Malicious code in express-bubble (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 956b35c3b022736d505e63ff195d09af3bfe315d35774c9544de2e3569affab8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview express-test-dependency is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packa...

MAL-2026-11305 Malicious code in express-test-dependency (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1347a031977c76d8945813d129567addafb91c3bdc49eaadcd329f61ef72304d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in express-test-dependency (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1347a031977c76d8945813d129567addafb91c3bdc49eaadcd329f61ef72304d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in express.jd (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e19d28887abf013d2b9c10ea85d7ca19baeb30f52bd9de4589cd66e687975adc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

NVME Driver Heap Buffer Overflow DoS

The vulnerability of the nvmepoll function in the nvmem/host/pci.c driver of the Linux operating system’s NVME kernel is related to synchronization errors when using shared resources “Race Conditions”. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

CVE-2026-64545

A flaw was found in the Linux kernel. The xdpmasterredirect function, which handles network packet redirection, does not properly check for a null pointer. This oversight allows a local attacker to trigger a null pointer dereference by sending a specially crafted XDP eXpress Data Path packet duri...

handlebars-ssti-ast-rce

Handlebars SSTI → RCE via Server-Side AST Injection A proof-o...

Cisco CUCM, UCCX, and Unified IP-IVR- Directory Traversal Detection

A directory traversal vulnerability in Cisco Unified Communications Manager CUCM 5.x and 6.x before 6.15SU2, 7.x before 7.15bSU2, and 8.x before 8.03, and Cisco Unified Contact Center Express aka Unified CCX or UCCX and Cisco Unified IP Interactive Voice Response Unified IP-IVR before 6.01SR1ES8,...

AudioCodes Device Manager Express - SQL Injection Detection

An issue was discovered in AudioCodes Device Manager Express through 7.8.20002.47752. It is an unauthenticated SQL injection in the p parameter of the processlogin.php login form. !/usr/bin/env python3 -- coding: utf-8 -- """An issue was discovered in AudioCodes Device Manager Express through 7."...

Express Default Page Detection

Detects Express Default Page. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Express Default Page.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Express Default Page Detection', 'description': 'Detects Expres...

Mongo Express - Unauthenticated Access Detection

Mongo Express was able to be access with no authentication requirements in place. !/usr/bin/env python3 -- coding: utf-8 -- """Mongo Express was able to be access with no authentication requirements in place.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

Node Express Status - Detect

Node Express Status is detected. !/usr/bin/env python3 -- coding: utf-8 -- """Node Express Status is detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Node Express Status - Detect', 'description': 'Node Expre...

Express-handlebars - Local File Inclusion Detection

Express-handlebars is susceptible to local file inclusion because it mixes pure template data with engine configuration options through the Express render API. More specifically, the layout parameter may trigger file disclosure vulnerabilities in downstream applications. This potential...

Malicious Package

Overview express-self-destruct2 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packag...

Malicious Package

Overview @mynameiskhn/express-security-tool-v3 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization...

Malicious code in express-self-destruct1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware efe4bb7647313d9772c059e46a877ab095ada0910845e5605fbb317ab2b01fe1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview express-self-destruct is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious code in @my_name_is_khn/express-security-tool-v2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fb45d8539214aba2ca98223064b29e9fac2199f766f7e44430ba9f9b4d2d622d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview @mynameiskhn/express-security-tool-v2 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization...