119 matches found
social-engineer-toolkit
The Social-Engineer Toolkit SET The Social-Engineer Toolkit is an open-source penetration testing framework for authorized social-engineering assessments. SET provides guided attack vectors for security teams that need to test user awareness, validate controls, and run consent-based red-team...
MagicArch
MagicArch: Automated Arch Linux Setup for Pentesting by MagicBytes MagicArch is a comprehensive post-installation script built with Ansible, designed to transform a basic Arch Linux installation into a fully equipped Pentesting Distro customized for pentesting and performance. With a focus on...
metasploit_in_termux
Metasploit Framework 6 in Termux How to Install Before In order to have updated Termux: Purge all data of Termux in Android Settings Uninstall and reinstall latest Termux version from F-Droid Version on Play Store is outdated Then launch Termux to initialization, close it force stop, not swap...
dnscrypt-autoinstall
dnscrypt-autoinstall 该项目已归档，请参见 108 中的最后一条评论。 一个用于在基于 Linux 的系统上安装并自动配置 DNSCrypt 的脚本。 描述 DNSCrypt 是一种通过加密 DNS 查询和响应来保护客户端与 DNS 解析器之间通信安全的协议。它能验证你从 DNS 提供商收到的响应确实由该提供商发送，且未被篡改。 此脚本将自动且安全地将 DNSCrypt 设置为后台服务，通过 DNSCrypt-proxy、libsodium 加密库以及你选择的 DNSCrypt 服务提供商，在系统启动时运行。脚本还提供了选项，允许你随时更改服务提供商、关闭...
Malicious Package
Overview @vpmdhaj/search-setup is a malicious package. This package contains malicious code, and its content has been removed from the official package manager. While this package typosquats well-known libraries to impersonate valid open-source ecosystems, there is no connection between those...
CVE-2026-34733
WWBN AVideo is an open source video platform. In versions 26.0 and prior, the AVideo installation script install/deleteSystemdPrivate.php contains a PHP operator precedence bug in its CLI-only access guard. The script is intended to run exclusively from the command line, but the guard condition...
CVE-2026-34733
WWBN AVideo is an open source video platform. In versions 26.0 and prior, the AVideo installation script install/deleteSystemdPrivate.php contains a PHP operator precedence bug in its CLI-only access guard. The script is intended to run exclusively from the command line, but the guard condition...
Malicious code in tahoe-tap (npm)
Malicious package detected. Executes code during installation via preinstall script in package.json and has only one version published. --- -= Per source details. Do not edit below this line.=- Source: amazon-inspector deec4b3e879632ae9819b52e88ae689725b1af688aecd541e498d2bac084f848 The package...
groupoffice 跨站脚本漏洞
GroupOffice is an open-source groupware and CRM developed by Intermesh. Versions of GroupOffice prior to 6.8.155, 25.0.88, and 26.0.10 contained a cross-site scripting vulnerability. This vulnerability stemmed from the POST field in the installation script install/license.php, where the field was...
Malicious code in thread-pipeline-test (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 2d7de9849aa6d6194b8d6fdf574c6c56c3de7cb75ad338f2428fc7f1374e4280 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...
CVE-2026-24840 Dokploy uses hardcoded credentials in installation script, which could result in database access
Dokploy is a free, self-hostable Platform as a Service PaaS. In versions prior to 0.26.6, a hardcoded credential in the provided installation script located at https://dokploy.com/install.sh, line 154 uses a hardcoded password when creating the database container. This means that nearly all Dokpl...
EUVD-2014-9808
Malware in sbrugna...
EUVD-2005-2962
Malware in sbrugna...
EUVD-2006-5649
Malware in sbrugna...
EUVD-2020-14264
Malware in sbrugna...
EUVD-2005-0795
Malware in sbrugna...
EUVD-2013-7250
Malware in sbrugna...
EUVD-2016-8343
Malware in sbrugna...