Malicious code in zendesk-sell-for-zapier (npm)

The package zendesk-sell-for-zapier was found to contain malicious code...

MAL-2025-14189 Malicious code in airbnb-flow (npm)

The package airbnb-flow was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: google-open-source-security cf721a7ab34d44cd6e6bd7fa345aa5926234cdaa069ab71e315ee5780227c2b2 This package installs a dependency hosted on a custom domain that runs an inf...

MAL-2025-34309 Malicious code in sycamore-integration-bravolink (npm)

The package sycamore-integration-bravolink was found to contain malicious code...

Malicious code in epic-launcher-integration (npm)

The package epic-launcher-integration was found to contain malicious code...

Malicious code in bananasign-integration (npm)

The package bananasign-integration was found to contain malicious code...

Malicious code in sycamore-integration-kashflow (npm)

The package sycamore-integration-kashflow was found to contain malicious code...

Malicious code in sycamore-integration-freeagent (npm)

The package sycamore-integration-freeagent was found to contain malicious code...

Malicious code in sycamore-integration-basecamp (npm)

The package sycamore-integration-basecamp was found to contain malicious code...

Malicious code in launchpad-integration-test (npm)

The package launchpad-integration-test was found to contain malicious code...

MAL-2025-40808 Malicious code in zendesk-sell-for-zapier (npm)

The package zendesk-sell-for-zapier was found to contain malicious code...

MAL-2025-15438 Malicious code in bananasign-integration (npm)

The package bananasign-integration was found to contain malicious code...

MAL-2025-34315 Malicious code in sycamore-integration-postcodeanywhere (npm)

The package sycamore-integration-postcodeanywhere was found to contain malicious code...

MAL-2025-32564 Malicious code in run-script-testcafe-eslint-config-palynology (npm)

The package run-script-testcafe-eslint-config-palynology was found to contain malicious code...

MAL-2025-34308 Malicious code in sycamore-integration-basecamp (npm)

The package sycamore-integration-basecamp was found to contain malicious code...

MAL-2025-34314 Malicious code in sycamore-integration-mandrill (npm)

The package sycamore-integration-mandrill was found to contain malicious code...

CVE-2025-55192 HomeAssistant-Tapo-Control Code Injection Vulnerability in issues.yml Workflow

HomeAssistant-Tapo-Control offers Control for Tapo cameras as a Home Assistant component. Prior to commit 2a3b80f, there is a code injection vulnerability in the GitHub Actions workflow .github/workflows/issues.yml. It does not affect users of the Home Assistant integration itself — it only impac...

CVE-2025-55192

HomeAssistant-Tapo-Control exposes a code injection vulnerability in its GitHub Actions workflow .github/workflows/issues.yml, prior to commit 2a3b80f. The workflow directly inserts user-controlled content from the issue body (github.event.issue.body) into a Bash conditional without proper saniti...

CVE-2025-54800

Hydra is a continuous integration service for Nix based projects. Prior to commit dea1e16, a malicious package can introduce arbitrary JavaScript code into the Hydra database that is automatically evaluated in a client's browser when anyone visits the build page. This could be done by a third-par...

CVE-2025-54864

Hydra is a continuous integration service for Nix based projects. Prior to commit f7bda02, /api/push-github and /api/push-gitea are called by the corresponding forge without HTTP Basic authentication. Both forges do however feature HMAC signing with a secret key. Triggering an evaluation can be...

Exploit for CVE-2020-11989

使用说明 首页 所见即所得，点击对应的按钮会跳转到相应的模块 渗透测试 网站扫描 网站扫描功能缝了afrog项目地址，基本就是差不多把该扫描器的功能UI化，且内置反连无需再配置ceye或jndi已将jndi有关poc全部替换成反连地址，主动探测的漏洞或者指纹会写入到report目录下的html文件中，并没有将afrog命令的输出进行删除（所以你在go run main.go运行工具时，依然能看到命令行存在afrog的输出内容） 目标格式支持 URL 或者 IP:PORT 仅指纹扫描/指纹POC扫描/主动指纹探测 - 仅指纹扫描：只对当前网页发送两个数据包进行探测指纹 - 主动指纹探测：...