Malicious code in crypto-javascript (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee2e9ca362c982e5c75ed96c626b87ca91d85fb6cb52c89c7a8def86851017b8 Package name typosquats the widely-used crypto-js library and mirrors its API surface, README, and repository references to appear legitimate...

PT-2026-35239

Name of the Vulnerable Software and Affected Versions IBM Langflow OSS versions 1.0.0 through 1.10.0 Description A code injection issue exists in the Policies component's ToolGuard integration that bypasses the allow custom components=false security control. The validation mechanism only checks t...

F5 WAF For NGINX Installed (Linux)

Binary data f5waffornginxnixinstalled.nbin...

EUVD-2000-0744

Malware in sbrugna...

enumy

Enumy Enumy is an ultra fast portable executable that you drop on target Linux machine during a pentest or CTF in the post exploitation phase. Running enumy will enumerate the box for common security vulnerabilities. Installation You can download the final binary from the release x86 or x64 tab...

IBM MQIPT Redistributable Installed (Linux)

Binary data ibmmqiptportablenixinstalled.nbin...

Zabbix Proxy Installed (Linux)

Binary data zabbixproxynixinstalled.nbin...

Containerd Installed (Linux)

Binary data containerdinstalled.nbin...

CRI-O Installed (Linux)

Binary data cri-odetect.nbin...

MongoDB Shell Installed (Linux)

Binary data mongodbshelllinuxinstalled.nbin...

GoodAccess Installed (Linux)

Binary data goodaccessnixinstalled.nbin...

Podman Installed (Linux)

Binary data podmandetect.nbin...

Ollama Installed (Linux)

Binary data ollamanixinstalled.nbin...

OpenVPN Installed (Linux)

Binary data openvpnnixinstalled.nbin...

RemotePC Installed (Linux)

Binary data remotepcnixinstalled.nbin...

Termius Installed (Linux)

Binary data termiusnixinstalled.nbin...

Rclone Installed (Linux)

Binary data rclonenixinstalled.nbin...

Johnson Controls ExacqVision Web Server Installed (Linux)

Binary data johnsoncontrolsexacqvisionwebservernixinstalled.nbin...

UPX 安全漏洞

UPX is a portable and extensible executable compression program. A security vulnerability exists in UPX, which stems from function PackLinuxElf32::invertptdynamic in plxelf.cpp:1688 that causes the "bucket" variable to point to an inaccessible address...

SUSE CVE-2017-15056

plxelf.cpp in UPX 3.94 mishandles ELF headers, which allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted binary file, as demonstrated by an Invalid Pointer Read in PackLinuxElf64::unpack...