ROOT-APP-NPM-CVE-2026-44575 CVE-2026-44575 in next - Patched by Root

Root has patched CVE-2026-44575 in the next package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-GHSA-8H8Q-6873-Q5FJ GHSA-8h8q-6873-q5fj in next - Patched by Root

Root has patched GHSA-8h8q-6873-q5fj in the next package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-64649 CVE-2026-64649 in next - Patched by Root

Root has patched CVE-2026-64649 in the next package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-6321 CVE-2026-6321 in fast-uri - Patched by Root

Root has patched CVE-2026-6321 in the fast-uri package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-75975 CVE-2026-75975 in fast-uri - Patched by Root

Root has patched CVE-2026-75975 in the fast-uri package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-45736 CVE-2026-45736 in ws - Patched by Root

Root has patched CVE-2026-45736 in the ws package for Root:npm. Multiple fixed versions available...

Malicious Package

Overview api-typings is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorshi...

Malicious Package

Overview @bb1ptest23/test-paket is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packag...

ROOT-OS-DEBIAN-13-CVE-2026-11856 CVE-2026-11856 in curl - Patched by Root

Root has patched CVE-2026-11856 in the curl package for Root:Debian:13. Multiple fixed versions available...

Malicious Package

Overview @consts/links is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

CVE-2020-7598

es-define-property Object.defineProperty, but not IE 8's broken one. Example const assert = require'assert'; const $defineProperty = require'es-define-property'; if $defineProperty assert.equal$defineProperty, Object.defineProperty; else if Object.defineProperty assert.equal$defineProperty, false...

net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME

A flaw was found in the net package of Go golang, specifically when using the LookupCNAME function with the cgo DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name CNAME response. This can trigger a double-free of C memory, leading to a crash and a Denial of...

Malicious code in @bb1ptest23/test-paket (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88718be23e6bf753453adc1110580e87b675e7881b945d419746afe4bebcfa5e The package was found to contain malicious code or consuming dependency that contains malicious code Source: ossf-package-analysis...

CVE-2026-45321-Tanstack

Simulación de Ataque a la Cadena de Suministro — CVE-2026-45321 TanStack Laboratorio educativo para entender ataques a la cadena de suministro de npm, abuso de CI/CD y ejecución de código en tiempo de instalación Descargo de responsabilidad Este proyecto se ha creado únicamente para: aprendizaje ...

CVE

Control Tower Notification Enabler Este paquete cdk instala una función Lambda, con un rol IAM asociado, y suscribe la función Lambda a las notificaciones de seguridad agregadas de Control Tower. En caso de una violación de una regla de Control Tower por ejemplo, un bucket S3 de acceso público, l...

chef-os-hardening

os-hardening Chef cookbook 1 2 설명 이 cookbook은 다양한 보안 관련 구성을 제공하여 전반적인 기본 보호를 제공합니다. 다음 항목을 구성합니다: 서명된 패키지만 허용하는 등 패키지 관리 구성 알려진 문제가 있는 패키지 제거 pam 및 pamlimits 모듈 구성 Shadow password suite 구성 시스템 경로 권한 구성 soft limits를 통한 코어 덤프 비활성화 시스템 콘솔로 루트 로그인 제한 SUID 설정 sysctl을 통한 커널 매개변수 구성 다음 항목은 수행하지 않습니다: 시스...

CVE-2026-52617

CVE-2026-52617 — @sworddut/mcp-ffmpeg-helper: OS command injection via ffmpeg tool options runFFmpegCommand passes a string built from MCP tool parameters to spawn…, shell: true , so shell metacharacters in options, format, codec, pixelFormat or extraOptions execute on the host running the server...

PayloadAutomation

What is Payload Automation? Now available as a PyPi package: https://pypi.org/project/payload-automation/ Payload Automation is a collection of Python classes to serve as a bridge between Sleep and Python which can be used to help automate payload development, testing, opsec checking, and...

CVE-2022-0165

Insignias Licencia MIT Instalación 1. Instala Python3 y pip Instrucciones aquí Si no puedes resolver esto, realmente no deberías estar usando esto Instalar mediante pip pip install CVE-2022-0165 Ejecuta el siguiente comando para verificar CVE-2022-0165 -h Configuraciones 2. Hemos integrado la API...

CVE-2021-42063

Badges Licencia MIT Instalación 1. Instala Python3 y pip Instrucciones aquí Si no puedes resolver esto, realmente no deberías estar usando esto Instalar vía pip pip install CVE-2021-42063 Ejecuta el siguiente comando para verificar CVE-2021-42063 -h Configuraciones 2. Integramos con la API de...