Xworm RAT

XWorm-RAT V2.1 ⚠️Внимание: Этот инструмент создан и распространяется ИСКЛЮЧИТЕЛЬНО для исследований в области безопасности. Пожалуйста, не используйте его для незаконной деятельности. Известный XWorm RAT бесплатно, все популярные функции RAT. Пожалуйста, поддержите этот репозиторий звездой⭐️, если...

Wormy

Wormy - 도전 이 레포지토리에서 저는 자유 시간에 python3로 몇 가지 함수를 작성할 것입니다. 이 함수는 어떤 파이썬 백도어에도 "확산 기능웜처럼"을 추가합니다. 완성 후에는 실제 웜으로 만들 것입니다 할 일 목록 : 1드라이브에 확산, 시작 프로그램에 추가 및 지속적 확인✓ 2파이썬 스크립트에 주입하여 확산 ✓ 3ZIP 파일에 확산 ✓ 4공유 폴더에 확산 ✘ 5로컬 네트워크LAN에 확산 ✘ 6USB에 확산 ✘ 7P2P, 스카이프, 행아웃에 확산 시도 ✘ 8자신의 온라인 복사본을 만들고 확산에 사용 ✘ 9...아직 ...

BrainDamage

BrainDamage Инструмент удаленного администрирования на Python, использующий Telegram в качестве C&C-сервера. /\ /.\ ,.-'/ ",'-., -^ /-^: | \ | \ | | | | | | | | Автор: Mehul Jain -- Только для Windows | | | | | | | | | / / | | | | | '/ / | | | | / | | || || | | | /\ \ || |,||,|| ||/ --...

M-Botnet

M-Botnet Disclaimer1: 이 도구는 교육 목적으로만 사용됩니다! Disclaimer2: 나는 오래전에 이걸 작성했으니, 내 코딩 실력을 판단하지 마세요 :D 기본적인 봇넷 프로젝트입니다. 웜을 제어하는 C2입니다. 이 웜은 MS17-010 취약점을 사용하여 네트워크에 자가 전파되어 확산될 수 있습니다. 이 웜을 물리치려면, WWW와 네트워크 간의 통신을 차단하세요...

Rogue ScreenConnect Clients Spread Four-Stage VBScript Chain to Newly Connected Hosts

Cybersecurity researchers have disclosed details of worm-like activity that abuses ConnectWise ScreenConnect to distribute a malicious Visual Basic Script VBScript payload to newly connected systems. According to Huntress, three unrelated incidents have been found to use diverse initial access...

CVE-2026-85165 n8n before 2.36.2 Expression Sandbox Bypass via SpreadElement

n8n versions before 2.36.2 contain an expression sandbox bypass vulnerability where free identifiers in spread, computed-key, switch-case, or class-extension positions resolve against process globals. Authenticated users with workflow-edit permission can mutate host objects through expression...

CVE-2026-85165 n8n before 2.36.2 Expression Sandbox Bypass via SpreadElement

n8n versions before 2.36.2 contain an expression sandbox bypass vulnerability where free identifiers in spread, computed-key, switch-case, or class-extension positions resolve against process globals. Authenticated users with workflow-edit permission can mutate host objects through expression...

CVE-2026-85165

n8n versions before 2.36.2 are affected by an expression sandbox bypass. The root cause is that free identifiers appearing in spread , computed-key , switch-case , or class-extension positions resolve against process globals rather than staying within the sandbox. Authenticated users with workflo...

CVE-2026-85165 n8n before 2.36.2 Expression Sandbox Bypass via SpreadElement

n8n versions before 2.36.2 contain an expression sandbox bypass vulnerability where free identifiers in spread, computed-key, switch-case, or class-extension positions resolve against process globals. Authenticated users with workflow-edit permission can mutate host objects through expression...

MAL-2026-11909 Malicious code in @servicetitan/notifications (npm)

npm/@servicetitan/notifications is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...

GHSA-3769-JGQC-CXM7 Flowise: RCE via NodeVM Sandbox Escape in executeJavaScriptCode() nodeVMOptions Override

Summary A sandbox escape vulnerability in executeJavaScriptCode allows any authenticated user to execute arbitrary system commands as root on the Flowise server. The function accepts caller-provided nodeVMOptions that override the default sandbox security settings via JavaScript's spread operator...

PhantomEnigma Infects Organizations with Malware via Hijacked Government Websites

PhantomEnigma abuses Brazilian government websites and trusted email channels to spread malware, target banks, evade security checks, and maintain access...

CVE-2026-59729

Astro is a web framework for content-driven websites. Versions prior to 7.0.6 are vulnerable to XSS through unescaped spread attribute names in renderHTMLElement. The fix for CVE-2026-54298 GHSA-jrpj-wcv7-9fh9 added an INVALIDATTRNAMECHAR guard to addAttribute so that spread-prop attribute names...

CVE-2026-59729 Astro: XSS via unescaped spread attribute names in renderHTMLElement (incomplete fix for CVE-2026-54298)

Astro is a web framework for content-driven websites. Versions prior to 7.0.6 are vulnerable to XSS through unescaped spread attribute names in renderHTMLElement. The fix for CVE-2026-54298 GHSA-jrpj-wcv7-9fh9 added an INVALIDATTRNAMECHAR guard to addAttribute so that spread-prop attribute names...

CVE-2026-59729 Astro: XSS via unescaped spread attribute names in renderHTMLElement (incomplete fix for CVE-2026-54298)

Astro is a web framework for content-driven websites. Versions prior to 7.0.6 are vulnerable to XSS through unescaped spread attribute names in renderHTMLElement. The fix for CVE-2026-54298 GHSA-jrpj-wcv7-9fh9 added an INVALIDATTRNAMECHAR guard to addAttribute so that spread-prop attribute names...

CVE-2026-59729 Astro: XSS via unescaped spread attribute names in renderHTMLElement (incomplete fix for CVE-2026-54298)

Astro is a web framework for content-driven websites. Versions prior to 7.0.6 are vulnerable to XSS through unescaped spread attribute names in renderHTMLElement. The fix for CVE-2026-54298 GHSA-jrpj-wcv7-9fh9 added an INVALIDATTRNAMECHAR guard to addAttribute so that spread-prop attribute names...

EUVD-2026-49580

Astro is a web framework for content-driven websites. Versions prior to 7.0.6 are vulnerable to XSS through unescaped spread attribute names in renderHTMLElement. The fix for CVE-2026-54298 GHSA-jrpj-wcv7-9fh9 added an INVALIDATTRNAMECHAR guard to addAttribute so that spread-prop attribute names...

CVE-2026-59729

CVE-2026-59729 affects Astro versions prior to 7.0.6, where unescaped spread attribute names in renderHTMLElement can lead to XSS in SSR when rendering a native HTMLElement-subclass component. The root cause is an inline attribute loop in renderHTMLElement that interpolates attribute names withou...

Cross Site Scripting

Astro is vulnerable to Cross-Site Scripting XSS. The vulnerability is due to improper validation of spread attribute names in renderHTMLElement, where untrusted attribute names are rendered without escaping, allowing attackers to inject arbitrary HTML or JavaScript through crafted attribute keys...

NPM: Astro: XSS via unescaped spread attribute names in renderHTMLElement (incomplete fix for CVE-2026-54298)

NPM: Astro: XSS via unescaped spread attribute names in renderHTMLElement incomplete fix for CVE-2026-54298 vulnerability discovered by ? in WordPress Npm astro versions 7.0.6...