MAL-2026-17428 Malicious code in ai-workshop-radio-app (npm)

ai-workshop-radio-app is a dependency-confusion package: it takes a name that looks like an internal project, uses an inflated version 100.0.0 so it outranks private-registry versions, and runs node setup.js || true as a preinstall script on npm install. setup.js sends the hostname, username,...

Malicious code in okra-cloud-cdk (npm)

okra-cloud-cdk is a dependency-confusion package: it takes a name that looks like an internal project, uses an inflated version 100.0.0 so it outranks private-registry versions, and runs node setup.js || true as a preinstall script on npm install. setup.js sends the hostname, username, working...

MAL-2026-17436 Malicious code in okra-cloud-cdk (npm)

okra-cloud-cdk is a dependency-confusion package: it takes a name that looks like an internal project, uses an inflated version 100.0.0 so it outranks private-registry versions, and runs node setup.js || true as a preinstall script on npm install. setup.js sends the hostname, username, working...

EUVD-2026-89621

The Content Egg WordPress plugin before 11.9.0 does not verify that a user running its bulk content-import feature is authorized for the import preset they select, and switches to the preset author's identity before creating the resulting post, allowing users with contributor-level access and abo...

CVE-2025-55182-test

Prueba de CVE-2025-55182 Comprueba si tu endpoint es potencialmente vulnerable a CVE-2025-55182. Requisitos pip install requests Uso Objetivo único $ python3 react2shell-test.py -u https://app.example.com Múltiples objetivos desde archivo $ python3 react2shell-test.py -l targets.txt Con opciones ...

CYBERDUDEBIVASH-ServiceNow-AI-Agent-Audit-Script

CYBERDUDEBIVASH ServiceNow AI Agent Audit Script v1.1 Jan 2026 Secure Your AI Future – Enterprise-Grade Audit Tool with 2026 Updates This script audits ServiceNow AI Agents for vulnerabilities like CVE-2025-12420, governance gaps, and compliance risks. Powered by CYBERDUDEBIVASH – your global...

Firmware-CVE-2025-7545

Preparación para descargar el repositorio 1. Actualizamos los paquetes: sudo apt-get update 2. Si es necesario, instalar git: sudo apt install -y git Descarga del repositorio, instalación de Binutils vulnerable y configuración del entorno 1. Descargamos el repositorio: git clone...

Samba-Exploit-CVE-2007-2447

🎬 This YouTube video 1️⃣ Scanning the target Nmap nmap -sS -sV -p 139,445 192.168.56.102 Expected result: 139/tcp open netbios-ssn Samba smbd 3.X 445/tcp open microsoft-ds Samba smbd 3.0.20-Debian 👉 Samba version: 3.0.20 This is vulnerable to CVE-2007-2447. 2️⃣ Identifying the Samba exploit...

cve-2019-11043.py

cve-2019-11043.py Python port of an ExploitDB proof-of-concept. Python Port of ExploitDB 48182 For Educational Purposes Only This project is a Python port of the ExploitDB PoC for exploit 48182. It was created for learning and research purposes. ⚠ Disclaimer The script has not been tested , so it...

Exploit-CVE-2024-23897

Exploit-CVE-2024-23897 Run the Container docker run -p 8080:8080 --name vulnerable-jenkins -d jenkins/jenkins:2.441-jdk17 Check logs docker logs Fetch docker machines IP: docker inspect vulnerable-jenkins | grep IPAddress Exploitation Code: python3 exploit.py --target http://127.0.0.1:8080 --file...

CVE-2025-61229

CVE-2025-61229 Descripción Del blog del desarrollador: Los scripts de shell Before/After configurables por el usuario se ejecutan con privilegios elevados, con los permisos de Acceso Completo al Disco TCC de SuperDuper. Dado que esos scripts de shell son referenciados por los archivos de...

cve-2023-2745

How to use Save the file as checkcve-2023-2745.py and give it execute permission: chmod +x checkcve-2023-2745.py Install the dependency once: python3 -m pip install requests Run: python3 checkcve-2023-2745.py https://example.com...

CVE-2025-11833-PoC

CVE-2025-11833 Checker python3 main.py --url http://localhost --username admin --loot This repository is for educational and research purposes only. The author does not take responsibility for any misuse. Always test PoCs in a controlled and isolated environment...

CVE-2025-24893

CVE-2025-24893 Bash POC script for RCE vulnerability in XWiki Platform Example usage: Setup a netcat listener: $ nc -nvlp Then run the script: $ chmod +x cve.sh $ ./cve.sh Affected versions: From 5.4 up to 15.10.11 From 16.0.0 up to 16.4.1 Disclamer This tool is for educational purposes only. I...

POC_CVE-2025-53558

CVE-2025-53558 Disclaimer This program should only be used for authorized security testing and research purposes. Users must comply with the Cybersecurity Law and use it appropriately. The author is not responsible for any illegal attacks or other unlawful acts that occur when users use this tool...

EUVD-2026-89475

The application uses unsafe functions that allow execution of inline scripts and string evaluation functions...

CVE-2026-103443: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

Improper neutralization of Script-Related HTML tags in a web page basic XSS vulnerability in The Wikimedia Foundation MediaWiki Collection Book extension allows XSS Targeting Non-Script Elements. This issue affects MediaWiki Collection Book extension: 1.46, 1.45, and 1.43...

CentOS Linux 7 [TuxCare] Security Update: ImageMagick / ImageMagick-c++ / ImageMagick-c++-devel / etc Multiple Vulnerabilities (CENTOS7:CLSA-2026:1774262622)

The CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS7:CLSA-2026:1774262622 advisory. - ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-4...

PT-2026-103066

Name of the Vulnerable Software and Affected Versions baserCMS affected versions not specified Description A stored cross-site scripting issue exists where arbitrary scripts can be executed in a user's web browser. This occurs through the use of appended strings within email form fields...

AlmaLinux 9.2 [TuxCare] Security Update: redis / redis-devel / redis-doc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2025:1762785221)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1762785221 advisory. - Redis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an authenticated user to use a...