9205 matches found
MAL-2026-366 Malicious code in testing-package-bose (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf9cef522b7a8b6ce59335bbac80dcc488adedcd397bbc6b1e12816b4c54d170 The package testing-package-bose was found to contain malicious code. Source: ghsa-malware...
EUVD-2026-3511
Malicious code in testing-package-bose npm...
CVE-2025-14348: Improper Authorization
The weMail - Email Marketing, Lead Generation, Optin Forms, Email Newsletters, A/B Testing, and Automation plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.0.7. This is due to the plugin's REST API trusting the x-wemail-user HTTP header to identif...
Rockwell Automation ArmorStart LT security vulnerability
Rockwell Automation ArmorStart LT is a distributed motor controller developed by Rockwell Automation in the United States. Rockwell Automation ArmorStart LT has a security vulnerability that arises from the lack of response from CIP ports during fuzzy testing of multiple CIP classes, which may le...
Unicornscan 0.4.43
Unicornscan is an information gathering and correlation engine built for and by members of the security research and testing communities. It was designed to provide an engine that is Scalable, Accurate, Flexible, and Efficient. It is released for the community to use under the terms of the GPL...
MAL-2026-326 Malicious code in urlssser (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 4a59189804dc7b527969a4ed7e4d95fac2b98812c309142270b27cdca47729be This package does not directly contain malicious code, but was uploaded as part of the malicious campaign and is used as a helper in further infection stages...
MAL-2026-325 Malicious code in marshel (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 d1b25f97e5a657b33bb26f2ccdfbdb55e459274a4cb3e19e38d3f04ba6ea3583 The package, distinguished as a speed testing or typosquatted Telegram library, contains a Telegram bot to perform remote control of the computer --- Category:...
Exploit for Path Traversal in Openbsd Openssh
Bastion AI-Powered Penetration Testing Platform for macOS...
Exploit for Deserialization of Untrusted Data in Microsoft
WSUS Security Research Toolkit !Pythonhttps://img.shields...
What is Breach and Attack Simulation (BAS)? A Guide
If you’re on a vulnerability management team, you’re likely drowning in a sea of CVEs. Your scanners produce massive lists of potential weaknesses, but with limited time and resources, which ones do you fix first? A high CVSS score doesn't always translate to real-world risk. You need context to...
Exploit for Deserialization of Untrusted Data in Siemens 6Bk1602-0Aa12-0Tp0_Firmware
⚡ Pentest Automation !Versionhttps://img.shields.io/badg...
CVE-2025-71136 media: adv7842: Avoid possible out-of-bounds array accesses in adv7842_cp_log_status()
In the Linux kernel, the following vulnerability has been resolved: media: adv7842: Avoid possible out-of-bounds array accesses in adv7842cplogstatus It's possible for cpread and hdmiread to return -EIO. Those values are further used as indexes for accessing arrays. Fix that by checking return...
OPENSUSE-SU-2026:20038-1 Security update for wget2
This update for wget2 fixes the following issues: Changes in wget2: - Update to release 2.2.1 Fix file overwrite issue with metalink CVE-2025-69194 bsc1255728 Fix remote buffer overflow in getlocalfilenamereal CVE-2025-69195 bsc1255729 Fix a redirect/mirror regression from 400713ca Use the local...
Exploit for Improper Handling of Length Parameter Inconsistency in Mongodb
MongoBleed-Pro ☠️ Advanced MongoDB Memory L...
Proactive Malware Threat Management: A How-To Guide
Trying to defend against every potential malware attack is like trying to boil the ocean. You can’t be everywhere at once, and treating every vulnerability as a top priority is a surefire way to burn out your team. The old way of reacting to every alert simply doesn't scale. A modern defense...
Aura Inspector
aura-inspector is a Swiss Army knife of Salesforce Experience Cloud testing. It facilitates in discovering misconfigured Salesforce Experience Cloud applications as well as automates much of the testing process...
MAL-2026-237 Malicious code in formater (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 71f6a751b5ff98dceeee5863086a2d9988640b93d96ccef9d50fb0d0d1dd116c During importing the package automatically downloads a script that uses a Telegram bot to perform remote control over the computer --- Category: MALICIOUS - Th...
MAL-2026-236 Malicious code in graponater (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 9bbd986bf5883f6b5b40a7061c514b13f71a27c021471595671d060b260affc3 The package, distinguished as a speed testing or typosquatted Telegram library, contains a Telegram bot to perform remote control of the computer --- Category:...
Security update for wget2 (important)
openSUSE Security Update: Security update for wget2 Announcement ID: openSUSE-SU-2026:0010-1 Rating: important References: 1255728 1255729 Cross-References: CVE-2025-69194 CVE-2025-69195 Affected Products: openSUSE Backports SLE-15-SP6 An update that fixes two vulnerabilities is now available...