CVE-2025-32206

CVE-2025-32206 - Exploit de Subida Arbitraria de Archivos en WordPress Processing Projects "La vulnerabilidad de subida sin restricciones de archivos con tipo peligroso en LABCAT Processing Projects permite a atacantes subir una web shell a un servidor web. Esto puede llevar a un compromiso total...

CVE-2018-18387

CVE-2018-18387 playSMS = 1.4.2 - Privilege escalation TMHC TEAM found a vulnerability that lead to a priviledge escalation through playSMS/web/init.php that can lead to a complete system compromise. The attacker need to get access on the box where playSMS is installed and be able to edit playSMS...

Malicious code in vinnleys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da2c109f5566555ce8963688bfbb309220aa3fca570bcee74d32b1a8fcc83c75 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in xbailsync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18ff4aa1a565659c7106700fc5b7c355770ec8fc6bd62c0d9a4f8efce56bf09f The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in amprem-activator (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bb73ef0a9130c0751f253465a40f102cddb6cecdec2835dd7cc9c0f4150efa1 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in crypto-validates (npm)

[email protected] ships a dist/index.js identical to [email protected]: validateinput base64-encodes its argument and POSTs it to https://raydium-clmm.maingoal.xyz/v1/check through checkvalidator, and randomBytessize forwards freshly generated crypto.randomBytes output to the...

Malicious code in polygon-toolkits-validator (npm)

[email protected] exports Node crypto helper wrappers, but validateinput base64-encodes its argument and POSTs it to https://raydium-clmm.maingoal.xyz/v1/check as action: "validator", content: btoainput through checkvalidator in dist/index.js, then returns true without validating...

Malicious code in pumpswap-sdk-v1 (npm)

[email protected] presents crypto helpers for the PumpSwap SDK, but validateinput base64-encodes its argument and POSTs it to https://pumpswap-sdk.maingoal.xyz/v1/check through checkvalidator in dist/index.js, and randomBytessize forwards the hex output of crypto.randomBytes to the same host...

Malicious code in raydium-clmm-sdk (npm)

raydium-clmm-sdk 0.0.1 and 0.0.2 identical dist/index.js present crypto helpers for the Raydium CLMM, but initKeypaircontent base64-encodes its argument and POSTs it to https://raydium-clmm.maingoal.xyz/v1/check through checkvalidator, and randomBytessize forwards the hex output of...

CVE-2026-21017-LDAP-Anonymous-Bind-Privilege-Escalation

CVE-2026-21017 – LDAP Anonymous Bind Privilege Escalation Program Code Python ldap3 sim root@kitploit: ldapanonsim.py - LDAP server allowing anonymous bind with write access from ldap3 import Server, Connection, ALL Simulated: real server would be misconfigured server =...

Malicious code in @versacode/baileys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4fb56d60eb9a1df8a4b6dc87789234366b8431047ca01dbce807af874778ffa8 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in @haimiya/baileys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afb1fac619ba416b14b747307762d4e4cf1cfc41f00a244c8e472af5f689deb0 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-16066 Malicious code in @haimiya/baileys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afb1fac619ba416b14b747307762d4e4cf1cfc41f00a244c8e472af5f689deb0 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in @vallensofficial/baileys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02adc12975b9798883d78640d5cab1a73420818d23fbd192ebb76a384f056d54 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-16068 Malicious code in @versacode/baileys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4fb56d60eb9a1df8a4b6dc87789234366b8431047ca01dbce807af874778ffa8 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in i18nexus-tools (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 558344f06c374c5eff9c870250d63a5e9f784ffe23f91182154d9c66c441ee0b The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in i18nexus (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 37d8dfb4ceaec110414441ebad5da37dad342ef653a20499504385d9db1ffdac Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-16046 Malicious code in i18nexus-tools (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 558344f06c374c5eff9c870250d63a5e9f784ffe23f91182154d9c66c441ee0b The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in @web2apk/baileys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ad4c3329ebb2fdeb3b9ddc93abcb5f3dab6773f7a7999ff96d063d49edc04d9 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-16043 Malicious code in @web2apk/baileys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ad4c3329ebb2fdeb3b9ddc93abcb5f3dab6773f7a7999ff96d063d49edc04d9 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...