CVE-1999-0524

CVE-1999-0524 A Bash script to check if systems are vulnerable to ICMP Timestamp Request Remote Date Disclosure CVE-1999-0524. How to use 1. Make sure hping3 is installed and in your PATH. 2. Create a file that contains the targets, in IPv4 format and each target on a new line. 3. Make the script...

hackviser_labs_CVE-2015-3306

hackviserlabsCVE-2015-3306 This is a customized script to help solve the lab on remote code execution under the CVE-2015-3306 lab. run it using the following command: python3 exploit.py replace with the address you got from starting the lab on the hackviser platform...

CVE-2025-36911-Wisper_Pair_Target_Finder

This is not an exploit for CVE-2025-36911!!! This is a detector for finding potentially vulnerable devices! Only use on your own devices! I am not responsible for damages! Tested only on Debian Based Distros using python3 Usage: sudo apt update && sudo apt install python3 && sudo apt install git...

cve-2017-8529

cve-2017-8529 My CVE-2017-8529 files A PowerShell script to configure the registry fix in CVE-2017-8529...

CVE-2022-1592

CVE-2022-1592 POC pip install requests --break-system-packages CVE-2022-1592.py https://tatget.com/...

Grafana-LFI-exploit

Grafana LFI exploit Updated exploit script for the CVE-2021-43798 from the following: https://www.exploit-db.com/exploits/50581 https://vulncheck.com/blog/grafana-cve-2021-43798 Usage 1. Update on line 5 ip and line 6 port to fit the target. 2. Run the script python3 grafana-exploit.py...

wannafind

wannafind Simple script using nmap to detect CVE-2017-0143 MS17-010 Windows SMB and CVE-2017-7494 SAMBA in your network Usage: wannafind.sh IP|Network wannafind.sh 192.168.1.0/24...

MAL-2026-17700 Malicious code in dransay (npm)

[email protected] is a dependency-confusion probe for an internal unscoped dransay package name, not an identified public package. Its preinstall hook runs on npm install as node beacon.js and sends a DNS lookup and an HTTPS GET to db3klhbi6i9hark1kegg174t38h33b6wt.oast.site, using dransay-unscoped ...

MAL-2026-17698 Malicious code in @dransay/phone-fix-test (npm)

@dransay/[email protected] is a dependency-confusion probe claiming the internal @dransay/ namespace, not an identified public package. Its preinstall hook runs on npm install as node beacon.js and sends a DNS lookup and an HTTPS GET to db3klhbi6i9hark1kegg174t38h33b6wt.oast.site, using the...

Malicious code in @dransay/phone-fix-test (npm)

@dransay/[email protected] is a dependency-confusion probe claiming the internal @dransay/ namespace, not an identified public package. Its preinstall hook runs on npm install as node beacon.js and sends a DNS lookup and an HTTPS GET to db3klhbi6i9hark1kegg174t38h33b6wt.oast.site, using the...

Malicious code in @dransay/secrets (npm)

@dransay/[email protected] is a dependency-confusion probe claiming the internal @dransay/ namespace, not an identified public package. Its preinstall hook runs on npm install as node beacon.js and sends a DNS lookup and an HTTPS GET to db3klhbi6i9hark1kegg174t38h33b6wt.oast.site, using the package...

MAL-2026-17699 Malicious code in @dransay/secrets (npm)

@dransay/[email protected] is a dependency-confusion probe claiming the internal @dransay/ namespace, not an identified public package. Its preinstall hook runs on npm install as node beacon.js and sends a DNS lookup and an HTTPS GET to db3klhbi6i9hark1kegg174t38h33b6wt.oast.site, using the package...

CVE-2024-3094

CVE-2024-3094 CVE-2024-3094 - Checker From here 1. Quickest way to check just run the following. curl -Ls https://raw.githubusercontent.com/pentestfunctions/CVE-2024-3094/main/checker.sh | sh...

Hybrid Submit

Hybrid Analysis Batch Submission Script This Python script recursively scans a folder and submits executable, script, document, and other relevant files to Hybrid Analysis Falcon Sandbox for automated malware analysis. Features Recursively walks through directories Submits only supported file typ...

it-sec-toolshell

ToolShell — SharePoint Zero-Day Presentation A Marp slide deck about CVE-2025-53770, with each slide kept in its own file under slides/. Build ./build.sh assemble slides into presentation.md ./build.sh html + render presentation.html ./build.sh pdf + render presentation.pdf ./build.sh all + HTML,...

Malicious code in hardhat-promised (npm)

Source: amazon-inspector 306eed59a2a4d15563101a3bfde19c1d6d5e0c9152cb0f3d0f421331e075ef4e The npm package hardhat-promised impersonates the pino logger: it ships pino's README with pino shields.io badges linking to npmjs.com/package/pino, LICENSE, docs/, index.d.ts, and lib/ directory layout...

CVE-2026-46300

Security Research & Legal Disclaimer This repository is for educational and authorized security research purposes only. Permitted Use Understanding security vulnerabilities and exploitation concepts in controlled environments local VMs, isolated labs Studying sandbox isolation mechanisms and thei...

EUVD-2026-94764

The Image Photo Gallery Final Tiles Grid WordPress plugin before 3.6.14 does not sanitise several gallery configuration values that can be overridden through its gallery shortcode before printing them into an inline script block, allowing users with contributor-level access and above to inject...

Satel Netco Design

ADVISORY SUMMARY Successful exploitation of these vulnerabilities could allow an attacker to execute arbitrary scripts in a user's browser, consume excessive system resources, enumerate files, create or modify files, and potentially execute arbitrary code. 2. RECOMMENDED PRACTICES CISA...

dirtycups

dirtycups.py Dirty CUPS is a free Linux/Unix CVE scanner Python3 script to validate if a target is vulnerable to CVE-2024-47176. This is a socket only CUPS scanner based off of MalwareTech's cupsscanner.py: https://github.com/MalwareTech/CVE-2024-47176-Scanner/blob/master/cupsscanner.py Original...