554 matches found
Malicious Package
Overview @mynameiskhn/express-security-tool-v1 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization...
Malicious Package
Overview @mynameiskhn/express-security-tool is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and...
[SECURITY] Fedora 43 Update: pam-1.7.1-5.fc43
PAM Pluggable Authentication Modules is a system security tool that allows system administrators to set authentication policy without having to recompile programs that handle authentication...
afrog v3.5.5
A Security Tool for Bug Bounty, Pentest and Red Teaming English • 中文 Download • Wiki • Afrog PoC 规则编写权威指南 PoC Contributors 不动明王 | 雪山 | White-hua | 123456 | ifofor | Air | !Typora-Logoh...
PT-2026-59311
Description MobSF's read sqlite function in mobsf/MobSF/utils.py lines 542-566 uses Python string formatting % to construct SQL queries with table names read from a SQLite database's sqlite master table. When a security analyst uses MobSF to analyze a malicious mobile application containing a...
VS Code Extension Security Scanner
A local security auditing tool that scans installed VS Code, VS Code Insiders, VS Code Server, VS Code OSS, and Cursor extensions for potentially suspicious behaviors. The script enumerates extension directories, parses extension metadata, and flags extensions that automatically execute on startu...
Exploit_sin_monitos_v3_4_3
Exploitsinmonitosv343 Escaner l...
MAL-2026-5552 Malicious code in @my_name_is_khn/express-security-tool-v3 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42987119346b57a7014465a5a7bec3c00d1928e7e41d999152aa4e2f814c298e On npm install, the package's postinstall runs scripts/inject.js, which walks up from the current working directory to locate the consumer project's...
Malicious code in mnemonic-safety-check (npm)
A coordinated supply-chain attack comprising 10 npm packages published by maintainer ddjidd5640 [email protected] within a 48-hour window 2026-05-19T03:55Z – 2026-05-21T04:31Z. All packages masquerade as legitimate Web3/DeFi developer security tools MCP servers while silently exfiltrating...
Exploit for Missing Authentication for Critical Function in Cpanel
CVE-2026-41940 A security research tool for detecting and anal...
Exploit for CVE-2026-31431
This script is entirely genera...
PySpector security vulnerabilities
PySpector is a high-performance Python static security analysis framework based on graphs, developed by Tommaso Bona. Versions of PySpector prior to 0.1.8 contained security vulnerabilities. These vulnerabilities stemmed from an incomplete blacklist of plugin security validators, which could allo...
HTTP Chunked Encoding Behavior Analyzer
This script is a security analysis tool designed to test how a web server such as Kestrel-based applications handles HTTP requests using chunked transfer encoding...
OSCP-CVE-exploit-suggester
No d...
Exploit for Improper Access Control in Fortinet Forticlientems
CVE-2026-35616 Vulnerability Assessment Tool Safely detect wh...
Kernel Observability for Data Movement
Kernel-level visibility reveals hidden data movement in breaches, exposing gaps in modern security tools and improving detection, compliance, and system behavior tracking...
CVE-2026-33545 MobSF has SQL Injection in its SQLite Database Viewer Utils
MobSF is a mobile application security testing tool used. Prior to version 4.4.6, MobSF's readsqlite function in mobsf/MobSF/utils.py lines 542-566 uses Python string formatting % to construct SQL queries with table names read from a SQLite database's sqlitemaster table. When a security analyst...
CVE-2026-4761
The CVE-2026-4761 issue affects Windows machines where a certificate and its private key are installed in the certificate store via the Network and Security tool. The underlying problem is that access rights to the private key are unnecessarily granted to the operator group. Affected installation...