CVE-2023-45966

CVE-2023-45966 Слепой SSRF в umputun/remark42 приводит к Blind SSRF из-за отсутствия поля title и недостаточной фильтрации поля url при создании комментария. Дополнительная информация Исправлено в коммите: efceed6 Тип уязвимости Другое CWE-918: Подделка запросов на стороне сервера SSRF Вендор...

spring-break_cve-2017-8046

spring-breakcve-2017-8046 これは Spring Break 脆弱性 CVE-2017-8046 を悪用するJavaプログラムです。 このソフトウェアは、外部依存関係を可能な限り少なくするように書かれています。 免責事項 このツールは、セキュリティエンジニアおよびアプリセキュリティ担当者がセキュリティ評価を行うことを目的としています。このツールは責任を持って使用してください。本アプリケーションの使用方法について、私は一切責任を負いません。また、このツールの使用によって生じた損害や犯罪についても、私は一切責任を負いません。 脆弱性情報 CVE-ID :...

CVE-2026-9277

CVE-2026-9277 - Эксплойт командной инъекции Shell-Quote Специализированный Proof of Concept PoC скрипт, разработанный для проверки и демонстрации CVE-2026-9277 — структурной уязвимости командной инъекции, обнаруженной в устаревших версиях библиотеки shell-quote = 1.8.3. Сканер выполняет глубокую...

Malicious code in paleobotany-warp-less-uranology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e503cf1f4b68ac4105f21495630d3b3ab9fa830d3e32df743899bc45a7467430 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in public-bundle-class-iota-thread (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03445ba8a939ca18bdd9df7c6eece70c41c352ef40c472e0eb55792092510cd0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-fucub (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8479043242253441b0f80cc5a947b0aba04c926a405c2be6d93e2abd73292b39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kisut-acg-aveudcf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ae85de990594b2d7b5cf0e5b3a3058d5e66215c99194c7178349c67848a80eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-kivod (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbc595edbbce4669227309c3b66ae4aa6a4bf97d8165b1d7b5ef907860e18ea7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-tanjiro27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60102d0337444528d9dbe8c8b067d06a8afb6ab1ab4420afb4fda5be0bb6cb46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-gib-agagaada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d043759fbd2e801c6ab9410c5b899948f80b49ba92a5bc3c9b49d511198c28f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in apasih-me-pa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 435ba157684accb406377a20fa537b95d30b62610991f574d9c0b7010506de34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hassanraza (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c474490892dc4e0716e55c261f04d09b4490fb86ccd7668df43a6583243e465 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164535 Malicious code in prayoga-poke37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 344ab54a7fa8a7deb1be172c7ffa2b70cb378649e722a95cfef04afce52c0f22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165584 Malicious code in saku-ai-ups0i (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b3fa2ceda633e7c0ad8217f6d52049b5e08934078c1ad9c48cdefccd08c46b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163089 Malicious code in nokire-namiresan37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b781c8aba928b3f1fafef55a68b651b3bb7dbdd3614a69380455c39a5fb90b21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in upilka-luzmu-kijnuhigijani (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92ab7eb8bfab350ae000c3626543825a39e45a1efd94a55f5f1a5b030229bf4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152996 Malicious code in astia-aloafa12pafeaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1e544e7aed79af9307c6db61ab42adf7544e06292dbfcd83c3096d5d8484fc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namakiki44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f30e36fc36e2940da0a8388582ffb977886796e985a4017b003dd7097d9697a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ramadan-poke44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a1a089e17b548333abb221fb188af9c3e8bf98aaa2c430ef9b22a683762e858 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163175 Malicious code in nokire-nana23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4f4aaed39f666931840999b063e772e7fc2c9a7774da5377d4c20c051b65a4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...