Malicious code in circuit-runtime-test (npm)

--- Credit: OpenSSF source...

Malicious code in circuit-runtime-screen-test (npm)

--- Credit: OpenSSF source...

Malicious code in circuit-runtime-screen (npm)

--- Credit: OpenSSF source...

Malicious code in circuit-runtime-presenter-test (npm)

--- Credit: OpenSSF source...

Malicious code in circuit-runtime-presenter (npm)

Source: ossf-package-analysis 3cdb658ec8c6d8d9af631260f52c7b97315d6714449b7e8bcd8ac60e65644951 The OpenSSF Package Analysis project identified 'circuit-runtime-presenter' @ 10.0.1 npm as malicious. It is considered malicious because: - The package communicates with a domain associated with...

Malicious code in circuit-runtime-ui-test (npm)

--- Credit: OpenSSF source...

SAP Solution Manager EEM RCE (CVE-2020-6207)

Exploits CVE-2020-6207 missing authentication on /EemAdminService/EemAdmin to upload an AssignJS EEM script and execute self.payload on a connected SAP Diagnostics Agent via Rhino/Java Runtime. !/usr/bin/env python3 -- coding: utf-8 -- """SAP Solution Manager EEM servlet RCE CVE-2020-6207 — rever...

Malicious code in taskforge-8xv (npm)

Source: amazon-inspector 2b8c18d7b4343e4c1d39e62a7d19eb9c5a9b4beb369fde301103623c3a7f0651 The package's sole function is a runtime loader that fetches a JavaScript payload from a configured origin's /api/x-handler endpoint and executes it in memory by piping the bytes into a detached node - child...

MAL-2026-15913 Malicious code in taskforge-8xv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b8c18d7b4343e4c1d39e62a7d19eb9c5a9b4beb369fde301103623c3a7f0651 The package's sole function is a runtime loader that fetches a JavaScript payload from a configured origin's /api/x-handler endpoint and executes it ...

The History Is the Detector: Executing CVE Patch History, End-To-End

Public vulnerability databases collect rich information about known software flaws, including their weakness types, affected components, and related patches. Fixing commits provide the exact code changes that removed these flaws. While these records capture why the original code was unsafe, they...

CVE-2026-85433 MOOS essential-moos through 10.0.1 pShare Unauthorized Runtime Route Reconfiguration

MOOS essential-moos pShare through 10.0.1 fails to properly authorize PSHARECMD messages, allowing any publisher to reconfigure network routes and listeners at runtime. Attackers can send crafted PSHARECMD messages with cmd=output or cmd=input parameters to open new listeners on arbitrary address...

CVE-2026-85433 MOOS essential-moos through 10.0.1 pShare Unauthorized Runtime Route Reconfiguration

MOOS essential-moos pShare through 10.0.1 fails to properly authorize PSHARECMD messages, allowing any publisher to reconfigure network routes and listeners at runtime. Attackers can send crafted PSHARECMD messages with cmd=output or cmd=input parameters to open new listeners on arbitrary address...

CVE-2026-85433

MOOS essential-moos pShare component (versions through 10.0.1 ) fails to properly authorize PSHARE_CMD messages, allowing any publisher to reconfigure network routes and listeners at runtime. Attackers can send crafted messages with cmd=output or cmd=input to open new listeners on arbitrary addre...

CVE-2026-85433 MOOS essential-moos through 10.0.1 pShare Unauthorized Runtime Route Reconfiguration

MOOS essential-moos pShare through 10.0.1 fails to properly authorize PSHARECMD messages, allowing any publisher to reconfigure network routes and listeners at runtime. Attackers can send crafted PSHARECMD messages with cmd=output or cmd=input parameters to open new listeners on arbitrary address...

NeuroSploit

🧠 NeuroSploit v4.0.0...

skillscript v0.40.1

Safe, reusable automation authored by agents. skillscript.ai • docs TL;DR — npm install -g skillscript-runtime && skillfile init && skillfile dashboard. See Quickstart. What is Skillscript? Skillscript came from asking: what would a Makefile look like if it built skills instead of binaries? The...

CVE-2026-62897

A flaw was found in .NET Framework. This integer overflow or wraparound vulnerability allows an unauthorized attacker to execute code locally. By exploiting this flaw, an attacker could gain control over the affected system. Mitigation No mitigation is required. Red Hat's .NET packages do not shi...

CVE-2026-62871

A flaw was found in .NET. An out-of-bounds write vulnerability allows an unauthorized attacker to execute arbitrary code locally. This could lead to a complete compromise of the affected system. Mitigation No mitigation is required. Red Hat's .NET packages do not ship the Windows Desktop runtime...

prismor v1.44.0

Prismor Runtime security for Claude Code, Codex, Langchain and other AI agents frameworks/harness. Prismor is highly customizable based on user's own policies. Observe or enforce mode to see agent activity in a local self-serve dashboard Website • Onboard with Skill...

phantom-frida v17.16.4-20260830-run38.1

phantom-frida phantom-frida builds Android Frida Server and Gadget from source while changing a targeted set of observable runtime identifiers. It is a builder and verification harness, not a promise that every application-specific detection method is defeated. The current compatibility target is...