132 matches found
MagicArch
MagicArch: Automated Arch Linux Setup for Pentesting by MagicBytes MagicArch is a comprehensive post-installation script built with Ansible, designed to transform a basic Arch Linux installation into a fully equipped Pentesting Distro customized for pentesting and performance. With a focus on...
metasploit_in_termux
Metasploit Framework 6 in Termux How to Install Before In order to have updated Termux: Purge all data of Termux in Android Settings Uninstall and reinstall latest Termux version from F-Droid Version on Play Store is outdated Then launch Termux to initialization, close it force stop, not swap...
social-engineer-toolkit
The Social-Engineer Toolkit SET The Social-Engineer Toolkit is an open-source penetration testing framework for authorized social-engineering assessments. SET provides guided attack vectors for security teams that need to test user awareness, validate controls, and run consent-based red-team...
dnscrypt-autoinstall
dnscrypt-autoinstall Este proyecto ha sido archivado, ver el último comentario en 108. Un script para instalar y configurar automáticamente DNSCrypt en sistemas basados en Linux. Descripción DNSCrypt es un protocolo para asegurar las comunicaciones entre un cliente y un resolvedor DNS mediante el...
installer v13.32.0
Overview Installation mql cnspec Scan your target platform Package Information Kubernetes Status Docker Containers: Homebrew: Install.sh: Install.ps1: macOS Pkg: Arch Linux: Installation The easiest way to install mql & cnspec is to use the install scripts. via Shell Script Linux and macOS...
Malicious Package
Overview @vpmdhaj/search-setup is a malicious package. This package contains malicious code, and its content has been removed from the official package manager. While this package typosquats well-known libraries to impersonate valid open-source ecosystems, there is no connection between those...
PT-2026-32451
It was found that some PostgreSQL extensions did not use search path safely in their installation script. An attacker with sufficient privileges could use this flaw to trick an administrator into executing a specially crafted script, during the installation or update of such extension. This affec...
CVE-2026-34733
WWBN AVideo is an open source video platform. In versions 26.0 and prior, the AVideo installation script install/deleteSystemdPrivate.php contains a PHP operator precedence bug in its CLI-only access guard. The script is intended to run exclusively from the command line, but the guard condition...
CVE-2026-34733
WWBN AVideo is an open source video platform. In versions 26.0 and prior, the AVideo installation script install/deleteSystemdPrivate.php contains a PHP operator precedence bug in its CLI-only access guard. The script is intended to run exclusively from the command line, but the guard condition...
Malicious code in tahoe-tap (npm)
Malicious package detected. Executes code during installation via preinstall script in package.json and has only one version published. --- -= Per source details. Do not edit below this line.=- Source: amazon-inspector deec4b3e879632ae9819b52e88ae689725b1af688aecd541e498d2bac084f848 The package...
GroupOffice cross-site scripting vulnerability
GroupOffice is an open-source groupware and CRM developed by Intermesh. Versions of GroupOffice prior to 6.8.155, 25.0.88, and 26.0.10 contained a cross-site scripting vulnerability. This vulnerability stemmed from the POST field in the installation script install/license.php, where the field was...
Malicious code in thread-pipeline-test (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 2d7de9849aa6d6194b8d6fdf574c6c56c3de7cb75ad338f2428fc7f1374e4280 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...
CVE-2026-24840 Dokploy uses hardcoded credentials in installation script, which could result in database access
Dokploy is a free, self-hostable Platform as a Service PaaS. In versions prior to 0.26.6, a hardcoded credential in the provided installation script located at https://dokploy.com/install.sh, line 154 uses a hardcoded password when creating the database container. This means that nearly all Dokpl...
EUVD-2006-5649
Malware in sbrugna...
EUVD-2005-2962
Malware in sbrugna...
EUVD-2007-4376
Malware in sbrugna...
EUVD-2016-8343
Malware in sbrugna...
EUVD-2017-18701
Malware in sbrugna...