119 matches found
social-engineer-toolkit
The Social-Engineer Toolkit SET The Social-Engineer Toolkit is an open-source penetration testing framework for authorized social-engineering assessments. SET provides guided attack vectors for security teams that need to test user awareness, validate controls, and run consent-based red-team...
metasploit_in_termux
Metasploit Framework 6 in Termux Come Installare Prima Per avere Termux aggiornato: Cancella tutti i dati di Termux nelle impostazioni Android Disinstalla e reinstalla l'ultima versione di Termux da F-Droid La versione sul Play Store è obsoleta Quindi avvia Termux per l'inizializzazione, chiudilo...
MagicArch
MagicArch: Installazione Automatica di Arch Linux per Penetration Testing di MagicBytes MagicArch è uno script di post-installazione completo basato su Ansible, progettato per trasformare un'installazione di base di Arch Linux in una distribuzione per penetration testing completamente equipaggiat...
dnscrypt-autoinstall
dnscrypt-autoinstall ==================== Questo progetto è stato archiviato, vedi l'ultimo commento in 108. Uno script per installare e configurare automaticamente DNSCrypt su sistemi basati su Linux. Descrizione DNSCrypt è un protocollo per proteggere le comunicazioni tra un client e un resolve...
Malicious Package
Overview @vpmdhaj/search-setup is a malicious package. This package contains malicious code, and its content has been removed from the official package manager. While this package typosquats well-known libraries to impersonate valid open-source ecosystems, there is no connection between those...
CVE-2026-34733
WWBN AVideo is an open source video platform. In versions 26.0 and prior, the AVideo installation script install/deleteSystemdPrivate.php contains a PHP operator precedence bug in its CLI-only access guard. The script is intended to run exclusively from the command line, but the guard condition...
CVE-2026-34733
WWBN AVideo is an open source video platform. In versions 26.0 and prior, the AVideo installation script install/deleteSystemdPrivate.php contains a PHP operator precedence bug in its CLI-only access guard. The script is intended to run exclusively from the command line, but the guard condition...
Malicious code in tahoe-tap (npm)
Malicious package detected. Executes code during installation via preinstall script in package.json and has only one version published. --- -= Per source details. Do not edit below this line.=- Source: amazon-inspector deec4b3e879632ae9819b52e88ae689725b1af688aecd541e498d2bac084f848 The package...
groupoffice 跨站脚本漏洞
GroupOffice is an open-source groupware and CRM developed by Intermesh. Versions of GroupOffice prior to 6.8.155, 25.0.88, and 26.0.10 contained a cross-site scripting vulnerability. This vulnerability stemmed from the POST field in the installation script install/license.php, where the field was...
Malicious code in thread-pipeline-test (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 2d7de9849aa6d6194b8d6fdf574c6c56c3de7cb75ad338f2428fc7f1374e4280 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...
CVE-2026-24840 Dokploy uses hardcoded credentials in installation script, which could result in database access
Dokploy is a free, self-hostable Platform as a Service PaaS. In versions prior to 0.26.6, a hardcoded credential in the provided installation script located at https://dokploy.com/install.sh, line 154 uses a hardcoded password when creating the database container. This means that nearly all Dokpl...
EUVD-2006-5649
Malware in sbrugna...
EUVD-2020-14264
Malware in sbrugna...
EUVD-2005-2962
Malware in sbrugna...
EUVD-2014-9808
Malware in sbrugna...
EUVD-2005-0795
Malware in sbrugna...
EUVD-2013-7250
Malware in sbrugna...
EUVD-2001-1047
Malware in sbrugna...