MAL-2026-17597 Malicious code in eth-address-utils (RubyGems)

RubyGems runs this gem's native extension script ext/reqthrottlemini/extconf.rb during gem install. The script exits without action on CI runners and sandboxes, based on CI environment variables, the hostname, the username and the working directory. It continues if the system uptime is over 30...

Malicious code in eth-address-utils (RubyGems)

RubyGems runs this gem's native extension script ext/reqthrottlemini/extconf.rb during gem install. The script exits without action on CI runners and sandboxes, based on CI environment variables, the hostname, the username and the working directory. It continues if the system uptime is over 30...

CVE-2019-11395

Exploit CVE-2019-11395 🛡️ Acerca de CVE-2019-11395 🕵️ La vulnerabilidad CVE-2019-11395 describe una vulnerabilidad de desbordamiento de búfer en la aplicación de correo electrónico MailCarrier 2.51, que permite la ejecución remota de código. La vulnerabilidad ocurre en los procesos SMTP RCPT TO,...

CVE-2026-21858

CVE-2026-21858 RCE PoC environment for n8n 1.120.4 with a Form Trigger workflow and an exploit script. Requirements Docker Docker Desktop on Windows Python 3.x attack side Files Dockerfile — build the n8n vulnerable environment run.bat — run the container Windows workflow.txt — n8n workflow...

SSP-Assignment-3-RCEYouLater

CVE-2023-46604: Prueba de Concepto de RCE en Apache ActiveMQ Asignación: SSP Assignment 3 Equipo: RCE You Later Miembros: Banica Horia Alexandru, Comarlau Vlad-Constantin Enlace de video del uso del repositorio para realizar la PoC:https://www.youtube.com/watch?v=vum4qTF4ygU 🚨 Descripción general...

Important: Red Hat Security Advisory: freerdp security update

An update for freerdp is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

FreeRDP: FreeRDP: Remote code execution via heap buffer overflow in Server Redirection PDU

A flaw was found in FreeRDP. A malicious Remote Desktop Protocol RDP server can exploit a heap-based buffer overflow vulnerability in the negosendnegotiationrequest function. By sending a specially crafted Server Redirection PDU message with an attacker-controlled LoadBalanceInfo field, the serve...

FreeRDP: FreeRDP: Remote code execution via uninitialized heap memory disclosure

A flaw was found in FreeRDP. An uninitialized heap memory disclosure vulnerability exists in the urbdrc USB redirection channel. A malicious Remote Desktop Protocol RDP server can exploit this by inducing failing USB transfers, allowing it to read uninitialized heap memory from the client. This...

CVE-2022-21907-Vulnerability-PoC

CVE-2022-21907 Descripción - POC para CVE-2022-21907: Vulnerabilidad de ejecución remota de código en la pila del protocolo HTTP. - Creado por antx el 2022-01-17, solo algunas pequeñas correcciones de Michele "[email protected]" Detalle - Vulnerabilidad de ejecución remota de código en la...

Stagefright-cve-2015-1538-1

Stagefright-cve-2015-1538-1 Discovered by Joshua J. Drake @jduck of ZIMPERIUM zLabs and fixed his project by Niranjan Shrestha @niranjanshr13. Exploit for RCE Vulnerability CVE-2015-1538 1 Integer Overflow in the libstagefright MP4 'stsc' atom handling Don't forget, the output of "createmp4" can ...

MAL-2026-17561 Malicious code in insomnia-plugin-api-lint-helper (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3572e41f2e2e83a3156c1b24bf8684c0149a508e45626e80c592657cfb475ba index.js, the package's main entry, runs at require time with no user interaction. On load it spawns OS-native calculator processes via...

Malicious code in insomnia-plugin-api-lint-helper (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3572e41f2e2e83a3156c1b24bf8684c0149a508e45626e80c592657cfb475ba index.js, the package's main entry, runs at require time with no user interaction. On load it spawns OS-native calculator processes via...

Malicious code in hardhat-spack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e59c971c63de9d0a7f66c26093f528164990af10eca00a3a36b97d0c8b0a6d0d The package is published as hardhat-spack but presents itself internally as a pino-like logger. Its main export is a middleware factory that spawns...

MAL-2026-17560 Malicious code in hardhat-spack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e59c971c63de9d0a7f66c26093f528164990af10eca00a3a36b97d0c8b0a6d0d The package is published as hardhat-spack but presents itself internally as a pino-like logger. Its main export is a middleware factory that spawns...

Malicious code in @angulaar/core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42861c7641349d2f58380e4f81b13ad9738dd254f224e9f7f239d9cf940cf792 The package's package.json defines a postinstall lifecycle script that fetches a JavaScript file from a non-publisher host gitflic.ru, proxied via...

MAL-2026-17537 Malicious code in @angulaar/core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42861c7641349d2f58380e4f81b13ad9738dd254f224e9f7f239d9cf940cf792 The package's package.json defines a postinstall lifecycle script that fetches a JavaScript file from a non-publisher host gitflic.ru, proxied via...

Malicious code in @abgular/core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c4c8470613dc3a49e249f1a9f91bc756bb9b4323c78268b35816f07e78a0a9b Package name @abgular/core is a single-character transposition of @angular/core and copies that package's description, author, and repository metadat...

MAL-2026-17532 Malicious code in @abgular/core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c4c8470613dc3a49e249f1a9f91bc756bb9b4323c78268b35816f07e78a0a9b Package name @abgular/core is a single-character transposition of @angular/core and copies that package's description, author, and repository metadat...

Malicious code in @anuglar/core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f23ef78cc88817166cff7f8fdf3f1839c610880d960d9394e286da232058f98 Package name '@anuglar/core' is a one-character transposition of '@angular/core' and copies the legitimate package's description 'Angular - the core...

react2shellexploitvisualized

Visualización de React2Shell CVE-2025-55182 Una visualización educativa interactiva que explica la vulnerabilidad React2Shell: un fallo crítico de ejecución remota de código con puntuación CVSS 10.0 en React Server Components. Qué es esto Un recorrido narrado de 5 pasos que explica: 1. SSR...