CVE-2026-21017-LDAP-Anonymous-Bind-Privilege-Escalation

CVE-2026-21017 – LDAP Anonymous Bind Privilege Escalation Program Code Python ldap3 sim ldapanonsim.py - LDAP server allowing anonymous bind with write access from ldap3 import Server, Connection, ALL Simulated: real server would be misconfigured server = Server'ldap://localhost:389', getinfo=ALL...

Malware in @camera.ui/camera-ui-nvr-windows-amd64

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

CVE-2018-18387

CVE-2018-18387 playSMS = 1.4.2 - Privilege escalation TMHC TEAM found a vulnerability that lead to a priviledge escalation through playSMS/web/init.php that can lead to a complete system compromise. The attacker need to get access on the box where playSMS is installed and be able to edit playSMS...

Ashwesker-CVE-2026-21858

🚨 CVE-2026-21858 — “Ni8mare” A critical, unauthenticated vulnerability allowing full compromise of n8n servers 🆔 Overview Field| Details ---|--- CVE ID| CVE-2026-21858 Codename| Ni8mare Severity| 🔴 Critical CVSS Score| 10.0 Maximum Attack Vector| 🌐 Network Authentication Required| ❌ None User...

CVE-2025-32206

CVE-2025-32206 - WordPress Processing Projects "Unrestricted Upload of File with Dangerous Type vulnerability in LABCAT Processing Projects allows attackers to upload a web shell to a web server. This can lead to full compromise." 🧑‍💻 Exploit Description This Python exploit script targets WordPress...

Malicious code in @iobandamwer/native-helper (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cce0282c2e8975376db9fdb7a69afc7ed77c0e7649178967496467e09d7ba328 The package self-labels as a 'temporary placeholder stub' in package.json and README but ships active install-time dropper artifacts: a 93-byte...

Malware in @iobandamwer/native-helper

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in path-stream-utils-testmetest

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in path-stream-utils-testmetest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64a028e4ea3039755f4b18b003e2d9722722ca96c51652674dd1bb27f375e4d0 The package self-describes as a 'Temporary package placeholder for staged publishing' package.json stub:true, README 'Temporary Holding Version' but...

Malware in @sxm-web/client-sdk-core

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in @ppa-web-components/ppa-headerfooter

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in @greenlake/session

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in @ppa-web-components/ppa-searchform

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in @greenlake/common-context

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in @greenlake/context-pane

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in @ppa-web-components/ppa-hotel-collection

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in @iobandamwer/cache-helper

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in @iobandamwer/cache-helper (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0a88993bf967d1bbbc61cb5f43b4d9af5d9ef74b920e70d828b4a52bf880979 The package advertises itself as 'Cache utilities' but ships no source, no binding.gyp, and no build configuration — only two prebuilt native addons...

Malicious code in birch-css-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22815f068ecaf85065c389553848537859f9e37623285a9e71b3e81ee9e9b685 Package advertises itself as a zero-runtime CSS theme kit and instructs installation as a Tailwind name-overlay npm install -D...

Malware in harlow-css-mixer

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...