Lucene search
+L

329639 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2026/09/03 5:01 p.m.7 views

Malicious code in py-2equests (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9bd7b93cf88d0fbcca30c50d9c9de6e14134cd2890be5a7a785e9330e98a988c py-2equests is a typosquat of the popular 'requests' package substituting '2' for 'r'. On import py2equests, the top-level module body iterates...

6AI score
SaveExploits0References2
OSV
OSV
added 2026/09/03 5:01 p.m.5 views

MAL-2026-15862 Malicious code in py-2equests (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9bd7b93cf88d0fbcca30c50d9c9de6e14134cd2890be5a7a785e9330e98a988c py-2equests is a typosquat of the popular 'requests' package substituting '2' for 'r'. On import py2equests, the top-level module body iterates...

6AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/03 4:59 p.m.28 views

temcrypt

The Next-gen Encryption Try temcrypt on the Web → temcrypt SDK Focused on protecting highly sensitive data, temcrypt is an advanced multi-layer data evolutionary encryption mechanism that offers scalable complexity over time, and is resistant to common brute force attacks. You can create your own...

5.7AI score
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/03 4:55 p.m.210 views

xnuspy

xnuspy Output from the kernel log after compiling and running example/open1hook.c xnuspy is a pongoOS module that installs a new system call, xnuspyctl, which allows you to hook kernel functions from userspace. It supports iOS 13.x, iOS 14.x, and iOS 15.x on checkra1n 0.12.2 and up. 4K devices ar...

6.2AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/03 4:53 p.m.34 views

second-order

Second Order Scans web applications for second-order subdomain takeover by crawling the app, and collecting URLs and other data that match certain rules, or respond in a certain way. Installation From binary Download a prebuilt binary from the releases page and unzip it. From source Go version 1....

5.5AI score
SaveExploits0References6
Kitploit
Kitploit
added 2026/09/03 4:51 p.m.3 views

Grouper

Grouper 不要再使用Grouper了。请使用Grouper2! https://github.com/l0ss/Grouper2 一个用于帮助发现Active Directory组策略中易受攻击设置的PowerShell脚本。 照片由Jon Hanson拍摄 - https://www.flickr.com/people/61952179@N00?rb=1 - https://creativecommons.org/licenses/by-sa/2.0/ 概述...

5.3AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/03 4:44 p.m.39 views

spyse.py

spyse.py Python API wrapper and command-line client for the tools hosted on spyse.com. "Spyse is a developer of complete DAAS Data-As-A-Service solutions for Internet security professionals, corporate and remote system administrators, SSL / TLS encryption certificate providers, data centers and...

5.8AI score
SaveExploits0References1
SUSE CVE
SUSE CVE
added 2026/09/03 4:31 p.m.5 views

SUSE CVE-2026-2391

Summary The arrayLimit option in qs does not enforce limits for comma-separated values when comma: true is enabled, allowing attackers to cause denial-of-service via memory exhaustion. This is a bypass of the array limit enforcement, similar to the bracket notation bypass addressed in...

7.5CVSS5.9AI score0.00487EPSS
SaveExploits1References3
Kitploit
Kitploit
added 2026/09/03 4:28 p.m.3 views

mora-hwbp

Mora-HWBP — ハードウェアブレークポイントによるAMSI / WLDP / ETWテレメトリフック メモリ内コードパッチの代替として、ハードウェアブレークポイント(CPUデバッグレジスタ)ベースの関数フックを実証するセキュリティリサーチ用Proof-of-Concept(POC)。 目的と範囲 このリポジトリは、防御的なセキュリティリサーチ、レッドチーム/パープルチーム教育、検知エンジニアリング、およびWindows内部構造の学術研究...

5.6AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/03 4:27 p.m.3 views

safer-dependencies v0.6.1

Safer Dependencies for Claude Code When AI coding assistants like Claude add packages to your project, they often pick whatever version sounds right — without checking whether it has known security vulnerabilities, whether the package is still actively maintained, or whether the name is a typo aw...

7.5CVSS7.7AI score0.01131EPSS
SaveExploits0References14
SUSE CVE
SUSE CVE
added 2026/09/03 4:24 p.m.5 views

SUSE CVE-2026-82562

Summary When qs.parse is called with comma: true and throwOnLimitExceeded: true, a comma-separated value under a bracket-push key a=1,2,3,4 is split into an array without being compared against arrayLimit, while the same value under a flat key a=1,2,3,4, an indexed key a0=, a nested key ab=, or a...

