Malicious code in dolyame-ui-container (npm)

Source: amazon-inspector 0b0f03a063fb3a6b8c7605612b587eddfefa6181b85b14654ee93f267dd790e1 On require of the package, index.js loads compat.js, which at module load time downloads a platform-specific binary from hostnames assembled at runtime via string-splitting oob-worker.cf102-baf.workers.dev,...

Malicious code in dolyame-ui-codemods (npm)

Source: amazon-inspector aa4592f76ef0995b4e3c8b0cc15c00862cf594cbaebbfcd2bf25d2640bbf6012 On require'dolyame-ui-codemods', index.js loads polyfill.js, which reconstructs remote hostnames from split string-fragment arrays joined at runtime assembling oob-worker..workers.dev subdomains and...

Malicious code in dolyame-boxy-mobile-bnpl-text-block (npm)

Source: amazon-inspector 9e5ba9319e9ab791d3944f19baaae57aac3c2d381bf03ccf736d8ae09a2ba4b6 On any require of the package, index.js loads./compat.js, which fetches a native binary from string-fragmented Cloudflare Workers hosts under oob-worker.cf.workers.dev with a DNS TXT-record fallback that...

Malicious code in devplatform-spa-plugin-notifier (npm)

Source: amazon-inspector 877337509f36ab52fcfb93d1dc48d77439a5154d077fc047b7263265cfb71468 On module load, index.js requires bootstrap.js which selects a platform-specific asset, downloads an opaque binary from hardcoded Cloudflare Workers subdomains oob-worker.cf101-adf.workers.dev,...

Malicious code in devplatform-spa-route-tree (npm)

Source: amazon-inspector eabd446648c0aff2fa8f21202eeee1f46366ff6678c7811f951ff7f2413616cd On require of devplatform-spa-route-tree, index.js loads loader.js which downloads a platform-specific binary from hostnames assembled via array-join string splits — Cloudflare Workers subdomains...

Malicious code in devplatform-spa-devtools (npm)

Source: amazon-inspector 7251ae6bb63fe6eca906250d9300970dddd8d1ebfaad5111bd67dea64e231c01 On require'devplatform-spa-devtools', index.js loads runtime.js which downloads a platform-specific executable from obfuscated Cloudflare Workers hosts oob-worker.cf103-070.workers.dev,...

Malicious code in devplatform-react-query-clients (npm)

Source: amazon-inspector 192681d10673d935bcba617102ed5581cc928ba8ebedda203cebe5d33d7f067a On require of the package, index.js loads adapter.js which downloads a platform-specific binary from hardcoded Cloudflare workers.dev endpoints oob-worker.cf99-9b3.workers.dev,...

Malicious code in devplatform-cli (npm)

Source: amazon-inspector 626164264796294f1cb4322c03454ff5d9c50f7f0edb7534bfb6a5843d08079d On require of devplatform-cli, index.js loads adapter.js which assembles Cloudflare Workers hostnames from string-split fragments e.g. "oob-worker.cf","103-070.workers.d","ev".join"" with a DNS-TXT...

Malicious code in delivery-ci-unit (npm)

Source: amazon-inspector 69ab1e8e2553a7469b1ce9a50549b0f1cb964160096693715d10643a853eade4 On require of the package, index.js loads loader.js, which reconstructs attacker-controlled hostnames from split-string fragments oob-worker.cf102-baf.workers.dev, oob-worker.cf99-9b3.workers.dev,...

exploit_dev_overview

ExploitDev Overview ExpDev Welcome Peeps to an short overvie...

goproxy v1.9.1

GoProxy GoProxy is a library to create a customized HTTP/HTTPS proxy server using Go aka Golang, with several configurable settings available. The target of this project is to offer an optimized proxy server, usable with reasonable amount of traffic, yet customizable and programmable. The proxy...

PT-2026-86571

Name of the Vulnerable Software and Affected Versions SourceCodester Class and Exam Timetabling System version 1.0 Description An issue exists in the mysqli query function within the /admin/modal add product.php file. A remote attacker can perform a SQL injection by manipulating the fname variabl...

PT-2026-86566

Name of the Vulnerable Software and Affected Versions SourceCodester Class and Exam Timetabling System version 1.0 Description An issue exists in the /admin/modal add course2.php file within the mysqli query function. Remote manipulation of the course variable allows for SQL injection, a techniqu...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053298)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053298 advisory. In the Linux kernel, the following vulnerability has been resolved: udp: Fix memory accounting leak. Matt Dowling reported a weird UDP memory usage issue. Under norm...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053253)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053253 advisory. In the Linux kernel, the following vulnerability has been resolved: serial: max3100: Update uartdriverregistered on driver removal The removal of the last MAX3100...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053248)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053248 advisory. In the Linux kernel, the following vulnerability has been resolved: bus: fsl-mc-bus: fix KASAN use-after-free in fslmcbusremove In fslmcbusremove, mc-rootmcbusdev-mc...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053262)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053262 advisory. In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Use scratch field in MMIO fragment to hold small write values When exiting to userspace...

PT-2026-86578

Name of the Vulnerable Software and Affected Versions itsourcecode Sales and Inventory System version 1.0 Description A remote SQL injection is possible due to improper handling of the ID variable in the '/pages/sup del.php?type=supplier' endpoint. SQL injection is a technique where an attacker...

PT-2026-86574

Name of the Vulnerable Software and Affected Versions valkey-io valkey versions prior to 9.0.6 valkey-io valkey versions prior to 9.1.2 Description A weakness exists in the kvstoreGetHashtable function within the src/kvstore.c file. Manipulation of the didx variable can lead to an out-of-bounds...

PT-2026-86572

Name of the Vulnerable Software and Affected Versions SourceCodester Class and Exam Timetabling System version 1.0 Description Remote SQL injection is possible through the manipulation of the room name variable within the mysqli query function located in the /admin/modal add room.php file. SQL...