Malicious code in @coralxyz/anchor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1475ce579e5b1ce9d7597187d091b29b70cbe1a563ed70946517673c29683763 Package @coralxyz/anchor impersonates the legitimate Solana Anchor framework package @coral-xyz/anchor hyphen removed. The npm postinstall hook,...

MAL-2026-13521 Malicious code in @rbxst/services (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8e349df2092cb3672698c00cefa5268881f21a60d1f71394c9e223b40d086d2 scripts/postinstall.js runs at npm install time. On Windows it downloads a ZIP archive from https://files.catbox.moe/rp8idk.zip anonymous file-hostin...

Malicious code in streak-day-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 478c2375c5f06dfa7595d312a43145eb929e1cf536d7ad960716159268582e4d index.mjs schedules an asynchronous routine at module load that decodes a table of hex-encoded strings to reconstruct references to process, fetch,...

CVE-2026-25242

Gogs is an open source self-hosted Git service. Versions 0.13.4 and below expose unauthenticated file upload endpoints by default. When the global RequireSigninView setting is disabled default, any remote user can upload arbitrary files to the server via /releases/attachments and...

GHSA-FC3H-92P8-H36F Unauthenticated File Upload in Gogs

Security Advisory:Unauthenticated File Upload in Gogs Vulnerability Type: Unauthenticated File Upload Date: Aug 5, 2025 Discoverer: OpenAI Security Research Summary Gogs exposes unauthenticated file upload endpoints by default. When the global RequireSigninView setting is disabled default, any...

EUVD-2008-6745

Malware in sbrugna...

EUVD-2008-0367

Malware in sbrugna...

Uguu 安全漏洞

Uguu is a simple, lightweight temporary file host from Go Johansson Personal Developer that supports drag-and-drop, paste, click, and API uploads. A security vulnerability exists in Uguu 1.8.9 and earlier versions, which originates from JavaScript in XML files could lead to cross-site scripting...

Format string

The pygrub boot loader emulator in Xen, when nul-delimited output format is requested, allows local pygrub-using guest OS administrators to read or delete arbitrary files on the host via NUL bytes in the bootloader configuration file...

Mini File Host 1.5 - Remote File Upload Vulnerability

No description provided by source...

GalaxyScripts Mini File Host and DaddyScripts Daddy's File Host - Local File Inclusion

source: https://www.securityfocus.com/bid/54992/info GalaxyScripts Mini File Host and DaddyScripts Daddy's File Host are prone to a local file-include vulnerability because they fail to properly sanitize user-supplied input. An attacker can exploit this vulnerability to obtain potentially sensiti...

Mini File Host 1.5 Shell Upload

===================================================================== ========= / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || || // \ || || ===================================================================== ========= » Note : This vulnerability...

Mini File Host 1.5 - Arbitrary File Upload

Mini File Host 1.5 - Arbitrary File Upload ===================================================================== ========= / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || || // \ || || =====================================================================...

Mini File Host v1.5 Remote File Upload Vulnerability

No description provided by source. ===================================================================== ========= / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || || // \ || || =====================================================================...

Mini File Host v1.5 Remote File Upload Vulnerability

Exploit for unknown platform in category web applications ==================================================== Mini File Host v1.5 Remote File Upload Vulnerability ==================================================== » Script: Mini File Host » Language: PHP » Site page: Mini File Host v1.5 »...

Mini File Host 1.5 - Arbitrary File Upload

===================================================================== ========= / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || || // \ || || ===================================================================== ========= » Note : This vulnerability...

CVE-2008-6785

CVE-2008-6785 concerns an unrestricted file upload vulnerability in Mini File Host 1.5. An attacker could upload a file with an executable extension and access it directly to execute arbitrary code. The vulnerability is triggered by placing a crafted file (e.g., name.php) in an unspecified direct...

CVE-2008-6785: Improper Control of Generation of Code

Unrestricted file upload vulnerability in Mini File Host 1.5 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in an unspecified directory, as demonstrated by creating a name.php file...

Mini File Host File Upload Vulnerability

--------------------------------------------------------- Portal Name: Mini File Host Version: All version Vendor : http://www.galaxyscripts.com Dork: inurl:index.php?page=img Powered By Mini File Host Author : PouyaServer , [email protected] Vulnerability : Uploader Bypass...

Mini File Host 1.x Arbitrary PHP File Upload Vulnerability

No description provided by source. --------------------------------------------------------- Portal Name: Mini File Host Version: All version Vendor : http://www.galaxyscripts.com Dork: inurl:index.php?page=img Powered By Mini File Host Author : PouyaServer , [email protected] Vulnerability ...