POC_CVE-2025-53558

CVE-2025-53558 Disclaimer Questo programma deve essere utilizzato solo per scopi autorizzati di test di sicurezza e ricerca. Si prega di utilizzarlo in conformità con le leggi sulla sicurezza informatica. L'utente è l'unico responsabile per qualsiasi attività illegale o attacco effettuato con...

CVE-2026-106444

A flaw was found in Handlebars. This vulnerability allows a remote attacker to execute arbitrary script code through Cross-Site Scripting XSS. When an application precompiles untrusted template text and embeds the generated output directly into an inline web script block, static content is not...

Malicious code in troubleshooting (npm)

troubleshooting is a dependency-confusion package: it is described as a "Compatibility shim", uses version numbers up to 99.0.1, and its README calls it an "authorized dependency-confusion test". Each listed version has a postinstall script that runs node beacon.cjs on npm install, and index.js...

MAL-2026-17641 Malicious code in troubleshooting (npm)

troubleshooting is a dependency-confusion package: it is described as a "Compatibility shim", uses version numbers up to 99.0.1, and its README calls it an "authorized dependency-confusion test". Each listed version has a postinstall script that runs node beacon.cjs on npm install, and index.js...

Malicious code in browser-metrics-plugin.contrib (npm)

browser-metrics-plugin.contrib is a dependency-confusion package: it is described as a "Compatibility shim", uses version numbers up to 99.0.1, and its README calls it an "authorized dependency-confusion test". Each listed version has a postinstall script that runs node beacon.cjs on npm install,...

MAL-2026-17640 Malicious code in browser-metrics-plugin.contrib (npm)

browser-metrics-plugin.contrib is a dependency-confusion package: it is described as a "Compatibility shim", uses version numbers up to 99.0.1, and its README calls it an "authorized dependency-confusion test". Each listed version has a postinstall script that runs node beacon.cjs on npm install,...

PT-2026-107562

Name of the Vulnerable Software and Affected Versions LMCache versions 0.5.5 and earlier Description An unauthenticated remote code execution issue exists where remote attackers can execute Python code by sending scripts to the '/run script' endpoint. By leveraging the injected FastAPI app object...

PT-2026-107423

This vulnerability in Veeam Backup Enterprise Manager allows an attacker to execute script in the browser of a portal user who opens a crafted link...

PT-2026-107558

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 7.1.2-31 Description A crafted Magick script can cause an opened file pointer to remain unclosed. This behavior allows repeated processing to exhaust available file descriptors, which are limited resources the...

Linux Distros Unpatched Vulnerability : CVE-2026-106575

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-31, a crafted Magick script can cause an opened fi...

PT-2026-107475

A code injection vulnerability exists in the upgrade script of Movable Type, which may allow an unauthenticated attacker to execute an arbitrary Perl script or an SQL query on the affected product...

vuln-CVE-2022-41082

vuln-CVE-2022-41082 https & http PER HTTP: nmap -p80 --script exchange-vuln-check.nse PER HTTPS: nmap -p443 --script exchange-vuln-check.nse SALVA I RISULTATI IN UN FILE nmap -p80 --script exchange-vuln-check.nse -oN results.txt...

Script-For-CVE-2024-20666

Script-For-CVE-2024-20666 Automatizza l'aggiornamento della partizione WinRE senza doverla ridimensionare prima e correggi la vulnerabilità BitLocker CVE-2024-20666. Collegamento Microsoft script disponibile qui Funziona per Windows Server 2022 installazione Server Core KB5034439: Aggiornamento d...

CVE-2025-63830

📂 CKFinder 1.4.3 – Gespeicherte Cross-Site-Scripting XSS durch bösartigen SVG-Upload CVE-ID: CVE-2025-63830 🧭 Übersicht Eine gespeicherte Cross-Site-Scripting XSS-Schwachstelle wurde in CKFinder v1.4.3 identifiziert. Das Problem liegt in der Datei-Upload -Funktionalität, die SVG-Dateien mit aktiv...

moveit-payload-decrypt-CVE-2023-34362

moveit-payload-decrypt-CVE-2023-34362 Questo script shell, data la OrgKey 0, analizza l'header degli artefatti base64 trovati nei log MOVEit e decritta l'oggetto serializzato utilizzato come payload...

xzutils_backdoor_obfuscation

xzutilsbackdoorobfuscation Questo script ricrea la tecnica di offuscamento utilizzata nell'attacco XZ utils CVE-2024-3094. È stato testato solo per xzutils v5.6.0. ⚠️ Questo codice è fornito solo a scopo educativo e non deve essere utilizzato per attività dannose. Utilizzalo a tuo rischio. ⚠️...

CVE-2026-79816

A vulnerability in a client interface of HPE Networking ClearPass Policy Manager could allow an unauthenticated remote attacker to conduct a DOM-based cross-site scripting XSS attack against a user of the affected client interface. Successful exploitation could allow an attacker to execute...

CVE-2026-79799

A vulnerability in the web-based management interface of ClearPass Policy Manager could allow an unauthenticated remote attacker to conduct a stored cross-site scripting XSS attack against an administrative user of the interface. A successful exploit could allow an attacker to execute arbitrary...

DEBIAN-CVE-2026-106444

Handlebars provides the power necessary to let users build semantic templates. From 4.0.0 until 4.7.10, Handlebars.precompile uses quotedString in lib/handlebars/compiler/code-gen.js to emit static template text into generated JavaScript without escaping sequences that terminate an enclosing HTML...

Sub-folderFetcher

Sub-folder Fetcher 🐣 Uno script per scaricare una specifica cartella del repository Vulhub kibana/CVE-2018-17246 da GitHub. 🚀 Requisiti curl unzip 🛠️ Utilizzo chmod +x subfetcher.sh ./subfetcher.sh...