3079070 matches found
Exploit for Interpretation Conflict in Wordpress
wp2shell — WordPress Core Pre-Auth RCE CVE-2026-63030 Ba...
Malicious code in claude-remote-agent (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9416d15abb1ba3947af0a74a696052f6b32ec0a1d18a0e753273da4806f534ae claude-remote-agent connects to a hardcoded WebSocket server at wss://claude.pishchykau.eu and exposes the installer's host to remote control. In...
MAL-2026-13376 Malicious code in claude-remote-agent (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9416d15abb1ba3947af0a74a696052f6b32ec0a1d18a0e753273da4806f534ae claude-remote-agent connects to a hardcoded WebSocket server at wss://claude.pishchykau.eu and exposes the installer's host to remote control. In...
Exploit for NULL Pointer Dereference in Linux Linux_Kernel
--- CVE-2026-23002 – 5G NAS Message Buffer Overflow in gNode...
Malicious code in ezdiscordbots (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a715452291e1bd779802f51dc90eca91740307e0bee7b9e2ca94f6f863f6a921 package.json declares a postinstall script sudo node install.js that runs install.js with root privileges on the installer's machine. Both install.js...
MAL-2026-13377 Malicious code in ezdiscordbots (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a715452291e1bd779802f51dc90eca91740307e0bee7b9e2ca94f6f863f6a921 package.json declares a postinstall script sudo node install.js that runs install.js with root privileges on the installer's machine. Both install.js...
DEBIAN-CVE-2026-71313
rclone is a command-line program to sync files and directories to and from different cloud storage providers. From v1.51.0 until v1.75.0, the local backend in backend/local/local.go relies on the configurable filename encoder to prevent remote filename data from becoming operating-system path...
CVE-2026-71313
rclone is a command-line program to sync files and directories to and from different cloud storage providers. From v1.51.0 until v1.75.0, the local backend in backend/local/local.go relies on the configurable filename encoder to prevent remote filename data from becoming operating-system path...
CVE-2026-34966
Gitea prior to 1.27.0 contains a server-side request forgery vulnerability that allows authenticated attackers to bypass SSRF protections by exploiting HTTP fetch operations in migration and OAuth avatar code paths that use Go's default http.Get without a custom DialContext. Attackers can supply...
CVE-2026-71312
rclone is a command-line program to sync files and directories to and from different cloud storage providers. Prior to v1.75.0, rclone interpolates remote SFTP paths into PowerShell hash commands in backend/sftp/sftp.go, and quoteOrEscapeShellPath escapes only ASCII apostrophe even though...
DEBIAN-CVE-2026-71312
rclone is a command-line program to sync files and directories to and from different cloud storage providers. Prior to v1.75.0, rclone interpolates remote SFTP paths into PowerShell hash commands in backend/sftp/sftp.go, and quoteOrEscapeShellPath escapes only ASCII apostrophe even though...
MAL-2026-13378 Malicious code in npm-dc-dev (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91248167ea052dfca231e837bd645444f362dc087be9a7c04f1cf4aeec4d6723 package.json declares "postinstall": "node test.js". test.js top-level require'.'s index.js and awaits an exported fromstr. index.js consists of a...
Malicious code in npm-dc-dev (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91248167ea052dfca231e837bd645444f362dc087be9a7c04f1cf4aeec4d6723 package.json declares "postinstall": "node test.js". test.js top-level require'.'s index.js and awaits an exported fromstr. index.js consists of a...
Exploit for Use After Free in Linux Linux_Kernel
CVE-2026-23001 – Hugging Face Transformers Model Deserializati...
Malicious code in app-api-sdk (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2be81204ed300a759662ca3315431eec9dbb11392232f04cc58d1a815fb94b4 On npm install, scripts.postinstall executes test.js, which performs three attacker-beneficial actions against the installer's host. First, it...
MAL-2026-13375 Malicious code in app-api-sdk (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2be81204ed300a759662ca3315431eec9dbb11392232f04cc58d1a815fb94b4 On npm install, scripts.postinstall executes test.js, which performs three attacker-beneficial actions against the installer's host. First, it...
Exploit for Path Traversal in Gogs
CVE-2025-8110 – Gogs ≤ 0.13.3 RCE PoC Proof-of-Concept for...
GHSA-7P4M-QXVV-G567 rclone: Local Encoding Path Traversal
Summary The local backend relies on its configurable filename encoder to prevent remote filename data from becoming operating-system path syntax. If a local destination uses an encoding that omits Dot, such as Slash, None, or Raw, a remote object's standard-encoded ．． component is decoded into an...
rclone: Local Encoding Path Traversal
Summary The local backend relies on its configurable filename encoder to prevent remote filename data from becoming operating-system path syntax. If a local destination uses an encoding that omits Dot, such as Slash, None, or Raw, a remote object's standard-encoded ．． component is decoded into an...
CVE-2026-71313
rclone is a command-line program to sync files and directories to and from different cloud storage providers. From v1.51.0 until v1.75.0, the local backend in backend/local/local.go relies on the configurable filename encoder to prevent remote filename data from becoming operating-system path...