http-protocol-exfil

http-protocol-exfil Use the HTTP protocol version to send a file bit by bit "HTTP/1.0" is a 0 and "HTTP/1.1" is a 1. It uses GET requests so the Blue Team would only see the requests to your IP address. However, it takes a long time to send bigger files, for example it needs 1 hour to send 200 KB...

Malicious code in black-spindle-2 (npm)

Source: amazon-inspector 433228fbed18f3104fed4cd1bce59bc5a76b8ea061d18c8fc9516c92b6b26e90 package.json declares a postinstall script that runs curl against the ephemeral host http://778e-181-63-25-28.ngrok-free.app over plain HTTP, embedding a shell command-substitution expression in the URL path...

CVE-2026-117539

darylldoyle svg-sanitizer before 1.0.0 contains CSS injection and remote reference bypass vulnerabilities that allow attackers to embed external resources by uploading crafted SVG files. Attackers can use unsanitized style content, unquoted url values, or image href attributes to exfiltrate page...

CVE-2026-117539 darylldoyle svg-sanitizer before 1.0.0 CSS Injection and Remote Reference Bypass

darylldoyle svg-sanitizer before 1.0.0 contains CSS injection and remote reference bypass vulnerabilities that allow attackers to embed external resources by uploading crafted SVG files. Attackers can use unsanitized style content, unquoted url values, or image href attributes to exfiltrate page...

CVE-2026-117539

The darylldoyle svg-sanitizer (versions before 1.0.0 ) is vulnerable to CSS injection and remote reference bypass vulnerabilities. By uploading crafted SVG files, an attacker can embed external resources through unsanitized style content, unquoted url() values, or image href attributes. This may ...

CVE-2026-117539 darylldoyle svg-sanitizer before 1.0.0 CSS Injection and Remote Reference Bypass

darylldoyle svg-sanitizer before 1.0.0 contains CSS injection and remote reference bypass vulnerabilities that allow attackers to embed external resources by uploading crafted SVG files. Attackers can use unsanitized style content, unquoted url values, or image href attributes to exfiltrate page...

CVE-2026-117539

darylldoyle svg-sanitizer before 1.0.0 contains CSS injection and remote reference bypass vulnerabilities that allow attackers to embed external resources by uploading crafted SVG files. Attackers can use unsanitized style content, unquoted url values, or image href attributes to exfiltrate page...

EUVD-2026-110804

darylldoyle svg-sanitizer before 1.0.0 contains CSS injection and remote reference bypass vulnerabilities that allow attackers to embed external resources by uploading crafted SVG files. Attackers can use unsanitized style content, unquoted url values, or image href attributes to exfiltrate page...

Exploit for CVE-2026-93328

The layer CVE-2026-93328 was missing CVE-2026-93328 / GHSA-...

PT-2026-126374

darylldoyle svg-sanitizer before 1.0.0 contains CSS injection and remote reference bypass vulnerabilities that allow attackers to embed external resources by uploading crafted SVG files. Attackers can use unsanitized style content, unquoted url values, or image href attributes to exfiltrate page...

CVE-2026-93328

Path Traversal and Missing Authorization in cloud-storage source in Google Cloud MCP Toolbox for Databases googleapis/mcp-toolbox versions 1.2.0 through 1.4.0 allows an unauthenticated remote attacker to exfiltrate host files to external Google Cloud Storage buckets and overwrite arbitrary local...

EUVD-2026-109936

Path Traversal and Missing Authorization in cloud-storage source in Google Cloud MCP Toolbox for Databases googleapis/mcp-toolbox versions 1.2.0 through 1.4.0 allows an unauthenticated remote attacker to exfiltrate host files to external Google Cloud Storage buckets and overwrite arbitrary local...

PT-2026-123369

Name of the Vulnerable Software and Affected Versions googleapis/mcp-toolbox versions 1.2.0 through 1.4.0 Description Path traversal and missing authorization in the cloud-storage source allow an unauthenticated remote attacker to exfiltrate host files to external Google Cloud Storage buckets and...

CVE-2026-115810

Tandoor Recipes before 2.7.0 contains a server-side request forgery vulnerability in the Pestle importer that allows authenticated low-privileged users to force the server to issue GET requests to arbitrary internal or external hosts by crafting a malicious image URL in a Pestle JSON import file...

CVE-2026-115810 Tandoor Recipes before 2.7.0 SSRF via Pestle Importer Image URL

Tandoor Recipes before 2.7.0 contains a server-side request forgery vulnerability in the Pestle importer that allows authenticated low-privileged users to force the server to issue GET requests to arbitrary internal or external hosts by crafting a malicious image URL in a Pestle JSON import file...

CVE-2026-115810

Tandoor Recipes versions before 2.7.0 are vulnerable to a Server-Side Request Forgery (SSRF) vulnerability within the Pestle importer . The root cause is located in cookbook/integration/pestle.py, where the application performs a requests.get call that bypasses the centralized requests-hardened S...

EUVD-2026-109097

Tandoor Recipes before 2.7.0 contains a server-side request forgery vulnerability in the Pestle importer that allows authenticated low-privileged users to force the server to issue GET requests to arbitrary internal or external hosts by crafting a malicious image URL in a Pestle JSON import file...

PT-2026-122152

Tandoor Recipes before 2.7.0 contains a server-side request forgery vulnerability in the Pestle importer that allows authenticated low-privileged users to force the server to issue GET requests to arbitrary internal or external hosts by crafting a malicious image URL in a Pestle JSON import file...

Malicious code in security-research-startup-snapshot-810764b303 (PyPI)

Source: kam193 c7f807a5943ac03cda3bdddc675ad3192d210e1f0ba1300959feff5d1d29c915 The package is most likely a reconnaissance of a shared infrastructure, collecting potentially sensitive data from cloud endpoints, activated via a PTH file on every Python loading. Collected data are stored in a loca...

Malicious code in research-probe-6150c1c915 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3696b3aaa62ad07c027d3471a6061628fe63f07faa135887342362ceb424e604 The package ships a .pth file that imports researchprobe6150c1c915.boot on every Python interpreter startup, with no explicit import by the user...