Lucene search
+L

321174 matches found

Kitploit
Kitploit
added 2026/09/21 7:54 a.m.34 views

web_exploit_detector

Web Exploit Detector Introduction The Web Exploit Detector is a Node.js application and NPM module used to detect possible infections, malicious code and suspicious files in web hosting environments. This application is intended to be run on web servers hosting one or more websites. Running the...

5.7AI score
SaveExploits0
OSV
OSV
added 2026/09/21 3:32 a.m.5 views

MAL-2026-16342 Malicious code in pflag29424 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9b974c9d8555f026dfc5556c4f628d366fbaedca83eab549559fe95fc984602 index.js the package's declared main unconditionally executes on module load: it calls fetch'/profile', scans the response for a DGA... token, and...

SaveExploits0References1
OSV
OSV
added 2026/09/21 3:06 a.m.4 views

MAL-2026-16309 Malicious code in npmscript_tesstalert_unpkg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5fa1adfe349e0a6092589e90bf38184b5769148bf42b4216fc714ad446ea747b The package ships a single browser JavaScript file declared as both main and unpkg, so any page embedding the package via the unpkg CDN loads this...

SaveExploits0References2
Kitploit
Kitploit
added 2026/09/20 8:53 p.m.44 views

mal_unpack

malunpack Dynamic unpacker based on PE-sieve 📖 Read more . It deploys a packed malware, waits for it to unpack the payload, dumps the payload, and kills the original process. !CAUTION This unpacker deploys the original malware. Use it only on a VirtualMachine. ⚙ Usage Basic usage: root@kitploit:...

5.9AI score
SaveExploits0References11
Kitploit
Kitploit
added 2026/09/20 7:08 p.m.12 views

modelaudit

ModelAudit Secure your AI models before deployment. Static scanner that detects malicious code, potential backdoor indicators, and security vulnerabilities in ML model files — without ever loading or executing them. Full Documentation | Usage Examples | Supported Formats...

5.9AI score
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/20 4:03 p.m.11 views

CVE-2025-56383-Proof-of-Concept

Notepad++ v8.8.3 存在 DLL 劫持漏洞,可以通过替换原始 DLL 文件来执行恶意代码。 示例方法如下: (请注意,以下演示使用 npp.8.8.3.Installer.x64.exe 安装 Notepad++ 进行测试,但实际上,任何已安装的 Notepad++ 都会受到此漏洞的影响) 将原始 DLL(例如 Notepad++\plugins\NppExport\NppExport.dll)替换为包含恶意代码的同名 DLL 文件(原始导出函数被转发到原始 DLL),这样在执行 Notepad++.exe 时,就可以执行恶意代码。...

8.4CVSS7.8AI score0.00381EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/20 3:43 p.m.19 views

CVE-2023-35674

Description CVE-2023-35674 is a high-severity zero-day security vulnerability in the Android Framework. This vulnerability allows an attacker to escalate their privileges without requiring user interaction or additional execution permissions. The vulnerability occurs in how the Android Framework...

8.8CVSS7.7AI score0.02615EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/20 11:14 a.m.7 views

node-ipc-malware-protestware-CVE-2022-23812

CVE-2022-23812 RIAEvangelist/node-ipc is malware / protestware The RIAEvangelist/node-ipc module contains protestware peacenotwar. Excerpt from RIAEvangelist/node-ipc: as of v11.0.0 & v9.2.2 this module uses the peacenotwar module. More importantly, commits 847047cf7f81ab08352038b2204f0e763344958...

10CVSS8.5AI score0.0426EPSS
SaveExploits1References2
OSSF Malicious Packages
OSSF Malicious Packages
added 2026/09/20 11:05 a.m.6 views

Malicious code in @pwaplatform/module-sso-integration (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f674867f67f5a8495dbc953913b6cc7c0d8b9d094161c660ca4dfd5449506ba @pwaplatform/[email protected] declares both preinstall and postinstall lifecycle scripts that execute payload.js on npm install...

SaveExploits0References2
Kitploit
Kitploit
added 2026/09/20 10:47 a.m.12 views

inspec_cve_2019_15224

a malicious rest-client gem On August 19, 2019, it was discovered that the rest-client gem had had several versions published containing malicious code. In discovering the malicious rest-client, several other new gems were determined to be carrying similar code. Coverage:...

