10512 matches found
CVE-2026-57012
CVE-2026-57012 affects the Setup Wizard component of Android (Pixel), where a missing permission check permits a remote package install , enabling remote privilege escalation without user interaction or additional execution privileges. The CVSS 3.1 score is 7.8 (HIGH) with a local attack vector, ...
CVE-2026-42089
CVE-2026-42089 Un ayudante de instalación de paquetes local confiaba demasiado en los nombres de paquetes proporcionados por el llamante. En yeoman-environment, los generadores faltantes podían instalarse sin confirmación del usuario, convirtiendo metadatos de proyecto controlados por un atacante...
mini-shai-hulud-scanner
Mini Shai-Hulud Scanner 一个免费、离线的扫描器，用于检测当前正在吞噬主要软件包的 npm/PyPI 供应链蠕虫。由 Intrudify 团队开发。无需注册，无遥测，完全离线运行。 NHS CC-4781 · CVE-2026-45321 CVSS 9.6 · GHSA-g7cv-rxg3-hmpx 这是什么 如果你在过去几周内运行过 npm install 或 pip install，那么这与你相关。 特别是如果你接触过 @tanstack/、@uipath/、@mistralai/、@cap-js/，或者 PyPI 上的...
Important: Red Hat Security Advisory: ansible-core security update
An update for ansible-core is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is availabl...
Important: Red Hat Security Advisory: ansible-core security update
An update for ansible-core is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, i...
ansible-core: argument injection in ansible-galaxy role install leads to arbitrary code execution
A flaw was found in ansible-core. The ansible-galaxy role install command processes dependency specifications from a role's meta/requirements.yml file. Due to improper neutralization of argument delimiters, a malicious role author can inject arbitrary git configuration flags through the src field...
Important: Red Hat Security Advisory: ansible-core security update
An update for ansible-core is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is availab...
ph0neutria
ph0neutria ph0neutria malware crawler v1.0.1 https://github.com/phage-nz/ph0neutria Note: This project is not actively maintained. About ph0neutria is a malware zoo builder that sources samples straight from the wild. Everything is stored in Viper for ease of access and manageability. This projec...
CVE-2026-41651-Python
Pack2TheRoot: CVE-2026-41651 Python Python PoC of the PackageKit TOCTOU Local Privilege Escalation exploit. Any local unprivileged user can install arbitrary packages as root with no authentication. Field| Value ---|--- CVE| CVE-2026-41651 Component| PackageKit daemon packagekitd Affected version...
Astra Linux – Vulnerability in OpAM
In OCaml opam before version 2.5.1, a .install field containing a destination filepath can use ../ to access the parent directory...
Security update for ansible-core
This update for ansible-core fixes the following issues: CVE-2026-16493: argument injection in ansible-galaxy collection install via git clone bsc1272369. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch"...
webshell
webshell 简体中文 This is a webshell collection project Give someone a rose, there is a fragrance in your hand if you download this project, please also submit a shell This project covers various common scripts Such as: asp, aspx, php, jsp, pl, py If you submit a webshell, please do not change the na...
CVE-2026-45321-Tanstack
Simulasi Supply Chain Attack — CVE-2026-45321 TanStack Educational Lab for Understanding npm Supply Chain Attacks, CI/CD Abuse, and Install-Time Code Execution Disclaimer Project ini dibuat hanya untuk: pembelajaran keamanan siber, riset defensive security, simulasi local lab, memahami konsep...
CVE-2024-10578
CVE-2024-10578: Pubnews = 1.0.7 - Unauthenticated Arbitrary Plugin Installation Description The Pubnews theme for WordPress is vulnerable to unauthorized arbitrary plugin installation due to a missing capability check on the pubnewsimporterpluginactionfornotice function in all versions up to, and...
CVE-2026-45321-Tanstack
Simulación de Ataque a la Cadena de Suministro — CVE-2026-45321 TanStack Laboratorio educativo para entender ataques a la cadena de suministro de npm, abuso de CI/CD y ejecución de código en tiempo de instalación Descargo de responsabilidad Este proyecto se ha creado únicamente para: aprendizaje ...
MiracleLinux 8 : ansible-core-2.16.3-4.el8_10.ML.1 (AXSA:2026-1818:04)
The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1818:04 advisory. ansible-core: argument injection in ansible-galaxy role install leads to arbitrary code execution CVE-2026-11332 Tenable has extracted the preceding...
CVE-2025-70342
CVE-2025-70342: Credential Interception via Named Pipe in erase-install Summary erase-install prior to v40.4 commit 2c31239 writes swiftDialog credential output to a hardcoded path /var/tmp/dialog.json. On Apple Silicon Macs, admin credentials entered during reinstall/erase operations are written...
CVE-2024-9707
CVE-2024-9707 Hunk Companion = 1.8.4 - Missing Authorization to Unauthenticated Arbitrary Plugin Installation/Activation Description The Hunk Companion plugin for WordPress is vulnerable to unauthorized plugin installation/activation due to a missing capability check on the...
CVE-2025-50286
Grav Admin Direct Install RCE CVE-2025-50286 Metasploit module and lab setup for authenticated Remote Code Execution in the Grav Admin Plugin Direct Install functionality. Overview CVE: CVE-2025-50286 Impact: Authenticated RCE Vector: Admin panel → Direct Install Result: Arbitrary command executi...