Malicious code in juicy_carp_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cb1e875b21e975d5a61f718517b666459e5773ab2eb2b8b5d92f14666575553 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in juicy_dragon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47127db5c73a282244326702ca139828c2e0747e19f0a5a43a43bb9eb9418275 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in juicy_silverfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83bf74bf966ba8b51df0218a42ca3e3598a8eb453532076c9a3a55eeb54d7d9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-85259

Malicious code in juicygalliformz3n npm...

Malicious code in juicy_octopus_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector edb6b0db9b2b95cb9ef2a060fe02df4474f136ce0a5190303db0c60ef4a4c25b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-53627

Malicious code in juicy-chocolate-loon npm...

Malicious code in juicy-gold-rodent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c2c65069d17cea1417e66a5e084fa5127e8b014996a7398d5c6b5b865d8f620 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-53628

Malicious code in juicy-amber-ptarmigan npm...

EUVD-2025-53626

Malicious code in juicy-gold-rodent npm...

EUVD-2025-53625

Malicious code in juicy-lavender-leopon npm...

MAL-2025-69023 Malicious code in juicy-gold-rodent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c2c65069d17cea1417e66a5e084fa5127e8b014996a7398d5c6b5b865d8f620 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69022 Malicious code in juicy-chocolate-loon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fd7d68dcbe7aa9c9413536ba4db6b4d277c3f12308374cfcbdbc31d0fe561e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Flax Typhoon using legitimate software to quietly access Taiwanese organizations

Summary Microsoft has identified a nation-state activity group tracked as Flax Typhoon, based in China, that is targeting dozens of organizations in Taiwan with the likely intention of performing espionage. Flax Typhoon gains and maintains long-term access to Taiwanese organizations networks with...

Backdoor Added — But Found — in PHP

Unknown hackers attempted to add a backdoor to the PHP source code. It was two malicious commits, with the subject "fix typo" and the names of known PHP developers and maintainers. They were discovered and removed before being pushed out to any users. But since 79% of the Internets websites use...

CWFF - Create Your Custom Wordlist For Fuzzing

CWFF is a tool that creates a special High quality fuzzing/content discovery wordlist for you at the highest speed possible using concurrency and it's heavily inspired by @tomnomnom's Who, What, Where, When, Wordlist NahamCon2020. Usage CWFF -h --threads --github --subdomains --recursive...

NETGEAR WiFi Router JWNR2010v5 R6080 - Authentication Bypass

NETGEAR WiFi Router JWNR2010v5 R6080 - Authentication Bypass Exploit Title: NETGEAR WiFi Router R6080 - Security Questions Answers Disclosure Date: 13/07/2019 Exploit Author: Wadeek Hardware Version: R6080-100PES Firmware Version: 1.0.0.34 / 1.0.0.40 Vendor Homepage:...

Microsoft Windows Net-NTLMv2 Reflection DCOM/RPC Privilege Escalation

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core/post/windows/reflectivedllinjection' class MetasploitModule 'Windows Net-NTLMv2 Reflection DCOM/RPC Juicy', 'Description' = %q This module utilizes the...

Windows Net-NTLMv2 Reflection DCOM/RPC (Juicy)

This module utilizes the Net-NTLMv2 reflection between DCOM/RPC to achieve a SYSTEM handle for elevation of privilege. It requires a CLSID string. Windows 10 after version 1803, April 2018 update, build 17134 and all versions of Windows Server 2019 are not vulnerable. This module requires...

Joomla! Component Juicy Gallery - picId SQL Injection

Joomla! Component Juicy Gallery - picId SQL Injection source: https://www.securityfocus.com/bid/48688/info The Juicy Gallery component for Joomla! is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A...

Joomla! Component Juicy Gallery - 'picId' SQL Injection

source: https://www.securityfocus.com/bid/48688/info The Juicy Gallery component for Joomla! is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit may allow an attacker to compromise...