5.8AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/20 10:13 a.m.11 views

CVE-2024-3094-XZ-Backdoor-Detector

Description Malicious code was discovered in the upstream tarballs of xz, starting with version 5.6.0. Through a series of complex obfuscations, the liblzma build process extracts a prebuilt object file from a disguised test file existing in the source code, which is then used to modify specific...

10CVSS8.7AI score0.85974EPSS
SaveExploits41
Kitploit
Kitploit
added 2026/09/20 5:45 a.m.33 views

php-malware-finder

PHP Malware Finder root@kitploit: | || || || | | | | || || | | || || || | Webshell finder, | || || | kiddies hunter, | | | |||| || | website cleaner. || || |||| Detect potentially malicious PHP files. What does it detect? PHP-malware-finder does its very best to detect obfuscated/dodgy code as we...

5.9AI score
SaveExploits0
Nuclei
Nuclei
added 2026/09/20 2:05 a.m.63 views

Joomla! Component Preventive And Reservation 1.0.5 - Local File Inclusion

A directory traversal vulnerability in the Preventive & Reservation compreventive component 1.0.5 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impacts via a .. dot dot in the controller parameter to index.php. id: CVE-2010-1475 info: name: Joomla...

6.8CVSS6AI score0.09471EPSS
SaveExploits3References5
Kitploit
Kitploit
added 2026/09/19 5:42 a.m.10 views

vbSparkle

What is vbSparkle ? vbSparkle is a source-to-source multi-platform Visual Basic deobfuscator based on partial-evaluation and is mainly dedicated to the analysis of malicious code written in VBScript and VBA Office Macro. It is written in native C and provides a .Net Standard library , and works o...

6.1AI score
SaveExploits0References3
Nuclei
Nuclei
added 2026/09/19 2:05 a.m.227 views

D-Link - Remote Command Execution

A Remote Command Execution RCE vulnerability exists in all series H/W revisions D-link DIR-810L, DIR-820L/LW, DIR-826L, DIR-830L, and DIR-836L routers via the DDNS function in ncc2 binary file id: CVE-2021-45382 info: name: D-Link - Remote Command Execution author: king-alexander severity: critic...

10CVSS8.4AI score0.97836EPSS
SaveExploits1References5
OSSF Malicious Packages
OSSF Malicious Packages
added 2026/09/18 11:41 p.m.8 views

Malicious code in keroeltop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c1791fee7ca80cf7d21f57837b64f0c31594194a2733fa7a94eda87e9235199 [email protected] is a lure package whose index.js runs on every npm lifecycle phase preinstall/install/postinstall/prepare and issues an HTTP reque...

SaveExploits0References1
OSV
OSV
added 2026/09/18 11:41 p.m.9 views

MAL-2026-16297 Malicious code in keroeltop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c1791fee7ca80cf7d21f57837b64f0c31594194a2733fa7a94eda87e9235199 [email protected] is a lure package whose index.js runs on every npm lifecycle phase preinstall/install/postinstall/prepare and issues an HTTP reque...

SaveExploits0References1
Kitploit
Kitploit
added 2026/09/18 11:03 p.m.11 views

CVE-2022-45472

CVE-2022-45472 DOM Based XSS Software: CAE Learning Space Enterprise with Intuity License Image Version: 267r Patch Level: 639 Vulnerability: DOM Based XSS Description The CAE Learning Space Enterprise management software is vulnerable to a DOM Based XSS attack. A DOM Based XSS attack is when a...

5.4CVSS6.2AI score0.00528EPSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/18 11:01 p.m.5 views

Microsoft-Office-Word-MSHTML-Remote-Code-Execution-Exploit

Microsoft-Office-Word-MSHTML-Remote-Code-Execution-Exploit CVE-2021-40444 EXPLOIT TO USE IN METASPLOIT, ALLOWS ATTACKERS TO GET AN REMOTE CODE EXECUTION THROUGH MICROSOFT OFFICE WORD BY INJECTING MALICIOUS CODE IN THE FILE...

8.8CVSS7.3AI score0.9745EPSS
SaveExploits38
Kitploit
Kitploit
added 2026/09/18 9:26 p.m.7 views

CVE-2024-3094-checker

CVE-2024-3094 checker xz Utils versions 5.6.0 and 5.6.1 appear to be compromised. XZ Utils is data compression software and may be present in Linux distributions. The malicious code may allow unauthorized access to affected systems. Sources: https://vulners.com/cve/CVE-2024-3094...

10CVSS8.6AI score0.85974EPSS
SaveExploits41
Rows per page
Query Builder