29824 matches found
MAL-2026-16236 Malicious code in strapi-plugin-perev-meeb (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29840a9eddc4894177d910b38ef1808c0ba7a402c267160fe8e86cff48873700 The npm postinstall hook executes postinstall.js, which uses childprocess to spawn a Python reverse shell that connects to the hardcoded remote host...
MAL-2026-16226 Malicious code in strapi-plugin-ccip-meeb (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbf7a24da69c80ba7475efcb12c97f1be8b4ebbed42b47131ac9716ff38d5620 [email protected] declares scripts.postinstall = 'node postinstall.js', so postinstall.js runs automatically on npm install. The script...
Malicious code in strapi-plugin-ccip-meeb (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbf7a24da69c80ba7475efcb12c97f1be8b4ebbed42b47131ac9716ff38d5620 [email protected] declares scripts.postinstall = 'node postinstall.js', so postinstall.js runs automatically on npm install. The script...
GHSA-V8PV-4842-X354 OpenTelemetry.Resources.Host vulnerable to arbitrary code execution via local PATH hijacking on macOS
Summary The OpenTelemetry.Resources.Host NuGet package is affected by an untrusted search path vulnerability on macOS. The host.id resource attribute detector launches the sh and ioreg executables by bare name rather than by absolute path, so both are resolved through the PATH environment variabl...
OpenTelemetry.Resources.Host vulnerable to arbitrary code execution via local PATH hijacking on macOS
Summary The OpenTelemetry.Resources.Host NuGet package is affected by an untrusted search path vulnerability on macOS. The host.id resource attribute detector launches the sh and ioreg executables by bare name rather than by absolute path, so both are resolved through the PATH environment variabl...
pentx-vapt-skill
🔥 Pentx — Advanced VAPT Skill AI-Powered Penetration Testing Agent for Pi Coding Agent Pentx is an advanced 5-phase VAPT Vulnerability Assessment & Penetration Testing skill that executes full penetration testing and generates detailed Proof-of-Concept for every finding. 📸 Screenshots Tool Check|...
Parallels Desktop Flaw Lets Non-Admin Mac Users Gain Root, but Intel Macs Can't Install Fix
Parallels Desktop for Mac has a flaw that lets an ordinary local account run code as root, the highest level of access on a Mac, software company JFrog said this week. The attack needs code already running on the machine as a normal user, so it does not work over the network. JFrog says the fix i...
CVE-1999-0524-POC
ICMP Timestamp Scanner — CVE-1999-0524 root@kitploit: ╔══════════════════════════════════════════════════════════════════╗ ║ ██╗ ██████╗███╗ ███╗██████╗ ████████╗███████╗ ║ ║ ██║██╔════╝████╗ ████║██╔══██╗ ██╔══╝██╔════╝ ║ ║ ██║██║ ██╔████╔██║██████╔╝ ██║ ███████╗ ║ ║ ██║██║ ██║╚██╔╝██║██╔═══╝ ██...
CVE-2026-34160
CVE-2026-34160 — Unauthenticated SSRF in Chamilo LMS via PENS plugin pens.php Severity : High CVSS 8.6 CWE : CWE-918 Server-Side Request Forgery Affected : chamilo/chamilo-lms 2.0-RC.2 Fixed in : 2.0-RC.3 Advisory : GHSA-g2xj-4cch-j276 NVD : https://nvd.nist.gov/vuln/detail/CVE-2026-34160 Credit ...
CVE-2026-33715
CVE-2026-33715 — Unauthenticated SSRF + Open Email Relay in Chamilo LMS via install.ajax.php Severity : High CVSS 7.2 CWE : CWE-918 SSRF + CWE-306 Missing Authentication Affected : chamilo/chamilo-lms 2.0-RC.2 Fixed in : 2.0-RC.3 Advisory : GHSA-mxc9-9335-45mc NVD :...
