CVE-2026-45321-Tanstack

供应链攻击模拟 — CVE-2026-45321 TanStack 用于理解 npm 供应链攻击、CI/CD 滥用及安装时代码执行的教育实验室 免责声明 本项目仅用于： 网络安全学习， 防御性安全研究， 本地实验室模拟， 理解供应链攻击概念。 请勿将本项目用于： 攻击真实系统， 窃取凭证， 恶意软件部署， 未授权访问， 或其他非法活动。 描述 本实验室模拟了以下事件的基本概念： CVE-2026-45321 TanStack npm 供应链入侵 GitHub Actions CI/CD 滥用 npm 生命周期脚本执行 模拟在本地安全进行，不涉及： 真实凭证窃取， 令牌泄露，...

CVE-2026-46590

CVE-2026-46590 — camel-pqc Key-Lifecycle Unsafe Deserialization Runnable proof-of-concept reproducers for the same Apache Camel vulnerability, one per runtime:...

Full-Attack-Lifecycle-Simulation-on-Metasploitable

此存储库没有 README。...

CVE-2026-45321-Tanstack

供应链攻击模拟 — CVE-2026-45321 TanStack 用于理解 npm 供应链攻击、CI/CD 滥用和安装时代码执行的教育性实验环境 免责声明 本项目仅用于： 网络安全学习， 防御性安全研究， 本地实验模拟， 理解供应链攻击的概念。 请勿将本项目用于： 攻击真实系统， 窃取凭证， 恶意软件部署， 未授权访问， 或其他非法活动。 描述 本实验模拟了该安全事件的基本概念： CVE-2026-45321 TanStack npm 供应链攻陷 GitHub Actions CI/CD 滥用 npm 生命周期脚本执行 模拟在本地安全进行，不会： 真正窃取凭证， 泄露令牌，...

attack-surface-framework

Attack Surface Framework Overview ASF aims to protect organizations acting as an attack surface watchdog, provided an “Object” which might be a: Domain, IP address or CIDR Internal or External, ASF will discover assets/subdomains, enumerate their ports and services, track deltas and serve as a...

CVE-2026-54686-poc

CVE-2026-54686: Warp DCS 生命周期钩子伪造 PoC English version 概要 此仓库是基于 Warp 公开安全公告 GHSA-9w2v-jhww-vm85 中 CVE-2026-54686 的安全本地 PoC。 在修复前的 Warp 版本中，对于从 PTY 流中到达的部分状态变更 DCS 生命周期钩子，并未验证该钩子是否来自当前会话的 Warp shell 集成。如果攻击者能够使受害者在 Warp 上显示攻击者控制的终端输出，则可以伪造所选的生命周期元数据，从而影响活动块或 SSH 会话相关的元数据。 此 PoC 不会连接 Warp 或 SSH...

Nullify

Nullify 安全。透明。已清除。 Nullify 是一个开源、模块化的数据保留、删除和生命周期治理平台。它提供了一个集中式框架，用于发现数据、评估保留策略、执行受控的生命周期操作，并在分布式数据环境中维护可验证的审计记录。 Nullify 围绕规范优先的架构设计。核心模块提供数据生命周期治理所需的基础能力，而可选插件模块则通过额外的连接器、合规框架、智能、集成、存储系统和部署能力扩展 Nullify。 规范 Nullify 为集中式数据生命周期管理定义了一种开源架构。 该规范建立在以下原则之上： 集中式策略协调 分布式数据源支持 策略驱动的保留和删除 明确的授权和审批 试运行和验证工...

np-audit

np-audit — npm 包审计工具 针对 npm 包的静态安全分析——在执行前 检测混淆的生命周期脚本、已知漏洞和恶意模式。可作为 npm install 和 npm ci 的即插即用替代品。...

sopa

sopa 一个用 Golang 编写的 ADWS 实用客户端。 Sopa 实现了 ADWS 协议栈（MS-NNS + MC-NMF + SOAP），提供了以下命令行功能： 对象搜索与检索 query: 通过 WS-Enumeration 的 Enumerate + Pull 循环运行 LDAP 过滤器搜索，支持属性投影、作用域控制（Base/OneLevel/Subtree）和分页 get: 通过 WS-Transfer Get 根据 DN 获取单个对象 对象生命周期 create: 通过 WS-Transfer ResourceFactory 创建对象（内置类型：user,...

Malicious code in sm-checkout (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bc8dabb0ecf46dc57dd07dacdf28c9cddf629ffb8e9b0cea75e71cd999feaf0 [email protected] declares preinstall and postinstall lifecycle scripts in package.json that invoke curl against a hardcoded bare-IP URL over plain...

MAL-2026-14399 Malicious code in sm-payment (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 926b17cedd788f5f626b3c4001ca9f1b9572abe425b87d40d6f03814d211e3e7 package.json declares preinstall and postinstall lifecycle scripts that curl a hardcoded bare IP over plain HTTP http://16.192.173.5/sm-payment/pre...

Malicious code in sm-payment (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 926b17cedd788f5f626b3c4001ca9f1b9572abe425b87d40d6f03814d211e3e7 package.json declares preinstall and postinstall lifecycle scripts that curl a hardcoded bare IP over plain HTTP http://16.192.173.5/sm-payment/pre...

Malicious code in sm-admin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa2741ebbd0df8c6f349a4d34361cc3d814fe878f3f4521fd771a855cfdc152b Package [email protected] defines preinstall and postinstall lifecycle scripts that issue plain-HTTP GET requests to a hardcoded bare-IP endpoint at...

claude-project-scanner

Claude 项目扫描器 一种只读的 Claude Code 技能，用于在打开 第三方项目之前扫描其已知安全风险。 检测到以下文档中记载的攻击模式： CVE-2025-59536（Claude Code 生命周期钩子注入） CVE-2025-61260（OpenAI Codex CODEXHOME 注入） CVE-2025-54136（Cursor 插件验证绕过） 此外还检测 statusLine.command 执行、additionalDirectories 逃逸、代理/技能/命令/输出样式中的提示注入、可疑的 MCP 服务器以及隐藏的 base64 形式载荷。 ⚠️ 请先阅读 1...

Moderate: Red Hat Security Advisory: OpenJDK 11.0.32.1 ELS Security Update For Portable Linux Builds

An update is now available for OpenJDK. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the References...

CVE-2026-18874 Volsync-addon-controller: volsync-addon-controller: annotation values rendered into yaml via text/template without escaping allows yaml injection into subscription

A flaw was found in volsync-addon-controller. This vulnerability allows an attacker to inject malicious YAML Yet Another Markup Language code into the OpenShift Lifecycle Manager OLM Subscription resource. This is due to improper escaping of annotation values when they are rendered into YAML...

CVE-2026-71049

Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain component: Installation Issues. The supported version that is affected is 3.6.1. Easily exploitable vulnerability allows low privileged attacker with network access via Oracle Net to compromise Oracle Product...

CVE-2026-71050

Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain component: Installation Issues. The supported version that is affected is 3.6.1. Easily exploitable vulnerability allows high privileged attacker with network access via Oracle Net to compromise Oracle Product...

CVE-2026-71051

Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain component: Installation Issues. The supported version that is affected is 3.6.1. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Product Lifecycle...

CVE-2026-62531

Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion component: Lifecycle Management. The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...