yararules

yararules Yara رهيبة؛ قواعد أيضًا. هذا مستودع لقواعد YARA الخاصة بي مجمّعة مع قواعد YARA المتاحة للعموم، جُمعت من مصادر مفتوحة، وتم صقلها واختبارها بضمان الجودة QA بواسطتي. التواصل: craiu at protonmail.ch...

Cheshire

Cheshire ضمان جودة الحمولة قبل الإطلاق لـ Adaptix، مدعوم من LitterBox. Cheshire هو إضافة خدمة service plugin لنظام Adaptix C2 تعمل كجسر بين عميل Adaptix وبيئة الاختبار المعزولة LitterBox. من داخل واجهة Adaptix، يمكن للمشغّل اختيار أي ملف ثنائي وإرساله عبر سلسلة المحللات الكاملة في LitterBox Stati...

Byepervisor

Byepervisor Riepilogo Exploit dell'hypervisor per PS5 per firmware = 2.xx. Nel repository sono contenute due vulnerabilità e relative catene di exploit, indipendenti tra loro; è possibile usarne una qualsiasi. Un exploit è fornito principalmente per preservazione /oldjumptableexploit, serve solo ...

dnsmasq-cve-2026

Strumento di Verifica QA dnsmasq CVE-2026 Strumento black-box automatizzato per verificare 6 vulnerabilità di dnsmasq maggio 2026. Invia pacchetti di attacco a un DUT attivo e riporta PASS/FAIL — non è necessario l'accesso al codice sorgente. Avvio rapido root@kitploit: Set DUT DNS to your laptop...

CVE-2026-27544

Unauthenticated Remote Code Execution RCE in QA Analytics = 5.2.0.0 versions...

CVE-2026-27544

Unauthenticated Remote Code Execution RCE in QA Analytics = 5.2.0.0 versions...

EUVD-2026-57939

Unauthenticated Remote Code Execution RCE in QA Analytics = 5.2.0.0 versions...

CVE-2026-27544 WordPress QA Analytics plugin <= 5.2.0.0 - Remote Code Execution (RCE) vulnerability

Unauthenticated Remote Code Execution RCE in QA Analytics = 5.2.0.0 versions...

CVE-2026-27544

CVE-2026-27544 affects the WordPress QA Analytics plugin (versions ≤ 5.2.0.0). It enables unauthenticated Remote Code Execution via a flaw described in multiple sources. The provided documents do not specify the root cause, affected component details beyond the plugin/version, or a confirmed reme...

PT-2026-71504

Unauthenticated Remote Code Execution RCE in QA Analytics = 5.2.0.0 versions...

WordPress QA Analytics plugin <= 5.2.0.0 - Remote Code Execution (RCE) vulnerability

Remote Code Execution RCE vulnerability discovered by K. Sorrachat in WordPress Plugin QA Analytics versions = 5.2.0.0...

CVE-2026-64829 Question2Answer 1.8.8 Session Fixation via Forgot-Password Flow

Question2Answer through 1.8.8 contains a session invalidation vulnerability that allows attackers with a previously obtained remember-me cookie to retain authenticated access by exploiting the forgot-password reset flow's failure to clear the sessioncode field in qa-include/app/users-edit.php...

Smart_Contract_Researcher_POC

Smart Contract Security Research Portfolio hailthelord...

CVE-2026-3321 Authorization Bypass in ON24 Q&A chat

A vulnerability of authorization bypass through user-controlled key in the 'console-survey/api/v1/answer/EVENTID/TIMESTAMP/' endpoint. Exploiting this vulnerability would allow an unauthenticated attacker to enumerate event IDs and obtain the complete Q&A history. This publicly exposed data may...

CVE-2026-3321

A vulnerability of authorization bypass through user-controlled key in the 'console-survey/api/v1/answer/EVENTID/TIMESTAMP/' endpoint. Exploiting this vulnerability would allow an unauthenticated attacker to enumerate event IDs and obtain the complete Q&A history. This publicly exposed data may...

MAL-2026-2212 Malicious code in @opengov/qa-record-types-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0be39ed161d642824f2ce1f8511e03759918909ba0218265174294129a172d01 The package @opengov/qa-record-types-api was found to contain malicious code. Source: google-open-source-security...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. The publishing pipeline of this package was compromised as the result of Trivy's GitHub Actions compromise and a malicious versions were released on NPM. They contain malicious code, and its content was NOT yet...

ChartAttack: Testing the Vulnerability of LLMs to Malicious Prompting in Chart Generation

Multimodal large language models MLLMs are increasingly used to automate chart generation from data tables, enabling efficient data analysis and reporting but also introducing new misuse risks. In this work, we introduce ChartAttack, a novel framework for evaluating how MLLMs can be misused to...

MAL-2026-142 Malicious code in rt-qa-sampler (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01d57d7fdf7de875c7da43a03defcfe1df8c66f3a72a0802585f903e5e4e4a19 The package rt-qa-sampler was found to contain malicious code. Source: ghsa-malware 7db994932160920a0a11f0ca0419898a6c0552e1f38b68ccf9bb6b59d72f98fb...

Malicious Package

Overview rt-qa-sampler is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...