92992 matches found
MSC-2026-11468
This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: • Contacting external host – this package sends...
MSC-2026-11449
This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: • Contacting external host – this package sends...
MSC-2026-11445
This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: • Contacting external host – this package sends...
MSC-2026-11458
This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: • Contacting external host – this package sends...
MSC-2026-11464
This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: • Contacting external host – this package sends...
MSC-2026-11462
This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: • Contacting external host – this package sends...
Malicious code in 0xfighter3 (PyPI)
Source: kam193 5a97978609c71d681a69a2da613c5e52b257a2062d7805b8db25243db50ff36f Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTEST - Packages looking like typical pentest packages, but al...
Malicious code in bigquery-agent-analytics-tracing (PyPI)
Source: kam193 08fbff35384a45aedc39545dd2a174889a1c35f3e6c9d044c2c201905402ad99 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTEST - Packages looking like typical pentest packages, but al...
CVE-2026-77533
A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Protect Application to execute a Command Injection on the host device...
EUVD-2026-66378
A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Protect Application to execute a Command Injection on the host device...
CVE-2026-77533
A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Protect Application to execute a Command Injection on the host device...
CVE-2025-29277
CVE-2025-29277 Prova di concetto PoC: Nella scheda Diagnostics, accedi allo strumento Ping6 e, nel campo Host Address, inserisci un host valido seguito da un punto e virgola ; e dal comando desiderato. Per esempio: root@kitploit: example.com;id Descrizione: L'invio del payload sopra indicato allo...
CVE-2025-29276
CVE-2025-29276 Beweis des Konzepts PoC: Im Reiter 'Diagnose' rufen Sie das Ping-Tool auf und fügen Sie im Feld 'Host-Adresse' die folgende XSS-Nutzlast ein: root@kitploit: alert1 Beschreibung: Das direkte Absenden der Nutzlast im Feld 'Host-Adresse' löst eine reflektierte Cross-Site Scripting...
CVE-2025-29278
CVE-2025-29278 Proof of Concept PoC: Nella scheda Diagnostica, vai allo strumento Tracert e, nel campo Host Address, inserisci un indirizzo IP valido seguito da un punto e virgola ; e il comando desiderato. Questa iniezione consente l'esecuzione arbitraria di comandi sul sistema. Esempio di...
Security Bulletin: IBM Informix Wire Listener is affected by a vulnerability in the third-party Netty library (CVE-2026-59900).
Summary IBM Informix Wire Listener is affected by CVE-2026-59900. To address this issue, Netty has been updated to the latest version in IBM Informix versions 14.10.xC14 and 15.0.1.14. Vulnerability Details CVEID:CVE-2026-59900 DESCRIPTION: Netty is an asynchronous, event-driven network applicati...
Malicious code in 0xfighter3 (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 5a97978609c71d681a69a2da613c5e52b257a2062d7805b8db25243db50ff36f Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...
Malicious code in syntaxerror-package-12345 (PyPI)
Source: kam193 ede434cf61641064a49939821778e511c3fcf8afab7e443582b8b103e13171d9 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTEST - Packages looking like typical pentest packages, but al...
MAL-2026-14524 Malicious code in bigquery-agent-analytics-tracing (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 08fbff35384a45aedc39545dd2a174889a1c35f3e6c9d044c2c201905402ad99 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...
CVE-2026-19760
The WP Fastest Cache – WordPress Cache Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via HTTP Host Header in all versions up to, and including, 1.5.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inje...
EUVD-2026-66249
The WP Fastest Cache – WordPress Cache Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via HTTP Host Header in all versions up to, and including, 1.5.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inje...