CVE-2026-23744

CVE-2026-23744 Proof-of-concept exploit for CVE-2026-23744 , provided for research and authorized penetration testing. Requirements Python 3 Network access to the target Usage Start a listener in one terminal and run the exploit in another. Terminal 1 — listener nc -nvlp 4444 Terminal 2 — exploit...

CVE-2021-40438

CVE-2021-40438 build docker build -t cve-2021-40438:1.0 . run docker run --rm -d -p 4444:80 cve-2021-40438:1.0 check CVE-2021-40438 ./main.sh...

CVE-2026-123993

Hisense VIDAA Smart TV firmware V0000.01.00a.P0220 contains an unauthenticated access vulnerability where a QA build of the Google Cobalt browser engine exposes the WebDriver automation server on TCP port 4444 across all network interfaces without any authentication or pairing requirement. A...

CVE-2026-123993 Hisense VIDAA Smart TV Unauthenticated WebDriver Remote Access

Hisense VIDAA Smart TV firmware V0000.01.00a.P0220 contains an unauthenticated access vulnerability where a QA build of the Google Cobalt browser engine exposes the WebDriver automation server on TCP port 4444 across all network interfaces without any authentication or pairing requirement. A...

CVE-2026-123993

The Hisense VIDAA Smart TV (firmware V0000.01.00a.P0220 ) is vulnerable to unauthenticated access due to a QA build of the Google Cobalt browser engine exposing the WebDriver automation server on TCP port 4444 across all network interfaces. A LAN-adjacent attacker can connect to this exposed serv...

EUVD-2026-118422

Hisense VIDAA Smart TV firmware V0000.01.00a.P0220 contains an unauthenticated access vulnerability where a QA build of the Google Cobalt browser engine exposes the WebDriver automation server on TCP port 4444 across all network interfaces without any authentication or pairing requirement. A...

MAL-2026-17565 Malicious code in typesens (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ded39f31b2c2d4d73e0b576ab862c9ed90688153a43c359dae5b26854ad8738 package.json declares postinstall wscript.exe 4444.vbs, which runs automatically on npm install. The shipped 4444.vbs 765 KB contains a multi-layer...

Malicious code in typesens (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ded39f31b2c2d4d73e0b576ab862c9ed90688153a43c359dae5b26854ad8738 package.json declares postinstall wscript.exe 4444.vbs, which runs automatically on npm install. The shipped 4444.vbs 765 KB contains a multi-layer...

Malicious code in lite-matte (npm)

Source: amazon-inspector 4e7b0ae9e42c334c1c22627e60add7a2c5a0d558a2ab65a3af0043e27bb0e686 package.json declares "postinstall": "wscript.exe 4444.vbs", causing npm install to auto-execute a 765KB Windows Script Host file shipped in the tarball. 4444.vbs is heavily obfuscated: it reconstructs COM...

Malicious code in test-agency-assignment-02 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9944ea8ca21c0670c4b718a12427e8ca7330571ef5a9198a60b05f75038fe73 The tarball contains only package.json and 4444.vbs; the declared main entry index.js is absent. package.json defines a postinstall script wscript.ex...

Malicious code in test-agency-assignment (npm)

Source: amazon-inspector dcdf62e1c1eb44ca7a29ed37c12bdb71883025a46c5066e58c9228f0dfe782c2 package.json declares a postinstall lifecycle script wscript.exe 4444.vbs, causing the VBS file shipped in the tarball to run automatically on npm install on Windows hosts. 4444.vbs contains a hand-rolled...

MAL-2026-11004 Malicious code in n8n-nodes-pwn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae8222d3f90f4cff83a0840ee03f4b127946274f0215a73eadd6008404a2276e The package's Pwn.node.js executes malicious code at module load time when n8n loads this community node. It opens a TCP socket to 10.0.0.145:4444 an...

MINI-MW56-RRXG-4444

Bulletin has no description...

CVE-2021-4444

creationtimestamp| type| source ---|---|--- 2026-06-19 12:46:33+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/23b66058-4661-49fa-b6f0-c5f57348f533...

MillieRCE

MillieRCE Millie is an advanced browser-based remote code exec...

minalic-exploit-2013

MinaliC Webserver version...

Debian: Security Advisory (DSA-6200-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2026-4444

creationtimestamp| type| source ---|---|--- 2026-03-22 03:01:09+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhmkkninpt2n 2026-03-24 01:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities20260324...

CVE-2019-25362

WMV to AVI MPEG DVD WMV Convertor 4.6.1217 contains a buffer overflow vulnerability that allows attackers to execute arbitrary code by overwriting the license name and license code fields. Attackers can craft a malicious payload of 6000 bytes to trigger a bind shell on port 4444 by exploiting a...

CVE-2019-25362

CVE-2019-25362 affects WMV to AVI MPEG DVD WMV Convertor 4.6.1217. It contains a stack-based buffer overflow in input handling that can be triggered by a crafted payload (~6000 bytes), overwriting license name and license code fields to execute arbitrary code and potentially spawn a bind shell on...