Æ / PUBLIC MALWARE INTELLIGENCE

Follow the evidence.

Published file metadata, source observations, indicators, and research history in one bounded catalog.

2,400+Reachable catalog records

95 / 100Current catalog page

24Maximum records per page

0Samples downloaded by this page

Feed collection status

Sources represented on this page. Publication and observation dates describe the content; successful batch dates describe local collection. A recent batch does not certify complete coverage or current provider availability.

2 sources: 0 stale, 0 needing attention, 0 paused, 0 unverified.

Review source update dates and status

intelligence_src_bc1f1ebc8852333272Recent successful batchLast successful batch: 2026-10-13 02:39 UTCLast attempt: 2026-10-13 02:39 UTC
intelligence_src_bcc4f8f17456eb9475Recent successful batchLast successful batch: 2026-10-13 02:42 UTCLast attempt: 2026-10-13 02:42 UTC

Stale means older than twice the recorded collection interval, with a minimum of one hour; without an interval, the threshold is 24 hours. Cached content remains available while a feed is stale, paused, or unverified.

2,400+ MATCHING RECORDSMETADATA ONLY / SOURCE ATTRIBUTION PRESERVED

REPORT1 SOURCE

Vulnérabilité dans les produits Mozilla (07 octobre 2026)

Une vulnérabilité a été découverte dans les produits Mozilla. Elle permet à un attaquant de provoquer un contournement de la politique de sécurité.

First reported Oct 07, 2026 00:00 UTCCatalog metadata updated Oct 13, 2026 02:42 UTCOpen evidence record

REPORT1 SOURCE

Exploiting Web3's Hidden Attack Surface: Universal XSS on Netlify's Next.js Library

First reported Sep 21, 2022 00:00 UTCCatalog metadata updated Oct 13, 2026 02:39 UTCOpen evidence record

REPORT1 SOURCE

How I gained access to chef, docker, AWS, and MongoDB instances in a single request

First reported Aug 03, 2017 00:00 UTCCatalog metadata updated Oct 13, 2026 02:39 UTCOpen evidence record

REPORT1 SOURCE

How I could've taken over the production server of a Yahoo acquisition through command injection

First reported Jun 04, 2017 00:00 UTCCatalog metadata updated Oct 13, 2026 02:39 UTCOpen evidence record

REPORT1 SOURCE

The $12,000 Intersection between Clickjacking, XSS, and Denial of Service

First reported Jul 04, 2018 00:00 UTCCatalog metadata updated Oct 13, 2026 02:39 UTCOpen evidence record

REPORT1 SOURCE

Analysis of CVE-2019-14994 - Jira Service Desk Path Traversal leads to Massive Information Disclosure

First reported Sep 26, 2019 00:00 UTCCatalog metadata updated Oct 13, 2026 02:39 UTCOpen evidence record

REPORT1 SOURCE

Hacking Kia: Remotely Controlling Cars With Just a License Plate

First reported Sep 20, 2024 00:00 UTCCatalog metadata updated Oct 13, 2026 02:39 UTCOpen evidence record

REPORT1 SOURCE

Don't Force Yourself to Become a Bug Bounty Hunter

First reported May 11, 2020 00:00 UTCCatalog metadata updated Oct 13, 2026 02:39 UTCOpen evidence record

REPORT1 SOURCE

Reading ASP secrets for $17,000

First reported Dec 17, 2018 00:00 UTCCatalog metadata updated Oct 13, 2026 02:39 UTCOpen evidence record

REPORT1 SOURCE

Exploiting Directory Traversal to View Customer Credit Card Information on Yahoo's Small Business Platform

First reported Nov 10, 2017 00:00 UTCCatalog metadata updated Oct 13, 2026 02:39 UTCOpen evidence record

REPORT1 SOURCE

Hacking Subaru: Tracking and Controlling Cars via the STARLINK Admin Panel

First reported Jan 23, 2025 00:00 UTCCatalog metadata updated Oct 13, 2026 02:39 UTCOpen evidence record

REPORT1 SOURCE

Hacking a Massive Steam Scamming and Phishing Operation for Fun and Profit

First reported May 09, 2018 00:00 UTCCatalog metadata updated Oct 13, 2026 02:39 UTCOpen evidence record

REPORT1 SOURCE

Hacking Starbucks and Accessing Nearly 100 Million Customer Records

First reported Jun 20, 2020 00:00 UTCCatalog metadata updated Oct 13, 2026 02:39 UTCOpen evidence record

REPORT1 SOURCE

Filling in the Blanks: Exploiting Null Byte Buffer Overflow for a $40,000 Bounty

First reported Nov 01, 2019 00:00 UTCCatalog metadata updated Oct 13, 2026 02:39 UTCOpen evidence record

REPORT1 SOURCE

Hacking Millions of Modems (and Investigating Who Hacked My Modem)

First reported Jun 03, 2024 00:00 UTCCatalog metadata updated Oct 13, 2026 02:39 UTCOpen evidence record

REPORT1 SOURCE

Abusing HTTP Path Normalization and Cache Poisoning to steal Rocket League accounts

First reported Apr 19, 2020 00:00 UTCCatalog metadata updated Oct 13, 2026 02:39 UTCOpen evidence record

REPORT1 SOURCE

Cracking my windshield and earning $10,000 on the Tesla Bug Bounty Program

First reported Jul 14, 2019 00:00 UTCCatalog metadata updated Oct 13, 2026 02:39 UTCOpen evidence record

REPORT1 SOURCE

We Hacked Apple for 3 Months: Here’s What We Found

First reported Oct 07, 2020 00:00 UTCCatalog metadata updated Oct 13, 2026 02:39 UTCOpen evidence record

REPORT1 SOURCE

Eradicating image authentication injection from the entire internet

First reported May 10, 2017 00:00 UTCCatalog metadata updated Oct 13, 2026 02:39 UTCOpen evidence record

REPORT1 SOURCE

Web Hackers vs. The Auto Industry: Critical Vulnerabilities in Ferrari, BMW, Rolls Royce, Porsche, and More

First reported Jan 03, 2023 00:00 UTCCatalog metadata updated Oct 13, 2026 02:39 UTCOpen evidence record

REPORT1 SOURCE

Hacking the World Poker Tour: Inside ClubWPT Gold’s Back Office

First reported Oct 12, 2025 00:00 UTCCatalog metadata updated Oct 13, 2026 02:39 UTCOpen evidence record

REPORT1 SOURCE

Hacking Chess.com and Accessing 50 Million Customer Records

First reported Dec 16, 2020 00:00 UTCCatalog metadata updated Oct 13, 2026 02:39 UTCOpen evidence record

REPORT1 SOURCE

Leaked Secrets and Unlimited Miles: Hacking the Largest Airline and Hotel Rewards Platform

First reported Aug 03, 2023 00:00 UTCCatalog metadata updated Oct 13, 2026 02:39 UTCOpen evidence record

REPORT1 SOURCE

How I stole the identity of every Yahoo user

First reported May 09, 2017 00:00 UTCCatalog metadata updated Oct 13, 2026 02:39 UTCOpen evidence record

The public shared-host view reaches the newest 2,400 matching records. Narrow the filters or search an exact MD5, SHA-1, or SHA-256 value to reach a specific record.

A filename, label, or report mention alone does not establish maliciousness. Observation dates describe cited sources; collection dates describe this local metadata catalog. No malware samples are stored, fetched, or executed by these pages.