CVE-2026-11374-check
CVE-2026-11374 ManageEngine AD360 前置条件检测脚本 这是 CVE-2026-11374 利用前置条件的检测脚本。该漏洞是 ManageEngine AD360 套件中一个可预测的 SSO 票据缺陷，可导致未认证账户接管。四个范围内产品共享 ManageEngineADSFramework： 产品| 受影响版本| 修复版本 ---|---|--- ADSelfService Plus| ≤ 6528| 6529 RecoveryManager Plus| ≤ 6320| 6321 M365 Manager Plus| ≤ 4816| 4817 ADAudi...
CVE-2026-86107
The VeloCloud Edge and Gateway exhibit an out-of-bounds write vulnerability when processing tunneled IP fragments between authenticated overlay neighbors. This vulnerability impacts the VeloCloud VCMP tunnel protocol only. A successful exploit can cause the affected process to terminate and...
EUVD-2026-80658
The VeloCloud Edge and Gateway exhibit an out-of-bounds write vulnerability when processing tunneled IP fragments between authenticated overlay neighbors. This vulnerability impacts the VeloCloud VCMP tunnel protocol only. A successful exploit can cause the affected process to terminate and...
CVE-2026-86107 Security Advisory 0180
The VeloCloud Edge and Gateway exhibit an out-of-bounds write vulnerability when processing tunneled IP fragments between authenticated overlay neighbors. This vulnerability impacts the VeloCloud VCMP tunnel protocol only. A successful exploit can cause the affected process to terminate and...
CVE-2026-86107 Security Advisory 0180
The VeloCloud Edge and Gateway exhibit an out-of-bounds write vulnerability when processing tunneled IP fragments between authenticated overlay neighbors. This vulnerability impacts the VeloCloud VCMP tunnel protocol only. A successful exploit can cause the affected process to terminate and...
CVE-2026-86107
CVE-2026-86107 is an out-of-bounds write (CWE-787) in the VeloCloud VCMP tunnel protocol on VeloCloud Edge and VeloCloud Gateway (formerly Broadcom). When processing tunneled IP fragments between authenticated overlay neighbors , a malicious peer can trigger a process crash, causing temporary tra...
CVE-2026-57588-Nessus-XML-Import-SQL-Injection-PoC
🛡️ CVE-2026-57588 - Nessus SQL 인젝션 익스플로잇 프레임워크 📋 목차 개요 취약점 세부 정보 기능 설치 빠른 시작 사용 예제 페이로드 유형 고급 시나리오 리포트 문제 해결 보안 고려사항 라이선스 🔍 개요 CVE-2026-57588 은 Tenable Nessus 버전 10.12.0 이하 에서 발견된 치명적인 SQL 인젝션 취약점입니다. 이 취약점은 .nessus 스캔 결과 파일을 가져올 때 XML 파싱 메커니즘에 존재하며, 가져오기 권한이 있는 인증된 사용자가 백엔드 PostgreSQL 데이터베이스에 대해...
CVE-2022-26923
CVE-2022-26923 설명 이 취약점으로 인해 낮은 권한의 사용자가 Active Directory Certificate ServicesAD CS 서버 역할이 설치된 기본 Active Directory 환경에서 도메인 관리자로 권한을 상승시킬 수 있었습니다. 이 취약점은 주로 AD CSActive Directory Certificate Services 역할과 관련이 있습니다. AD CS 역할은 조직에서 공개 키 인프라PKI를 구축하고 공개 키 암호화, 디지털 인증서, 디지털 서명 기능을 제공할 수 있게 해주는 Windows...
Security Bulletin: IBM Db2 Developer Extension is affected by vulnerability in tomcat-embed-core (CVE-2026-41284,CVE-2026-42498,CVE-2026-43514,CVE-2026-24880, CVE-2026-34483,CVE-2026-34487,CVE-2026-34500)
Summary IBM Db2 Developer Extension is affected by vulnerability in tomcat-embed-core CVE-2026-41284,CVE-2026-42498,CVE-2026-43514,CVE-2026-24880, CVE-2026-34483,CVE-2026-34487,CVE-2026-34500 Vulnerability Details CVEID:CVE-2026-41284 DESCRIPTION: Allocation of Resources Without Limits or...
