CVE-2024-38526

CVE-2024-38526 - Polyfill Scanner: x Scanner di massa per URL Il CDN polyfill.io, precedentemente compromesso per servire codice dannoso, è stato ora messo in sicurezza con l'ultima correzione in pdoc 14.5.1. Panoramica Rileva potenziali problemi Automatizza attività ripetitive con facilità...

Malicious code in tailwindcss-3d-animate (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc554005eb9004f33d22597b929261d865d4bfe991d0b99d148dc25fffb7e97c index.js re-exports the legitimate tailwindcss-3d plugin and then appends evalatob"..." at module top level, so the payload runs on any...

MAL-2026-14567 Malicious code in tailwindcss-3d-animate (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc554005eb9004f33d22597b929261d865d4bfe991d0b99d148dc25fffb7e97c index.js re-exports the legitimate tailwindcss-3d plugin and then appends evalatob"..." at module top level, so the payload runs on any...

MAL-2026-14568 Malicious code in tailwindcss-form-styles (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bf4e5fbd59048a5ab6a5c04ad7c98e7246c9cf57363d95acc84f92d8ca883f4 src/index.js re-exports the legitimate tailwindcss-forms plugin as a working cover, then appends an obfuscator.io-style 0x string-array cipher that...

Malicious code in tailwindcss-form-styles (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bf4e5fbd59048a5ab6a5c04ad7c98e7246c9cf57363d95acc84f92d8ca883f4 src/index.js re-exports the legitimate tailwindcss-forms plugin as a working cover, then appends an obfuscator.io-style 0x string-array cipher that...

CVE-2026-59315

Spring Cloud Config Monitor is susceptible to Denial of Service attacks via malicious payloads. Affected versions include Spring Cloud Config 5.0.0–5.0.4, 4.3.0–4.3.4, 4.0.0–4.2.8, and 3.1.14 and earlier . The vulnerability is scored CVSS 5.3 (Medium) with a network attack vector, low complexity,...

CVE-2026-59315 Spring Cloud Config Monitor Denial of Service

The Spring Cloud Config Monitor is susceptible to Denial of Service attacks via malicious payloads. Spring Cloud Config 5.0.0 - 5.0.4 Spring Cloud Config 4.3.0 - 4.3.4 Spring Cloud Config 4.0.0 - 4.2.8 Spring Cloud Config 3.1.14 and earlier...

EUVD-2026-67197

The Spring Cloud Config Monitor is susceptible to Denial of Service attacks via malicious payloads. Spring Cloud Config 5.0.0 - 5.0.4 Spring Cloud Config 4.3.0 - 4.3.4 Spring Cloud Config 4.0.0 - 4.2.8 Spring Cloud Config 3.1.14 and earlier...

EUVD-2026-67196

Applications that build a Content-Disposition header value from untrusted input may be vulnerable to HTTP response splitting when the input is a malicious file name. Spring Framework 7.0.0 - 7.0.8 Spring Framework 6.2.0 - 6.2.19 Spring Framework 6.1.0 - 6.1.28 Spring Framework 6.0.0 - 6.0.30 Spri...

CVE-2026-59288

The GraphiQL page bundled with Spring for GraphQL sends requests to the application's GraphQL endpoints. An attacker can share a malicious URL that, when visited by a victim, causes the victim's browser to leak confidential information to the attacker's website. This is an information exposure is...

EUVD-2026-67177

The GraphiQL page bundled with Spring for GraphQL sends requests to the GraphQL endpoints of the application. An attacker can share a malicious URL so that the victim's browser might leak confidential information to the attacker's website. Spring for GraphQL 2.0.0 - 2.0.4 Spring for GraphQL 1.4.0...

CVE-2026-76218

A flaw was found in GitPython. This vulnerability allows a remote attacker to achieve arbitrary code execution. By supplying a specially crafted template parameter to the Repo.init function, an attacker can point to a directory containing malicious Git hooks. When Git operations are performed on...

CVE-2018-6574

CVE-2018-6574 Passos para reproduzir: 1. Crie um arquivo .c contendo o comando malicioso revshell: root@kitploit: include include static void malicious attributeconstructor; void malicious system""; 2. Compile-o usando GCC. Você deve compilá-lo exatamente na mesma arquitetura e SO do alvo por...

pollyscan

Pollyscan-CVE-2024-38526-Scanner di Vulnerabilità È uno strumento di sicurezza leggero progettato per rilevare CVE-2024-38526, l'attacco alla supply chain di Polyfill.io. Esegue la scansione delle dipendenze web per individuare iniezioni dannose e rilevamento automatico. Installazione git clone...

CVE-2026-34674

Substance3D - Sampler versions 5.1.3 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

msidump

msidump MSI Dump - a tool that analyzes malicious MSI installation packages, extracts files, streams, binary data and incorporates YARA scanner. On Macro-enabled Office documents we can quickly use oletools mraptor to determine whether document is malicious. If we want to dissect it further, we...

uaf-2023-28205

CVE-2023-28205: Vulnerabilità Use-After-Free in Apple WebKit Questa vulnerabilità può essere sfruttata tramite contenuti web maliziosamente predisposti, consentendo agli aggressori di eseguire codice arbitrario. Descrizione Il codice attiva una vulnerabilità use-after-free UAF ritardando l'aggiun...

CVE-2024-52510

POC di bypass di X-E2EE-SIGNATURE di Nextcloud Riepilogo Durante il normale funzionamento del protocollo E2EEv2 di Nextcloud, i client firmano crittograficamente i metadati delle cartelle prima di caricarli sul server. Questo garantisce che i metadati non siano stati manomessi quando vengono...

tanscript-exploit-check

Attacco alla supply chain Mini Shai-Hulud — Controllore IOC root@kitploit: curl -fsSL https://raw.githubusercontent.com/nkopylov/tanscript-exploit-check/main/check-tanstack-exploit.sh | bash Oppure clona ed esegui localmente: root@kitploit: git clone...

threatDemos

🚨 Repository di Dimostrazioni di Minacce alla Sicurezza Android Una raccolta completa di prove di concetto di vulnerabilità di sicurezza Android e vettori di attacco Questo repository funge da risorsa educativa che mostra minacce alla sicurezza Android reali e le loro corrispondenti strategie di...