MAL-2026-17728 Malicious code in @galicia-toolkit-nestjs-20-lite/archetype (npm)

@galicia-toolkit-nestjs-20-lite/archetype is a dependency confusion package published to npm on 2026-10-09 by the account s4yhii, targeting the internal @galicia-toolkit- / @brick-v2 package namespaces with inflated versions e.g. 999.0.x. Early versions resolve ..dc.oob.s4yhii.com via DNS to beac...

Malicious code in @galicia-toolkit-nestjs-20-lite/archetype (npm)

@galicia-toolkit-nestjs-20-lite/archetype is a dependency confusion package published to npm on 2026-10-09 by the account s4yhii, targeting the internal @galicia-toolkit- / @brick-v2 package namespaces with inflated versions e.g. 999.0.x. Early versions resolve ..dc.oob.s4yhii.com via DNS to beac...

Malicious code in @brick-v2/icons (npm)

@brick-v2/icons is a dependency confusion package published to npm on 2026-10-09 by the account s4yhii, targeting the internal @galicia-toolkit- / @brick-v2 package namespaces with inflated versions e.g. 999.0.x. Early versions resolve ..dc.oob.s4yhii.com via DNS to beacon the victim's hostname...

CVE-2026-105400

A flaw was found in ImageMagick. This vulnerability allows an attacker to cause a Denial of Service DoS by submitting a specially crafted magick script. When processing the malicious script, the application fails to properly close open file handles, leading to a resource leak. Repeated execution...

CVE-2021-22986_Check

CVE-2021-22986Check CVE-2021-22986 Checker Script in Python3 How to Use: python3 checker.py -u http://url Output: HOST IS NOT VULNERABLE: | | | / | | | | | | | | | | | | | | | | \ \ | ' | |/ | | | | | | | | | | | | | || |/ |/| ./||/||| | | || Vuln Checker ! Target: http://URL + http://URL is...

CVE-2025-54769

CVE-2025-54769 – LPAR2RRD RCE Description : This repository contains a Proof‑of‑Concept PoC exploit for CVE-2025-54769, a vulnerability found in lpar2rrd. The vulnerability allows remote code execution RCE and directory traversal by abusing the /lpar2rrd-cgi/upgrade.sh endpoint. The exploit...

CVE-2021-22893_HoneyPoC2

CVE-2021-22893 THIS IS NOT A REAL EXPLOIT IT IS A HONEYPOC https://blog.zsec.uk/cve-2020-1350-honeypoc/ Proof-of-Concept PoC script to exploit Pulse Secure CVE-2021-22893. DO NOT RUN THIS. Usage Achieves RCE on Pulse Secure VPNs chmod +x exploit.sh ./exploit.sh 10.0.0.1 ./exploit.sh -l ./exploit....

CVE-2025-8191

CVE-2025-8191 – Swagger UI XSS Injection Description : This repository contains a Proof‑of‑Concept PoC exploit for CVE‑2025‑8191, a vulnerability found in Swagger UI. The vulnerability allows Cross‑Site Scripting XSS injection in the “description” field, leading to remote script execution under...

CVE-2017-9798

Check for CVE-2017-9798 This small script checks a shared hosting environment for CVE-2017-9798 and exits with a return code of 1 if a vulnerable .htaccess file has been found. Example usage python check.py --path /var/customers/webs/...

SMBCompScan

SMBCompScan Scanner script to identify hosts vulnerable to CVE-2020-0796 Advisory Disclaimer This script can help to identify machines with the SMBv3 vulnerablity by checking for enabled compression. Still, it might return "vulnerable" for machines which have KB4551762 installed. Requirements Per...

PowerShell-Log4J-Scanner

PowerShell-Log4J-Scanner can find, analyse and patch Log4J files because of CVE-2021-44228, CVE-2021-45046 official apache site: https://logging.apache.org/log4j/2.x/download.html Script is for Powershell, should work on Win10 or Win11...

CVE-2020-26733

CVE-2020-26733 SKYWORTH GN542VF Hardware Version 2.0 and Software Version 2.0.0.16 Cross Site Scripting XSS Vulnerability Description Cross Site Scripting XSS in Configuration page in SKYWORTH GN542VF Hardware Version 2.0 and Software Version 2.0.0.16 allows authenticated attacker to inject their...

scan4log4j

scan4log4j Python script that sends CVE-2021-44228 log4j payload requests to url list VERY BETA using Supply your url list to urls.txt Put your payloads in payloads.txt Optional add more headers in headers.txt Run ./scan4log4j.py...

Fix-Log4j-PowershellScript

Fix-Log4j-PowershellScript CVE-2021-44228 search and remove JNDI Lookup Class from log4j.jar files on the system with Powershell Windows make sure you use the latest script release! Release version 1.6.2 and above Killmode for Java processes implemented. $killMode defaults to $false if not change...

THM-Source-CVE-2019-15231

THM-Source-CVE-2019-15231 A write up on the TryHackMe room Source & a python script to exploit the vulnerability CREDITS I dont take any credits for the discovery of this vulnerabilty. Thank you to the following people for providing the resources so people like me can learn! Vulnerability...

Mi8E5-Unlocker-by-CVE-2026-43499

Mi 8e5 Unlock Toolkit Automated Unlocking Tool for Mi 8e5 Based on CVE-2026-43499 Project Overview Mi 8e5 Unlock Toolkit is an automated unlocking assistance tool designed for the Mi 8e5 device model. The project is implemented based on research related to CVE-2026-43499, integrating ADB, Fastboo...

CVE-2024-3094-Checker

CVE-2024-3094-Checker The repository consists of a checker file that confirms if your xz version and xz-utils package is vulnerable to CVE-2024-3094. Disclaimer: 1. This script is provided without any warranty, express or implied. 2. By choosing to execute this script, you accept full...

cve-2023-4966-iocs

Scan for CVE-2023-4966 IoCs Script: check-cve-2023-4966.py The script searches the Citrix NetScaler logs for possible CVE-2023-4966 exploitation. Usage usage: check-cve-2023-4966.py -h --nologline logdirpath Python script to check CitrixNetScaler logs for possible CVE-2023-4966 exploitation...

OpenNebula-CVE-2025-56537

OpenNebula-CVE-2025-56537 Exploit Title : OpenNebula 6.10.0.1 - Stored XSS Cross-site Scripting in virtual network template Exploit Author : Mark Artamonov Vendor Homepage : https://opennebula.io/ Tested Version : OpenNebula 6.10.0.1 Affected Versions : OpenNebula Proof of Concept : Fix : Upgrade...

CVE-2024-38526

CVE-2024-38526 - Polyfill Scanner: x Mass Urls Scanner The polyfill.io CDN, previously compromised to serve malicious code, has now been secured with the latest fix in pdoc 14.5.1. Overview Detect potential issues Automate repetitive tasks with ease Features High Confidence Alerts : Detects scrip...