Argos

Argos — ブロックチェーン資産追跡プラットフォーム Argos は、Ethereum および Bitcoin 上の資金の流れを追跡・分析・可視化するための多言語対応ブロックチェーン調査プラットフォームです。Rust、OCaml、TypeScript/React で構築されています。 アーキテクチャ root@kitploit: +-----------------------+ | Frontend React 19 | | Vite + Tailwind CSS | +-----------+-----------+ | HTTP/REST...

CVE-2026-55658

Gardens v2 is a modular governance framework that enables communities to create and manage multiple governance pools with customizable parameters and voting mechanisms. In 3e595f3 and prior, when a streaming proposal is funded, the cluster of streaming contracts moves real pool funds into the...

CVE-2026-57445

Gardens v2 is a modular governance framework for managing multiple governance pools. In version dfba919e218e20d52db9f7b2e8d292d45a46c91b and prior, the StreamingEscrow component's approve-side dispute resolution path drains the entire available escrow balance to the proposal beneficiary, whereas ...

EUVD-2026-70523

Gardens v2 is a modular governance framework that enables communities to create and manage multiple governance pools with customizable parameters and voting mechanisms. In dfba919e218e20d52db9f7b2e8d292d45a46c91b and prior, normal beneficiary payout paths in StreamingEscrow preserve depositAmount...

CVE-2026-55658

Gardens v2 , a modular governance framework, is affected in commit 3e595f3 and prior. When a streaming proposal is funded, pool funds are moved into the proposal's StreamingEscrow to back a Superfluid constant flow agreement. However, cancelProposal zeroes the escrow's GDA member units without re...

CVE-2026-55658 Gardens v2: StreamingEscrow buffer drains to the proposal beneficiary on cancel via the permissionless claim()

Gardens v2 is a modular governance framework that enables communities to create and manage multiple governance pools with customizable parameters and voting mechanisms. In 3e595f3 and prior, when a streaming proposal is funded, the cluster of streaming contracts moves real pool funds into the...

Malware-Bible

教化 Malware Bible へようこそ。Perkins Cybersecurity Educational Fund がお届けします。 この神聖な書は、サイバーセキュリティの領域への旅を導くために特別に作られました。この技を理解したいのか、習得したいのか、支配したいのかに関わらず、この神聖な書は、下の炎から鍛え上げられ、あなたに禁断の知識を授けるために作られました。 覚えておいてください。「敵を征服するには、敵の思考の影を歩み、その心を自分のものとせよ。」 -- - 聖書を支援する これらのコースは、Perkins Cybersecurity Educational Fund...

chanleakcheck

chanleakcheck 이 도구는 최근에 완전히 공개된 CVE-2019-12999의 표적이 되었는지 lnd 노드를 확인하는 도구입니다. 이 도구는 노드가 무효 채널을 수락했는지 확인하고, 손실된 코인이 있다면 총 손실량을 정량화하려고 시도합니다. 이 도구는 lnd 전용입니다. 다만 eclair와 c-lightning도 각각 탐지 도구를 제공합니다: eclair의 도구 c-lightning의 도구 설치 다음 명령으로 도구를 빌드할 수 있습니다: root@kitploit: go build -mod=vendor -v 노드 점검 도...

MAL-2026-14391 Malicious code in fund-calculator (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52c5f9f0536151a173aa211b9b5f2972e68aee3043132adccdb3695947b16672 Package declares a preinstall script node index.js that fires unconditionally on npm install. index.js reads installer-side identifiers via...

Malicious code in fund-list-filter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector deb78208f7aa932298e92a8c241ed970296c567a273fc21013dd83bb7916e81b On npm install, package.json's preinstall hook runs index.js which harvests installer host identifiers — os.hostname, os.userInfo username, local IPv...

MAL-2026-14380 Malicious code in fund-list-filter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector deb78208f7aa932298e92a8c241ed970296c567a273fc21013dd83bb7916e81b On npm install, package.json's preinstall hook runs index.js which harvests installer host identifiers — os.hostname, os.userInfo username, local IPv...

Malicious code in fund-portfolio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27ba065e8759299d381ed1c7abd5e7721037b4ea969a384a9e70cfb6bb799e17 Package declares scripts.preinstall: node index.js, causing index.js to run automatically on npm install. The script collects hostname, username, hom...

MAL-2026-14381 Malicious code in fund-portfolio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27ba065e8759299d381ed1c7abd5e7721037b4ea969a384a9e70cfb6bb799e17 Package declares scripts.preinstall: node index.js, causing index.js to run automatically on npm install. The script collects hostname, username, hom...

Malicious code in @dxcl/fund-js (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-10874 Malicious code in @dxcl/fund-js (npm)

--- -= Per source details. Do not edit below this line.=-...

Internet Society Foundation Opens Global Call for Common Good Cyber Fund to Strengthen Cybersecurity

DC, United States, 23rd June 2026, CyberNewswire...

Bernie Sanders’ AI Sovereign Wealth Fund Plan

Let no one accuse Bernie Sanders of ducking the big questions. Writing in the New York Times last week, the senator asked: "Will the future of humanity be determined by a handful of billionaires who have promoted and developed AI, with virtually no democratic input, who stand to become even riche...

codex-solidity

⛓️ Codex Solidity — Smart Contract & Protocol Audit Agent Imp...

CVE-2026-39333 ChurchCRM has Reflected XSS in DateStart/DateEnd parameters in FindFundRaiser.php

ChurchCRM is an open-source church management system. Prior to 7.1.0, he FindFundRaiser.php endpoint reflects user-supplied input DateStart and DateEnd into HTML input field attributes without proper output encoding for the HTML attribute context. An authenticated attacker can craft a malicious U...

SGH SQL injection vulnerability

SGH is a loan fund management PHP script developed by Geraked. Version 0.1.0 of SGH contains an SQL injection vulnerability, which arises from improper handling of the id parameter in the management interface. This vulnerability may lead to SQL injection attacks...