MAL-2026-14429 Malicious code in dim-hydration-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fefcd7c94e6eed5b5a69ce9ad5f4489c6532472ec604e6d15e5a96f63c59e51 The package is presented in its README as a set of day-math primitives, but dist/index.mjs runs a top-level async IIFE on import that chmod 0755's...

tesla-security-research

테슬라 보안 연구 Tesla Model 3/Y 인포테인먼트 시스템Intel Atom MCU, Linux 4.14.235에 대한 취약점 연구로, Bugcrowd를 통해 Tesla에 책임감 있게 제보되었습니다. 생산 중인 Tesla Model 3에서 Tesla의 ODIN 진단 인터페이스의 명령어 주입 취약점을 통해 지속적인 루트 액세스를 획득했습니다CVE-2022-42008. 그로부터 펌웨어 업데이트 이후에도 지속되는 지속성 방법CVE-2022-42005, CVE-2022-42006과 월 보험료를 $130에서 $83으로 직접 낮춘...

CVE-2025-9491_POC

CVE-2025-9491 LNK 난독화 PoC Windows 바로가기.lnk 파일 취약점ZDI-CAN-25373/CVE-2025-9491을 시연하기 위한 개념 증명 도구입니다. 이 도구는 공백 문자 패딩을 활용하여 악성 명령줄 인수를 .lnk 파일 내에 숨길 수 있는 방법을 보여줍니다. 이 도구는 교육 및 승인된 보안 테스트 목적으로만 제공됩니다. 허가 없이 컴퓨터 시스템에 접근하는 것은 불법입니다. 이 도구는 본인이 소유하거나 명시적 테스트 허가를 받은 시스템에서만 사용하십시오. 목차 설명 취약점 세부정보 설치 사용법 생성 ...

gitpython: GitPython: Command Injection via Git option prefix abbreviation

A flaw was found in GitPython. This vulnerability stems from an incomplete command injection blocklist that fails to account for Git's long-option prefix abbreviation feature. An attacker can bypass existing security measures by using abbreviated option names, which Git then resolves to dangerous...

Important: Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.6 Product Security and Bug Fix Update

An update is now available for Red Hat Ansible Automation Platform 2.6 Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

gitpython: GitPython: Arbitrary code execution via command injection due to unguarded Git options

A flaw was found in GitPython where it fails to properly sanitize dangerous Git options. This vulnerability allows an attacker to inject arbitrary commands when using functions like Repo.archive and git.lsremote, potentially leading to arbitrary code execution. Additionally, functions such as...

CVE-2026-77658

A stack-based buffer overflow vulnerability exists in the Dia diagram editor when processing Network Bus objects from Dia XML project files. In objects/network/bus.c, busload reads the number of bus handles from the file attribute "bushandles" using attributenumdata without validating an upper...

bytecode-viewer

Bytecode Viewer Bytecode Viewer - a lightweight user-friendly Java/Android Bytecode Viewer, Decompiler & More. New Features Jump to Declaration Draggable tabs Patched CVE-2022-21675 Make sure to upgrade to v2.11.X Dark mode by default with multiple themes Translated into over 30 languages...

CVE-2026-76070

CVE-2026-76070: Netis NC63 の login.cgi における Base64 デコード後のパスワードを介した未認証・事前認証スタックバッファオーバーフローによる RCE 研究者: Özcan Ersan @ozcanpng 開示ステータス CVE: CVE-2026-76070 ベンダー: Netis Systems Co., Ltd. 製品: Netis NC63 Wireless AC1200 ルーター テスト済みファームウェア: NC63V3.0.0.3327 影響を受けるコンポーネント: /bin/netis.cgi エンドポイント: POST...

gitpython: GitPython: Command Injection via Git option prefix abbreviation

A flaw was found in GitPython. This vulnerability stems from an incomplete command injection blocklist that fails to account for Git's long-option prefix abbreviation feature. An attacker can bypass existing security measures by using abbreviated option names, which Git then resolves to dangerous...

gitpython: GitPython: Arbitrary code execution via command injection due to unguarded Git options

A flaw was found in GitPython where it fails to properly sanitize dangerous Git options. This vulnerability allows an attacker to inject arbitrary commands when using functions like Repo.archive and git.lsremote, potentially leading to arbitrary code execution. Additionally, functions such as...

Important: Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.5 Product Security and Bug Fix Update

An update is now available for Red Hat Ansible Automation Platform 2.5 Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

Exploit for CVE-2026-63039

CVE-2026-63039 — Apache InLong AuditAlertRule ORDER BY SQL i...

CVE-2024-25082_CVE-2024-25081

⚠️ FontForge RCE — CVE-2024-25081 및 CVE-2024-25082 - PoC 📖 개요 FontForge ≤ 20230101 Splinefont 구성 요소의 두 가지 명령 삽입 취약점에 대한 개념 증명 익스플로잇입니다. CVE| 벡터| 트리거 ---|---|--- CVE-2024-25081| 조작된 파일명| 직접 파일 열기 CVE-2024-25082| 조작된 아카이브 파일명| TAR/ZIP/GZ/BZ2 추출 이 PoC는 CVE-2024-25082 를 대상으로 합니다 — FontForge의 자동 아카이브...

Malicious code in hydration-ui-dim (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64f9565680b71c54ed88e29ed3950f1561764f4b86a260a3ebb5eadb528edfa3 On import 'hydration-ui-dim', dist/index.mjs runs a top-level async IIFE that chmods dist/internal/calc-math.dat to 0755 and spawns it detached via...

MAL-2026-14431 Malicious code in hydration-ui-dim (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64f9565680b71c54ed88e29ed3950f1561764f4b86a260a3ebb5eadb528edfa3 On import 'hydration-ui-dim', dist/index.mjs runs a top-level async IIFE that chmods dist/internal/calc-math.dat to 0755 and spawns it detached via...

MAL-2026-14430 Malicious code in hydration-dim-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16cd04f35f684a64b6abd8178154fc7d1f5a970c76f7d77c45635c1c3bcf0d9b [email protected] presents itself as a calendar-day math utility, but its main entry dist/index.mjs runs at import time: it chmod 0755's...

Malicious code in hydration-dim-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16cd04f35f684a64b6abd8178154fc7d1f5a970c76f7d77c45635c1c3bcf0d9b [email protected] presents itself as a calendar-day math utility, but its main entry dist/index.mjs runs at import time: it chmod 0755's...

Exploit for Command Injection in Apache Ranger

CVE-2026-28672 — Apache Ranger UnixUserGroupBuilder OS comma...

uptux

uptux Specialized privilege escalation checks for Linux systems. Implemented so far: Writable systemd paths, services, timers, and socket units Disassembles systemd unit files looking for: References to executables that are writable References to broken symlinks pointing to writeable directories...