CVE-2026-68480 x86/bugs: Make Safe-RET robust against interrupt injection

In the Linux kernel, the following vulnerability has been resolved: x86/bugs: Make Safe-RET robust against interrupt injection An attacker injecting interrupts while the Safe-RET mitigation executes on machines affected by SRSO can neutralize the safe return sequence, potentially leading to data...

Malicious code in @avi892nash/aegis-grid-runner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d81514bec2b648731e0db3b59e1adbd308a5b099f80af8be6caac5db71103a00 The package's default bin action starts an HTTP server grid.mjs that listens on GRIDRUNNERPORT default 7719. Incoming requests carry a base64-JSON...

MAL-2026-13429 Malicious code in @avi892nash/aegis-grid-runner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d81514bec2b648731e0db3b59e1adbd308a5b099f80af8be6caac5db71103a00 The package's default bin action starts an HTTP server grid.mjs that listens on GRIDRUNNERPORT default 7719. Incoming requests carry a base64-JSON...

Zapscape

The KVM Escape Trilogy ITScape CVE202646...

Malicious code in stretchshop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 479c1238e6380db5463eb3755b980f963d269b2b0874d464b9e1b3b65bd03f60 package.json declares a postinstall hook that runs node demo/demo.js base, which shell-invokes git clone...

MAL-2026-13460 Malicious code in stretchshop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 479c1238e6380db5463eb3755b980f963d269b2b0874d464b9e1b3b65bd03f60 package.json declares a postinstall hook that runs node demo/demo.js base, which shell-invokes git clone...

Exploit for CVE-2026-70553

CVE-2026-70553 - MaxSite CMS Unauthenticated RCE !CVEhttp...

Exploit for Missing Authentication for Critical Function in Microsoft

CVE-2026-56164 — Microsoft SharePoint Server Authentication By...

Malicious code in @addai/node (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ca685518d56ea513609a2dfcd845bb14d94c3faaf58645553c688ca59817921 The package installs a background daemon dist/session-runner.js that pairs the host to a remote +Ai account and polls a hardcoded Supabase backend at...

MAL-2026-13411 Malicious code in @addai/node (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ca685518d56ea513609a2dfcd845bb14d94c3faaf58645553c688ca59817921 The package installs a background daemon dist/session-runner.js that pairs the host to a remote +Ai account and polls a hardcoded Supabase backend at...

Malicious code in agenttunnels (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 264711675c5edabf4f3d0b1d544ca8bade34057c973ca614c82bca3cf8bdd5a1 agenttunnels ships an MCP bridge whose customer-role tools accept payloads from a remote session worker agenttunnels-session.lakshman111.workers.dev...

MAL-2026-13400 Malicious code in agenttunnels (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 264711675c5edabf4f3d0b1d544ca8bade34057c973ca614c82bca3cf8bdd5a1 agenttunnels ships an MCP bridge whose customer-role tools accept payloads from a remote session worker agenttunnels-session.lakshman111.workers.dev...

Exploit for Out-of-bounds Write in Paloaltonetworks Pan-Os

CVE-2026-0300 — PAN-OS User-ID Authentication Portal Buffer Ov...

Malicious code in agenthub-multiagent-mcp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca33b55b94f99f1de3d4b34ee5fc42941013cc5ab1f94dce49b6cc0bed5eaa9a agenthub-multiagent-mcp ships a worker dist/worker.js that opens a WebSocket to the hardcoded server wss://agenthub.contetial.com/ws/workers/ and, fo...

MAL-2026-13399 Malicious code in agenthub-multiagent-mcp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca33b55b94f99f1de3d4b34ee5fc42941013cc5ab1f94dce49b6cc0bed5eaa9a agenthub-multiagent-mcp ships a worker dist/worker.js that opens a WebSocket to the hardcoded server wss://agenthub.contetial.com/ws/workers/ and, fo...

POC_platform

🛡️ POC Management Platform Local POC/EXP Management Platform:...

exploit-code-database

The Exploit Database Git Repository This is an official repos...

ronin-exploits

ronin-exploits !CIhttps://github.com/ronin-rb/ronin-explo...

secMONSTER

🚀 secMONSTER - Advanced Security Assessment & Exploitation Fra...

CVE-2026-64603 platform/x86: intel-hid: Protect ACPI notify handler against recursion

In the Linux kernel, the following vulnerability has been resolved: platform/x86: intel-hid: Protect ACPI notify handler against recursion Since commit e2ffcda16290 "ACPI: OSL: Allow Notify handlers to run on all CPUs" ACPI notify handlers like the intel-hid notifyhandler may run on multiple CPU...