virustotalx

virustotalx 用于端点 virustotalx 用于 IP（V2） 安装 git clone https://github.com/orwagodfather/virustotalx.git cd virustotalx 创建 3 个账户 https://www.virustotal.com/gui/join-us 并复制 3 个 API 密钥 === nano orwa.sh & nano orwaV2.sh 在此处粘贴 3 个 API 密钥 .... if $apikeyindex -eq 1 ; then apikey="key-1" elif $apikeyindex...

magento2-encryption-key-manager-cli

Magento 2 加密密钥管理器 CLI 一款用于 Magento 2 加密密钥轮换和管理的实用工具。CVE-2024-34102（又名 Cosmic Sting）的受害者可将其用于善后处理。 设计用途 开发用途 部署自动化 CVE-2024-34102（又名 Cosmic Sting）善后处理 CVE-2024-34102（又名 Cosmic Sting） 应用安全补丁后，您需要执行一次密钥轮换，以完全阻止攻击者通过管理员级别的 WebAPI 访问。 如果您无法升级或应用官方隔离补丁，请参阅 我们的补丁。 如果官方的加密密钥轮换命令 php bin/magento...

CYBERDUDEBIVASH-5G-Core-Key-Rotation-Ghost-Admin-Auditor

CYBERDUDEBIVASH 5G 核心密钥轮换与幽灵管理员审计工具 v1.1 © 2026 CYBERDUDEBIVASH – 版权所有 全球零信任 5G 与专网安全权威 印度奥里萨邦布巴内斯瓦尔 用于检测和修复 CVE-2026-0622（5G 核心软件中的幽灵管理员权限提升与主密钥泄露）的生产级工具。 功能特性 零信任 API 认证 幽灵管理员事件检测（NRF 日志） 主密钥轮换状态检查（UDM/AUSF） 紧急强制密钥轮换（高级版） 信令日志上的机器学习异常检测（高级版） 远程车队审计（企业版） 带修复指导的安全 HTML 报告 安装 pip install -r...

CVE-2026-100615 Cap-go capgo.app before 12.267.1 Privilege Escalation via API Key Rotation

Cap-go capgo.app before 12.267.1 fails to validate target API key privilege during rotation, allowing an apikeymanager to rotate a higher-privileged orgsuperadmin sibling key and recover its plaintext credential. Attackers with apikeymanager role can enumerate same-owner API keys, rotate a strong...

CVE-2026-100615 Cap-go capgo.app before 12.267.1 Privilege Escalation via API Key Rotation

Cap-go capgo.app before 12.267.1 fails to validate target API key privilege during rotation, allowing an apikeymanager to rotate a higher-privileged orgsuperadmin sibling key and recover its plaintext credential. Attackers with apikeymanager role can enumerate same-owner API keys, rotate a strong...

CVE-2026-100615

Versions of Cap-go capgo.app prior to 12.267.1 are vulnerable to a privilege escalation flaw because the system fails to validate target API key privileges during the rotation process. An attacker with the apikey_manager role can enumerate API keys owned by the same entity and use the PUT endpoin...

CVE-2026-100615 Cap-go capgo.app before 12.267.1 Privilege Escalation via API Key Rotation

Cap-go capgo.app before 12.267.1 fails to validate target API key privilege during rotation, allowing an apikeymanager to rotate a higher-privileged orgsuperadmin sibling key and recover its plaintext credential. Attackers with apikeymanager role can enumerate same-owner API keys, rotate a strong...

PT-2026-99286

Name of the Vulnerable Software and Affected Versions capgo.app versions prior to 12.267.1 Description Insufficient validation of API key privileges during the rotation process allows a user with the apikey manager role to rotate a sibling key belonging to a higher-privileged org super admin. By...

CVE-2026-82356

Imprivata EAM =26.2.6 lacks the ability to rotate its RSA key pair after deployment when generating an X.509 certificate. Using an RSA key pair indefinitely for certificate generation is against best practices...

EUVD-2026-85537

Imprivata EAM =26.2.6 lacks the ability to rotate its RSA key pair after deployment when generating an X.509 certificate. Using an RSA key pair indefinitely for certificate generation is against best practices...

CVE-2026-82356 Imprivata EAM: Unrotatable X.509 RSA Key Pair in Production

Imprivata EAM =26.2.6 lacks the ability to rotate its RSA key pair after deployment when generating an X.509 certificate. Using an RSA key pair indefinitely for certificate generation is against best practices...

Enterprise Access Management EAM does not rotate RSA keys

Overview Imprivata Enterprise Access Management EAM, an authentication and single sign-on platform for enterprise and clinical environments, contains a vulnerability in versions 26.2.6 and below. The product provides no supported mechanism to rotate its RSA key pair after deployment, meaning the...

CVE-2026-82356: Inadequate Encryption Strength

Imprivata EAM =26.2.6 lacks the ability to rotate its RSA key pair after deployment when generating an X.509 certificate. Using an RSA key pair indefinitely for certificate generation is against best practices...

MAL-2026-16066 Malicious code in @haimiya/baileys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afb1fac619ba416b14b747307762d4e4cf1cfc41f00a244c8e472af5f689deb0 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-16042 Malicious code in krdpass-auth-react-native (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a74ab9e45d4f67b40e21dc7491aff1979b4bf79be24bc49b8588916c18b847f package.json declares a preinstall script preinstall.js that runs automatically on npm install. The script collects os.hostname, os.userInfo, homedir...

MAL-2026-15873 Malicious code in btree-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 180c50a02e5bbe5a57f622112bba7f7b01becd6cf85f6d9d4b8301699f4334b7 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in react-mongoose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3486f0a140ab65c516d0261fefbe67384d5a604715ee6faa7da5591ab456b906 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Security Bulletin: Maximo AI Service uses multiple third party dependencies which are vulnerable to multiple CVEs.

Summary Maximo AI Service uses langchain-text-splitters 0.3.9, flask 3.1.0, coreutils 8.32-39.el9 and libxml2 2.9.13-14.el98.1 which are vulnerable to PSIRT-GHSA-fv5p-p927-qmxr, CVE-2025-47278, CVE-2026-27205, CVE-2025-5278 and CVE-2025-6170. This bulletin contains information regarding the...

Malicious code in h3client (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f46b4326d43002283dd4c729f099bd53573ca46f6c706492214d37df4bf6c51b The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-15569 Malicious code in nuvyra-marketplace-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5db08e65aec25f1dc4fd0c33173154dbd0e6ef6e79aa2f1b7f8b4f8df0b9a3a8 dist/client.js executes initializeProvider at module top level, so the code runs whenever a consumer requires or imports this SDK. The function...