349 matches found
CVE-2021-40978
CVE-2021-40978 استغلال اجتياز الدليل في خادم التطوير المدمج الخاص بـ mkdocs يسمح Mkdocs 1.2.2 باجتياز الدليل عبر خادم التطوير المدمج الذي يستجيب على المنفذ 8000. فيما يلي بعض الأمثلة على المسارات التي تم استغلالها بنجاح: التأثير باستخدام هذه التقنية، يمكن جلب ملفات خارج دليل الجذر، مما يسمح لأي ش...
CVE-2026-20253
CVE-2026-20253 - Splunk Enterprise ⚡ الاستخدام البسيط استخدم هذا المشروع فقط في بيئات آمنة ومصرّح بها، مثل: الأجهزة الافتراضية المحلية حاويات Docker إعدادات معمل معزولة بيئات اختبار الاختراق المصرّح بها مثال على الإعداد: git clone https://github.com/HORKimhab/CVE-2026-20253 cd CVE-2026-20253...
CVE-2026-86121 Cua computer-server before 0.3.42 Unauthenticated RCE via Desktop Control
Cua computer-server versions before 0.3.42 skip authentication when the CONTAINERNAME environment variable is unset and bind to all interfaces by default, allowing unauthenticated attackers to execute arbitrary commands. Attackers can reach TCP port 8000 to run shell commands via the runcommand...
CVE-2026-86121 Cua computer-server before 0.3.42 Unauthenticated RCE via Desktop Control
Cua computer-server versions before 0.3.42 skip authentication when the CONTAINERNAME environment variable is unset and bind to all interfaces by default, allowing unauthenticated attackers to execute arbitrary commands. Attackers can reach TCP port 8000 to run shell commands via the runcommand...
CVE-2026-86121: Missing Authentication for Critical Function
Cua computer-server versions before 0.3.42 skip authentication when the CONTAINERNAME environment variable is unset and bind to all interfaces by default, allowing unauthenticated attackers to execute arbitrary commands. Attackers can reach TCP port 8000 to run shell commands via the runcommand...
MAL-2026-13359 Malicious code in test-dev-config (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44b80ff2bcf35e5c92c1c8a551b943d334f94793d693ce846707986613db8108 src/config.js hardcodes a remote host as the English-word phrase "Four Five P Nine Five P One Eight Six P Two Three Seven" and decodes it at import...
MAL-2026-11004 Malicious code in n8n-nodes-pwn (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae8222d3f90f4cff83a0840ee03f4b127946274f0215a73eadd6008404a2276e The package's Pwn.node.js executes malicious code at module load time when n8n loads this community node. It opens a TCP socket to 10.0.0.145:4444 an...
MAL-2026-5719 Malicious code in ect-654321 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec784a9a1926de8d2c18de41c996e69e10f7001bf9fdc7604edc22d5775b4540 ect-654321 contains only a package.json with a preinstall lifecycle hook that unconditionally executes wget...
CVE-2019-12120
An issue was discovered in ONAP VNFSDK through Dublin. By accessing port 8000 of demo-vnfsdk-vnfsdk, an unauthenticated attacker who already has access to pod-to-pod communication may execute arbitrary code inside that pod. All ONAP Operations Manager OOM setups are affected...
EUVD-2018-7393
Malware in sbrugna...
EUVD-2019-9486
Malware in sbrugna...
EUVD-2007-4892
Malware in sbrugna...
EUVD-2000-0443
Malware in sbrugna...
EUVD-2025-11428
Malicious code in bioql PyPI...
EUVD-2025-11427
Malicious code in bioql PyPI...
EUVD-2025-11418
Malicious code in bioql PyPI...
EUVD-2025-11405
Malicious code in bioql PyPI...
EUVD-2025-11435
Malicious code in bioql PyPI...