147 matches found
See-SURF
See-SURF Security scanner now powered with AI 🤖 to find potential Server Side Request Forgery SSRF parameters in your web application. See-SURF not only helps you detect potential SSRF parameters but also helps you validate it, protecting your application with system and user data compromise. 🎓...
hm-surf
HM-Surf evaluator Evaluates susceptibility to CVE-2024-44133 of common macOS browsers. Also contains the HTML that takes a screenshot and downloads it along with location extraction. Usage - evaluator To run the evaluator, which evaluates CVE-2024-44133 on all common macOS browsers, run: python3 ...
GESIS Surf: An Open-Source Infrastructure for Privacy-Preserving Longitudinal Web Browsing Data Collection
Understanding how people navigate digital media environments requires behavioral data beyond survey self-reports. However, existing infrastructures for collecting such data reproducibly, sustainably, and with strong privacy guarantees remain limited: commercial solutions lack transparency and dat...
surf
Surf - Escala tus vulnerabilidades SSRF en entornos cloud modernos surf te permite filtrar una lista de hosts, devolviendo una lista de candidatos SSRF viables. Lo hace enviando una petición HTTP desde tu máquina a cada host, recogiendo todos los hosts que no respondieron y luego filtrándolos en...
seans-surf-and-skate
Sean's Surf & Skate Co. — सील सिक्योरिटी डेमो Maven / Java स्प्रिंग बूट के साथ बनाया गया एक छोटा लेकिन वास्तविक दिखने वाला ई-कॉमर्स स्टोरफ्रंट "Sean's Surf & Skate Co."। यह ज्ञात कमज़ोरियों वाली ओपन-सोर्स डिपेंडेंसियों के साथ आता है ताकि इसका उपयोग यह प्रदर्शित करने के लिए किया जा सके कि Seal...
iflow-mcp-erickjtorres-flutter-surf-mcp (0.1.0), one-prompt-agents (>=0.0.1, <=0.0.3) potentially affected by CVE-2025-64340 via fastmcp (2.3.4)
fastmcp PYPI version 2.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on fastmcp and may be impacted: - iflow-mcp-erickjtorres-flutter-surf-mcp 0.1.0 - one-prompt-agents =0.0.1, =0.0.3 Source cves: CVE-2025-64340 Source advisory: OSV:PYSEC-2026-2475...
iflow-mcp-erickjtorres-flutter-surf-mcp (0.1.0), one-prompt-agents (>=0.0.1, <=0.0.3) potentially affected by CVE-2026-27124 via fastmcp (2.3.4)
fastmcp PYPI version 2.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on fastmcp and may be impacted: - iflow-mcp-erickjtorres-flutter-surf-mcp 0.1.0 - one-prompt-agents =0.0.1, =0.0.3 Source cves: CVE-2026-27124 Source advisory: OSV:PYSEC-2026-2476...
iflow-mcp-erickjtorres-flutter-surf-mcp (0.1.0), one-prompt-agents (>=0.0.1, <=0.0.3) potentially affected by CVE-2026-32871 via fastmcp (2.3.4)
fastmcp PYPI version 2.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on fastmcp and may be impacted: - iflow-mcp-erickjtorres-flutter-surf-mcp 0.1.0 - one-prompt-agents =0.0.1, =0.0.3 Source cves: CVE-2026-32871 Source advisory: OSV:PYSEC-2026-338...
Malicious Package
Overview surf-lending is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
Malware in surf-lending
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
Malicious code in slow-surf (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9f66d2ad1de3674c7aa5dd5efdb00624f0d1ff7f6f1ed38f054e6ca018dea673 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malware in slow-surf
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
Malicious Package
Overview slow-surf is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...
MAL-2026-5848 Malicious code in slow-surf (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9f66d2ad1de3674c7aa5dd5efdb00624f0d1ff7f6f1ed38f054e6ca018dea673 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-5808 Malicious code in surf-lending (npm)
Sibling of [email protected] campaign C2 path /surflending/. Sentinel-9.9.9 dep-confusion squat; preinstall node index.js || true exfils env secrets mnemonic/key/token/blockfrost to raw C2 2.25.140.71:8443/surflending/npm-confusion. c913 + c252. --- -= Per source details. Do not edit below this...
Malicious code in surf-lending (npm)
Sibling of [email protected] campaign C2 path /surflending/. Sentinel-9.9.9 dep-confusion squat; preinstall node index.js || true exfils env secrets mnemonic/key/token/blockfrost to raw C2 2.25.140.71:8443/surflending/npm-confusion. c913 + c252. --- -= Per source details. Do not edit below this...
surf is unmaintained
The surf crate is unmaintained, and all versions are affected. For alternatives, consider using reqwest or ureq. See this issue for more context...
ajars_surf (>=0.3.0, <=0.8.0), bevy_web_asset (0.1.0) +32 more potentially affected by unknown CVE via surf (2.3.2)
surf CARGO version 2.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on surf and may be impacted: - ajarssurf =0.3.0, =0.1.1, =0.22.0, =0.0.1, =0.10.0, =0.7.0, =0.4.0, =0.1.0, =0.1.2, =0.2.0 and more Source cves: unknown CVE Source advisory:...