6.3CVSS6AI score0.00317EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2026/09/03 4:24 p.m.5 views

SUSE CVE-2026-84377

LiteLLM is a proxy server AI Gateway to call LLM APIs in OpenAI or native format. Prior to versions 1.88.6 and 1.96.2, any authenticated LiteLLM proxy user could redirect an outbound provider call to a destination the user controls and cause the proxy to send its configured provider credentials t...

6.5CVSS5.8AI score0.00313EPSS
SaveExploits0References3
GithubExploit
GithubExploit
added 2026/09/03 4:23 p.m.16 views

Exploit for CVE-2026-8181

CVE-2026-8181 — Burst Statistics Authentication Bypass to Admin...

9.8CVSS5.9AI score0.14608EPSS
SaveExploits13
Kitploit
Kitploit
added 2026/09/03 4:23 p.m.9 views

OWN-Defender

OWN-Defender — Windows Security Center COM リサーチ OWN-Defender は、Windows Security Center WSC がCOMインターフェースを通じてウイルス対策セキュリティ製品をどのように表現・管理するかを理解することに焦点を当てたWindowsセキュリティリサーチプロジェクトです。 このプロジェクトは、DefendNot が示す動作の調査として始まりましたが、既存の実装をブラックボックスとして扱うのではなく、独立したリバースエンジニアリングと検証の出発点として使用しました。...

5.4AI score
SaveExploits0References2
NVD
NVD
added 2026/09/03 4:17 p.m.4 views

CVE-2026-50554

Note Mark is an open-source note-taking application. Prior to version 0.19.5, GET /api/books/bookID/notes is an unauthenticated endpoint that accepts a "deleted" query parameter. When the request is ?deleted=true, the service runs the query with Unscoped bypassing GORM's soft-delete scope but kee...

5.3CVSS0.00048EPSS
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/03 4:12 p.m.4 views

muad-dib v2.12.0

Installation | Usage | Features | VS Code | CI/CD Version francaise Why MUAD'DIB? npm and PyPI supply-chain attacks are exploding. Shai-Hulud compromised 25K+ repos in 2025. Existing tools detect threats but don't help you respond. MUAD'DIB combines 22 parallel scanners 278 detection rules, a...

6AI score
SaveExploits0References17
Kitploit
Kitploit
added 2026/09/03 3:57 p.m.3 views

laravel-threat-detection v1.7.2

Laravel Threat Detection Security monitoring and attack logging for Laravel. Detect and log SQL injection, XSS, RCE, directory traversal, bot scanners and/wp-admin-style recon probes — every hostile request recorded to your database with full application context. It's an IDS, not a WAF: it never...

6.4AI score
SaveExploits0References8
OSV
OSV
added 2026/09/03 3:26 p.m.3 views

CVE-2026-50554 Note Mark: Unauthenticated disclosure of soft-deleted note metadata via deleted=true on public books in note-mark

Note Mark is an open-source note-taking application. Prior to version 0.19.5, GET /api/books/bookID/notes is an unauthenticated endpoint that accepts a "deleted" query parameter. When the request is ?deleted=true, the service runs the query with Unscoped bypassing GORM's soft-delete scope but kee...

5.3CVSS5.4AI score
SaveExploits0References5
EUVD
EUVD
added 2026/09/03 3:26 p.m.7 views

EUVD-2026-70529

Note Mark is an open-source note-taking application. Prior to version 0.19.5, GET /api/books/bookID/notes is an unauthenticated endpoint that accepts a "deleted" query parameter. When the request is ?deleted=true, the service runs the query with Unscoped bypassing GORM's soft-delete scope but kee...

5.3CVSS7AI score0.00048EPSS
SaveExploits0References3
CVE
CVE
added 2026/09/03 3:26 p.m.31 views

CVE-2026-50554

Note Mark (open-source note-taking application) is vulnerable to unauthenticated disclosure of soft-deleted note metadata prior to v0.19.5 . The unauthenticated GET /api/books/{bookID}/notes endpoint accepts a deleted query parameter; when set to true, the service calls Unscoped() to bypass GORM'...

5.3CVSS7AI score0.00048EPSS
SaveExploits0References3
Rows per page
Query Builder