parser that allows remote attackers to inject arbitrary metadata by exploiting 64-bit box size truncation to sizet on 32-bit platforms. Attackers can supply a crafted JPEG XL file causing the decoder to parse...

mimipenguin

MimiPenguin 2.0 A tool to dump the login password from the current linux desktop user. Adapted from the idea behind the popular Windows tool mimikatz. This was assigned CVE-2018-20781 https://vulners.com/cve/CVE-2018-20781. Fun fact it's still not fixed after GNOME Keyring 3.27.2 and still works ...

backdoor-apk

backdoor-apk backdoor-apk is a shell script that simplifies the process of adding a backdoor to any Android APK file. Users of this shell script should have working knowledge of Linux, Bash, Metasploit, Apktool, the Android SDK, smali, etc. This shell script is provided as-is without warranty of...

zero-touch-containment

zero-touch-containment Antigena Darktrace → Aruba ClearPass CoA ब्रिज — मॉडल-संचालित, रीयल-टाइम उपयोगकर्ता/डिवाइस क्वारंटाइन। डिटेक्शन और कंटेनमेंट के बीच शून्य SOC क्लिक। एक प्रोडक्शन NDR↔NAC इंटीग्रेशन पैटर्न का सैनिटाइज़्ड रेफरेंस इम्प्लीमेंटेशन जो वित्त-क्षेत्रीय पैमाने बहु-हज़ार एंडपॉइंट, 24...

Orbit Tracer

Orbit Tracer وكيل Orbit Tracer للمعالجة الأمنية الذكية أتمت تحليل الثغرات الأمنية وتقييم المخاطر ومعالجتها عبر قاعدة الكود بأكملها باستخدام الذكاء الاصطناعي ومخطط المعرفة Orbit المشكلة تواجه فرق الأمان تحديًا حرجًا: اكتشاف الثغرات سريع. إصلاحها يستغرق إلى الأبد. root@kitploit: Manual vulnerabilit...

camoufox

Camoufox Camoufox is an open source anti-detect browser built for webscraping & AI agents. 🦊 ⚠️ This project is under development. It may not be suitable for stable production use. ⚠️ !NOTE All of the latest documentation is available atcamoufox.com. !NOTE Browser development is active at...

meltdown-exploit

MELTDOWN EXPLOIT POC Speculative optimizations execute code in a non-secure manner leaving data traces in microarchitecture such as cache. Lipp et. al 2018 published their code 2018-01-09 at https://github.com/IAIK/meltdown. Look at their paper for details: https://meltdownattack.com/meltdown.pdf...

sploits

sploits | Code| Description ---|---|--- CVE-2018-4310| code| MediaRemote: تمت معالجة مشكلة وصول من خلال إضافة المزيد من قيود العزل sandbox CVE-2018-4991| code| إصدارات تطبيق Adobe Creative Cloud Desktop 4.4.1.298 والإصدارات الأقدم تحتوي على ثغرة قابلة للاستغلال في التحقق غير السليم من الشهادة. قد...

CVE-2016-5195

سجل لأغراض التعلم فقط، ويُحظر استخدامه لأغراض غير قانونية المبدأ يعتمد مبدأ هذه الثغرة على الكتابة المتزامنة للصفحات المتسخة، مما يؤدي إلى تغيير محتوى ملف كان للقراءة فقط إذا كان الملف المعدَّل مملوكًا لـroot ويمتلك صلاحية SUID، فيمكن استغلاله لرفع الصلاحيات نطاق التأثير النوى التي تم تجميعها قبل...

are-you-get-tanstack-attack

Scanner CVE TanStack Router Un outil de scan de sécurité pour détecter la CVE TanStack Router | GHSA TanStack Router dans vos projets. Aperçu Cet outil analyse votre base de code à la recherche d'indicateurs de la vulnérabilité TanStack Router CVE-2026-45321 / GHSA-g7cv-rxg3-hmpx, qui affecte des...

CVE-2024-27198_Lab

Labo CVE-2024-27198 Description TeamCity fournit une page réservée aux administrateurs pour la gestion des jetons qui n'est pas protégée par l'authentification. Cela permet à un utilisateur non authentifié de générer un jeton d'accès pour l'utilisateur administrateur s'il parvient à trouver l'ID...

agentic-ioc-scanner

agentic-ioc-scanner एजेंटिक AI कोडिंग टूल्स के लिए IOC स्कैनर — Mini Shai-Hulud, Gemini CLI RCE, Cursor CVE-2026-26268 और DPRK PromptMink का पता लगाता है। एक डिटेक्शन किट जो एजेंटिक AI कोडिंग सहायकों Claude Code, Gemini CLI, Cursor और आपके रिपॉजिटरी में वे जो निर्भरताएँ लाते हैं, उनके समझौते का प...