Malicious code in itsa-react-maskedinput (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6914d695ead470d8344308ee1f4fe9600932b7afbfcd14550ea2e95f8d54a6f6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in itsa-react-maskedinput

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in itsa-react-focuscontainer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3f24dbbde4e8dd3528a7be768f6d332bda8a3dbdebbb82054ad14992ab4b5889 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in itsa-react-focuscontainer

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

blmvuln

Fix Major Security Vulnerability on PrestaShop Websites :rocket: CVE-2022-31101 detector and fixer! A newly found exploit could allow remote attackers to take control of your shop Read more about the vulnerability here:...

adversary_emulation_library

Adversary Emulation Library In collaboration with Center Participants, the MITRE Center for Threat-Informed Defense Center maintains a library of adversary emulation plans to allow organizations to evaluate their defensive capabilities against the real-world threats they face. Emulation plans are...

Malcolm

Malcolm Malcolm is a powerful network traffic analysis tool suite designed with the following goals in mind: Easy to use – Malcolm accepts network traffic data in the form of full packet capture PCAP files, Zeek logs, and Suricata alerts. These artifacts can be uploaded via a simple browser-based...

Malicious code in @beloved-lenora/opencode-todo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3b77fc053f72d1eaff51ad3b9af235119b5aa1dbb28d216c084e7023d4e963f6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @beloved-lenora/opencode-orchestrator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fb9b82fbe28422745ef37e0239d9a11d86705c6a93808e1e90303e31622db2fe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @beloved-lenora/opencode-goal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 39f1eed75bb488db0e57e37f9f513e30a616eb00464b41c33bdea3342b9969b6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @beloved-lenora/opencode-shared-rpc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 884dad30e4b92d47985e1d8e7db8580665e8a5cd392023ea672243b62685b157 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @beloved-lenora/opencode-stats (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 84f3316cd114c1dae8ec5b0470fc9f16297c74c495b645085103a553002e825e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @beloved-lenora/opencode-btw (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d95b5328fe2ba73358ca014724b677f69e5b9f8dda1429c105fde5c823dc2fc1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @beloved-lenora/opencode-shell-guard (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 122dea54602061507a3752f709f1e910d9126fdaf9fb282aeab13caca388b3e6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

yara

!IMPORTANT This project is in maintenance mode. More info: https://virustotal.github.io/yara-x/blog/yara-x-is-stable/ YARA in a nutshell YARA is a tool aimed at but not limited to helping malware researchers to identify and classify malware samples. With YARA you can create descriptions of malwar...

CVE-2026-111626

Webreaper Damselfly through 4.5.3 contains an authentication bypass vulnerability that allows unauthenticated attackers to access all /api/ routes because controller authorization attributes are commented out. Attackers can send PUT /api/users with Admin roles to create administrator accounts, or...

CVE-2026-111626 Webreaper Damselfly through 4.5.3 Missing Authentication on REST API Controllers

Webreaper Damselfly through 4.5.3 contains an authentication bypass vulnerability that allows unauthenticated attackers to access all /api/ routes because controller authorization attributes are commented out. Attackers can send PUT /api/users with Admin roles to create administrator accounts, or...

EUVD-2026-103048

Webreaper Damselfly through 4.5.3 contains an authentication bypass vulnerability that allows unauthenticated attackers to access all /api/ routes because controller authorization attributes are commented out. Attackers can send PUT /api/users with Admin roles to create administrator accounts, or...

CVE-2026-111626

The Webreaper Damselfly software (through version 4.5.3 ) is vulnerable to an authentication bypass because controller authorization attributes are commented out. This flaw allows unauthenticated attackers to access all */api/ routes. By sending a PUT /api/users request with Admin roles, an attac...

PhoneSploit-Pro

PhoneSploit Pro The Swiss Army knife for Android. An all-in-one hacking tool written in Python to remotely take over Android devices using ADB, scrcpy, Nmap, and Metasploit-Framework. Table of contents Overview Screenshots Features Requirements Getting started Installing dependencies Device setup...