I-See-You

I-See-You ISeeYou is a Bash and Javascript tool to find the exact location of the users during social engineering or phishing engagements. Using exact location coordinates an attacker can perform preliminary reconnaissance which will help them in performing further targeted attacks. Note: This to...

even-you-brutus

Even You, Brutus? Even You, Brutus? is a simple proof of concept dictionary brute forcing tool targeting the MikroTik RouterOS 6.x web interface. RouterOS notiously lacks brute force protections on the web and winbox interfaces. They've largely coasted off their custom authentication/encryption...

what-you-reveal

╦ ╦╦ ╦╔═╗╔╦╗ ╦ ╦╔═╗╦ ╦ ╦═╗╔═╗╦ ╦╔═╗╔═╗╦ ║║║╠═╣╠═╣ ║ ╚╦╝║ ║║ ║ ╠╦╝║╣ ╚╗╔╝║╣ ╠═╣║ ╚╩╝╩ ╩╩ ╩ ╩ ╩ ╚═╝╚═╝ ╩╚═╚═╝ ╚╝ ╚═╝╩ ╩╩═╝ SYSTEM ANALYSIS TOOL // BROWSER FINGERPRINT DEMO What You Reveal reads your browser the way tracking scripts do and shows the results: 15 groups of signals any website can...

Malware in do-wnload-available-61075-you-think-you-really-know-me-1-c368u-jspcon

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in alb-um-availa-ble-zip-mp3-file-someone-to-drive-you-home-vbwzp-koufrz (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eec79d6655ebc25ae0381054bfe1b1df8d42b7f3ef04ac88384a1b33ad6f6d65 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-17970 Malicious code in alb-um-availa-ble-zip-mp3-file-someone-to-drive-you-home-vbwzp-koufrz (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eec79d6655ebc25ae0381054bfe1b1df8d42b7f3ef04ac88384a1b33ad6f6d65 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in file-alb-um-zip-new-mp3-32338-think-before-you-speak-9znpc-akvcbt (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 07720e778ecc1d65f64bd2688bc36c70006971f7d8ec6362fd76ea8988acbb8f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in do-wnload-available-61075-you-think-you-really-know-me-1-c368u-jspcon (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware af32f45e197bb094b299b6e83bbac498c75b0b46d411adbff5ed19a5312eb1d6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in file-alb-um-zip-new-mp3-32338-think-before-you-speak-9znpc-akvcbt

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2026-18012 Malicious code in file-alb-um-zip-new-mp3-32338-think-before-you-speak-9znpc-akvcbt (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 07720e778ecc1d65f64bd2688bc36c70006971f7d8ec6362fd76ea8988acbb8f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-17994 Malicious code in do-wnload-available-61075-you-think-you-really-know-me-1-c368u-jspcon (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware af32f45e197bb094b299b6e83bbac498c75b0b46d411adbff5ed19a5312eb1d6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in alb-um-availa-ble-zip-mp3-file-someone-to-drive-you-home-vbwzp-koufrz

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious Package

Overview do-wnload-available-61075-you-think-you-really-know-me-1-c368u-jspcon is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no...

Malicious Package

Overview alb-um-availa-ble-zip-mp3-file-someone-to-drive-you-home-vbwzp-koufrz is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no...

Malicious Package

Overview file-alb-um-zip-new-mp3-32338-think-before-you-speak-9znpc-akvcbt is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connectio...

CVE-2026-103071

Improper Control of Generation of Code 'Code Injection' vulnerability in VillaTheme Thank You Page Customizer for WooCommerce woo-thank-you-page-customizer allows Code Injection.This issue affects Thank You Page Customizer for WooCommerce: from n/a through 1.2.3...

CVE-2026-103071

The VillaTheme Thank You Page Customizer for WooCommerce (woo-thank-you-page-customizer) plugin is vulnerable to an Improper Control of Generation of Code (Code Injection) vulnerability. This issue affects versions through 1.2.3 . An attacker could exploit this flaw to perform Code Injection , po...

CVE-2026-103071 WordPress Thank You Page Customizer for WooCommerce plugin <= 1.2.3 - Content Injection vulnerability

Improper Control of Generation of Code 'Code Injection' vulnerability in VillaTheme Thank You Page Customizer for WooCommerce woo-thank-you-page-customizer allows Code Injection.This issue affects Thank You Page Customizer for WooCommerce: from n/a through 1.2.3...

EUVD-2026-96379

Improper Control of Generation of Code 'Code Injection' vulnerability in VillaTheme Thank You Page Customizer for WooCommerce woo-thank-you-page-customizer allows Code Injection.This issue affects Thank You Page Customizer for WooCommerce: from n/a through 1.2.3...

CVE-2026-103071 WordPress Thank You Page Customizer for WooCommerce plugin <= 1.2.3 - Content Injection vulnerability

Improper Control of Generation of Code 'Code Injection' vulnerability in VillaTheme Thank You Page Customizer for WooCommerce woo-thank-you-page-customizer allows Code Injection.This issue affects Thank You Page Customizer for WooCommerce: from n/a through 1.2.3...