dawgmon

dawgmon - Dawg the Hallway Monitor SUMMARY The name of this tool is based upon an episode season 10, episode 10 of South Park in which Cartman is Dawg the Hallway Monitor patrolling the hallways of his school. It's a tool which helps one to monitor changes which have taken place on a Linux-based...

jsmon

JSMon JSMon - 用于 BugBounty 的 JavaScript 变更监控器 使用此脚本，你可以配置你想要监控的网站上的多个 JavaScript 文件。每次运行此脚本时，这些文件将被获取并与之前获取的版本进行比较。如果它们发生了变化，你将通过 Telegram 收到通知，消息中包含脚本链接、更改的文件大小以及用于轻松检查更改的差异文件。 安装 要安装 JSMon： git clone https://github.com/robre/jsmon.git cd jsmon python setup.py install 你需要在环境中设置 Slack 或 Telegram...

CVE-2019-5736-Dockerattack-and-security-mechanism

CVE-2019-5736-ataque-y-mecanismo-de-seguridad En este proyecto, descubrimos un ataque reciente a través de un contenedor malicioso e implementamos un mecanismo de seguridad para detenerlo. Introducción Los ciberataques se han convertido en un desafío crítico tanto para empresas como para pequeñas...

CVE-2026-82217: Improper Limitation of a Pathname to a Restricted Directory

In Eclipse Theia versions 1.73.0 up to but not including 1.75.0, the AI "Agent Mode" file-change tools writeFileContent, suggestFileContent, and the replacement and state helpers resolved a model-supplied file path without a workspace-containment check. A crafted relative path such as ../.bashrc,...

EUVD-2026-42857

R-SOFT DMS stores superadmin credentials using a non-salted nested MD5 hash. This allows an attacker who obtain password hash to decode superadmin credentials. Critically, this password cannot be changed except by modifying the configuration file. This issue was fixed in version v3.17-2000...

CVE-2026-41879

R-SOFT DMS stores superadmin credentials using a non-salted nested MD5 hash. This allows an attacker who obtain password hash to decode superadmin credentials. Critically, this password cannot be changed except by modifying the configuration file. This issue was fixed in version v3.17-2000...

Cross-site Scripting (XSS)

Overview mantisbt/mantisbt is a mantis bug tracker. Affected versions of this package are vulnerable to Cross-site Scripting XSS via the Tag Delete Confirmation. An attacker can execute arbitrary JavaScript in the application's context by injecting malicious HTML into the tag name, which is then...

Malicious code in neptune-betelgeuse-halley-chromedriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0d3a2b6835a2e2cd78eb315d5e4b82e68d0bcb3840274c62bda761b9496ffe3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187075 Malicious code in futurology-fermiparadox-parsec-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7932b00db63a52a64e991976f6b489776b42c5b992ba035510f6778c3fcd33c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sigma-byte-minify-cache-float (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c6e70796053d1fa92a07825c71ff13fe758e72888f995c1ae5045570a6d76ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186990 Malicious code in firebase-helios-bionics-virtualreality (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1022ecdd26947cec0f0053fa453beff0e4313b5d2fef4cee8a9101980dac690 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190334 Malicious code in winston-kinetic-zenith-corvus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33aea94bfb56e0007d05b76e2fd4429326a2eba7c08d4c4190df4b030c654c44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in config-regulus-auth-ophiuchus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 602504708c1fa23065534bfce58fb93eb8c0713426b28a6b5331ac55f1425922 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imuay-agg-iguqakuraduidb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20a7d13ce843aa7f030274cef8c837093afb41ba64c298cc675d96117b403183 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184249 Malicious code in modiov-khan-afibanavihid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b47c125cdf6f561eefb04c00aea99d11481d50a8bc01aa3a82630a71c87bb473 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangs-olium-nit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac6fefa9955600e941537932e80a519b59980014f675284e452ebddeb64496bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-koifi-cuidcg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d687eed4ffb353a798f717155ce5df7a920ae1166cae2af20ef04caf998d8ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184237 Malicious code in modasv-kuu-boffu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0004da799b7a0238a911f9dc5f688e974fffc6b01f9ba7764f34b00c3c10df0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lomi-fuis-fakiugabas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32a03b7c4a0e8cd795d944a02e7df3508bc3ee0608fc7a92d8665d25a6f930e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185279 Malicious code in tunis-kjt-gabis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60c6cb75357bef04a2c7734f8921808f0694146cf9095186962d6566e5228b1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...