Answer Is Cheap, Show Me the Evidence! Augmenting Automated Vulnerability Assessment with Evidence

Software vulnerability SV assessment helps prioritize remediation by characterizing reported vulnerabilities. Existing automated methods predict assessment results from SV reports SVRs, but often overlook information in rich text, such as screenshots and code snippets, as well as contextual...

VulnPoC

Vulnerability PoC Archive Purpose This repository is used...

Secret Scanner Agent: Extracting Secrets and Access Context from Unstructured Documents

Exposed documents such as emails, chat threads, tickets, and incident notes routinely leak credentials, but during incident response a leaked secret is only half the story. Responders also need to identify the "door'' the secret opens: the account, tenant, endpoint, database, cloud resource, or...

Libgcrypt 1.12.2

Libgcrypt is a general-purpose cryptographic library based on the code from GnuPG. It provides functions for all cryptographic building blocks: symmetric ciphers AES, DES, Blowfish, CAST5, Twofish, and Arcfour, hash algorithms MD4, MD5, RIPE-MD160, SHA-1, and TIGER-192, MACs HMAC for all hash...

Malicious code in @settle-sea/supporting-documents (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1a578c532adf03529b20a3a434751c75d17e6c7ea31e4ca1881447db490cc78 The package @settle-sea/supporting-documents was found to contain malicious code. Source: ghsa-malware...

EUVD-2025-102027

Malicious code in supportingfalconz3n npm...

EUVD-2025-88634

Malicious code in supportingimpalaz3n npm...

EUVD-2025-75499

Malicious code in supportingcrab-excellentdev npm...

EUVD-2025-73414

Malicious code in supportingsalamanderz3n npm...

EUVD-2025-73417

Malicious code in supportingclamrequirement npm...

Malicious code in supporting_salamander_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 824901f76a96c1f0dc8b837cd859c75bb156a65290488fec2e07317a88c05683 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-66453

Malicious code in supportingeelz3n npm...

EUVD-2025-51685

Malicious code in supporting-jade-leopard npm...

EUVD-2025-51683

Malicious code in supporting-sapphire-leech npm...

EUVD-2025-51684

Malicious code in supporting-moccasin-thrush npm...

MAL-2025-70965 Malicious code in supporting-moccasin-thrush (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2838be45bf20798d1a6f0a2c74dc95211d6282c16bede0960d4feb9d65deab33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-51686

Malicious code in supporting-gold-mockingbird npm...

EUVD-2025-49251

Malicious code in supportingcockroachz3n npm...

ULTIMATE-CYBERSECURITY-MASTER-GUIDE

🛡️ ULTIMATE CYBERSECURITY MASTER GUIDE COLLECTION 📊 Comple...

Splunk Active Directory Add-on Regular Expression DoS

The vulnerability of the Active Directory data extraction application “Splunk Supporting Add-on for Active Directory” is related to the use of a regular expression with high computational complexity. Exploiting this vulnerability could allow an attacker to cause a service failure...