Medusa

Welcome to Medusa...

medusa

Sponsored by: MEDUSA A modular automation framework and script repository for runtime testing and investigating Android and iOS apps, designed for penetration testers and malware analysts. It lets you plug in modules to bypass protections like SSL pinning, inspect network/WebView activity, trace...

CVE-2022-39841

CVE-2022-39841 Medusa's leaky WebSocket For more information please read the blog post Summary A critical vulnerability in Medusa allows for information leakage, including plaintext credentials, by attaching to an unauthenticated WebSocket and waiting for a user to make a configuration change...

medusa

🐍 MEDUSA - AI Security Scanner...

Medusa

Medusa Medusa is a cross-platform agent compatible with both Python 3.8 and Python 2.7. Installation To install Medusa, you'll need Mythic v3 installed on a remote computer. You can find installation instructions for Mythic at the Mythic project page. From the Mythic install root, run the command...

seccubus

About Seccubus Seccubus automates regular vulnerability scans with various tools and aids security people in the fast analysis of its output, both on the first scan and on repeated scans. On repeated scan delta reporting ensures that findings only need to be judged when they first appear in the...

fortra-goanywhere-mft-vulnerability-detection

Обнаружение уязвимостей Fortra GoAnywhere MFT Шаблоны Nuclei для обнаружения уязвимостей Fortra GoAnywhere MFT. Создано@rxerium Обзор Шаблоны обнаружения CVE для Fortra GoAnywhere Managed File Transfer MFT, включая несколько уязвимостей CISA KEV, эксплуатируемых группами программ-вымогателей...

GO-2024-2918 vulnerabilities

Vulnerabilities for packages: velero, zarf, argo-events, kubescape, step-ca, chezmoi, hugo-extended, rekor, trivy, rclone, ksops, opentelemetry-collector-contrib, flux-kustomize-controller, buildkitd, tkn, bank-vaults, hugo, zot, pulumi, grafana-mimir, cosign, sops, tekton-chains, rook,...

Malicious code in @zaamx/netme (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ff8cae34ceeb5f691ca4c4f92fbe10d0bc4e6b9eddf081e7c99ab1ee6193c98 This Medusa plugin hardcodes outbound POST requests to https://n8n.lidxi.com/webhook/ in multiple subscribers and admin routes, with no configuration...

Malicious code in @tallyui/connector-medusa (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3acb08c5699637240eec2741252206938cd0e0be4b997523e2100925456e2e39 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-3515 Malicious code in @tallyui/connector-medusa (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3acb08c5699637240eec2741252206938cd0e0be4b997523e2100925456e2e39 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

GHSA-6W46-J5RX-G56G vulnerabilities

Vulnerabilities for packages: open-webui, py3-cassandra-medusa...

CVE-2025-71176 vulnerabilities

Vulnerabilities for packages: open-webui, py3-cassandra-medusa...

GHSA-6W46-J5RX-G56G vulnerabilities

Vulnerabilities for packages: apache-beam-python-3.11-sdk, localstack, py3-cassandra-medusa, apache-beam-python-3.12-sdk, apache-beam-python-3.13-sdk, request-1276, open-webui...

CVE-2025-71176 vulnerabilities

Vulnerabilities for packages: apache-beam-python-3.11-sdk, localstack, py3-cassandra-medusa, apache-beam-python-3.12-sdk, apache-beam-python-3.13-sdk, request-1276, open-webui...

CVE-2026-34591 vulnerabilities

Vulnerabilities for packages: py3-cassandra-medusa...

GHSA-2599-H6XX-HPXP vulnerabilities

Vulnerabilities for packages: py3-cassandra-medusa...

GHSA-2599-H6XX-HPXP vulnerabilities

Vulnerabilities for packages: py3-cassandra-medusa...

CVE-2026-34591 vulnerabilities

Vulnerabilities for packages: py3-cassandra-medusa...

Storm-1175 Deploys Medusa Ransomware Within 24 Hours of Flaw Disclosure

Microsoft researchers have uncovered a fast-moving group, Storm-1175, launching high-speed Medusa ransomware attacks against healthcare and education sectors in the UK, US, and Australia by exploiting security flaws in as little as 24 hours...