4386 matches found
Malicious code in pay-methods-kmf (npm)
Source: amazon-inspector 07a616a1db0408a0570000c6514224d22e71c3ecee0f08268b5dd9bc96761fd2 [email protected] is a trivial stub empty index.js, manifest description 'Frontend utilities' that ships a prebuilt Linux x64 native addon at prebuilds/linux-x64/addon.node and loads it from...
Malicious code in some-very-long-package-name (npm)
Source: amazon-inspector 1ce120698c1be7e98866ccdff0987f7b77f53377e525284f311363b79f5ea397 Package ships a postinstall lifecycle hook node beacon.cjs and a top-level require'./beacon.cjs'.fire call in index.js, so both npm install and any require of the package trigger an outbound HTTP POST to the...
Malicious code in some-very-long-package-name (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58c08ea2abb307f6ecb9a1896fcc3980e9a1eaf8b29044db67cd985654e1db16 The package is a stub whose main module exports a Proxy that returns a no-op for every property access, providing none of the functionality implied b...
Apache Solr - Deserialization of Untrusted Data
In Apache Solr versions 5.0.0 to 5.5.5 and 6.0.0 to 6.6.5, the Config API allows to configure the JMX server via an HTTP POST request. By pointing it to a malicious RMI server, an attacker could take advantage of Solr's unsafe deserialization to trigger remote code execution on the Solr side. id:...
CVE-2025-55182
CVE-2025-55182 Proof of concept exploit for CVE-2025-55182. When successful, it will emulate a shell on the remote target over HTTP-POST requests. Works with both HTTP and HTTPS, but skips any certificate checks. Only supports directory changes with absolute paths. How to use 1. Set up the...
log-add-http-post-bodies
Adicionar trecho do corpo POST ao log HTTP Este script dá aos analistas a capacidade de espiar o que está sendo enviado nos corpos POST HTTP. Ele faz isso simplesmente estendendo o log HTTP. Instalação :: zkg refresh zkg install corelight/log-add-http-post-bodies Uso O log HTTP terá um novo campo...
CVE-2024-9441
Nortek Linear eMerge E3 PoC de RCE Pré-Autenticação CVE-2024-9441 Descrição: Este repositório contém uma prova de conceito PoC de exploit para o Nortek Linear eMerge E3 CVE-2024-9441, que é vulnerável a Execução Remota de Código RCE em estado de pré-autenticação. A vulnerabilidade é acionada por...
firewall
🛡️ Spring4Shell Firewall Defense – Cybersicherheits-Vorfallsimulation Dieses Projekt ist Teil einer Cybersicherheits-Jobsimulation, die ich im August 2025 über Forage abgeschlossen habe. Es simuliert einen realen Vorfall mit der Spring4Shell-Schwachstelle CVE-2022-22965 und zeigt, wie eine...
cisco-CVE-2023-20198-tester
Cisco Tester: Skript zur Schwachstellenerkennung Table of Contents Übersicht Funktionen Voraussetzungen Installation Verwendung Ausgabe Mitwirken Übersicht Das Skript ciscotester.py wurde entwickelt, um mehrere IP-Adressen auf eine spezifische Cisco-Schwachstelle CVE-2023-20198 zu überprüfen. Es...
CVE-2017-9841
CVE-2017-9841 Massen-Scan- und Exploit-Skript für CVE-2017-9841. PHPUnit ist ein auf PHP basierendes Test-Framework. In PHPUnit vor Version 4.8.28 und in den 5.x-Versionen vor 5.6.3 besteht eine Sicherheitslücke in der Datei Util/PHP/eval-stdin.php. Ein entfernter Angreifer kann diese...
CVE-2024-24919
DE Ist ein Proof of Concept PoC-Skript zur Überprüfung der Schwachstelle CVE-2024-24919. Das Skript ist dafür ausgelegt, HTTP-POST-Anfragen an bestimmte URLs zu senden und die Antworten auf mögliche Sicherheitsprobleme wie unbefugten Zugriff oder Datenlecks zu analysieren. Es bietet eine einfache...
Malicious code in @galicia-toolkit-nestjs/paas (npm)
Source: amazon-inspector 5df4f7b59cbe90e6b36ce17f0870cd419345167d9aee683d65a43c65ea5fb213 The package's main entry index.js loads a prebuilt native addon prebuilds/-/metrics.node inside a try/catch on require. The ELF reads CI and cloud credentials from the environment — AWSACCESSKEYID,...
S2-046_S2-045_POC
S2-046POC Verwendung: ./s2046.sh url ./s2045.sh url Beispiel: 1. chmod +x ./s2046.sh 2. ./s2046.sh http://172.16.152.135/index.action AUSGABE: ================HTTP GET Method================ uid=0root gid=0root groups=0root context=unconfinedu:unconfinedr:unconfinedjavat:s0-s0:c0.c1023 uid=0root...
Exploitation-of-a-Remote-Code-Execution-vulnerability--CVE-2024-7954-
Ausnutzung einer Remote Code Execution-Schwachstelle CVE-2024-7954 Projekt zum Testen von Softwareschwachstellen Eingereicht von: Shivansh Kuntal Überblick Dieses Projekt demonstriert die Ausnutzung von CVE-2024-7954 , einer kritischen Remote Code Execution RCE-Schwachstelle, die SPIP CMS über da...
Likeshop < 2.5.7.20210311 - Arbitrary File Upload
A vulnerability classified as critical was found in Likeshop up to 2.5.7.20210311. This vulnerability affects the function FileServer::userFormImage of the file server/application/api/controller/File.php of the component HTTP POST Request Handler. The manipulation of the argument file with an...
CVE-2022-22965-Spring4Shell-Security-Operations-Analysis
CVE-2022-22965 — Spring4Shell Security Operations Analyse Eine praktische Simulation eines Security Operations Centre SOC, bei der ich die Rolle eines Information Security Analyst übernommen habe und auf einen aktiven Spring4Shell-Exploit-Versuch reagiert habe. Dieses Repository dokumentiert den...
CVE-2026-107276
The MISP platform contains a race condition (CWE-362, CWE-367) within its email-based one-time password (OTP) login flow. The vulnerability exists because the system performs non-atomic operations to read, validate, and delete OTP values from the shared store. This allows two concurrent HTTP requ...
CVE-2019-16724
Descrição da Vulnerabilidade O File Sharing Wizard 1.5.0 permite que um atacante remoto obtenha execução arbitrária de código ao explorar um estouro de buffer baseado em Structured Exception Handler SEH em um parâmetro HTTP POST. Este exploit foi testado no Windows 7 Home. Ele certamente quebrará...
VulnCheck KEV: CVE-2026-51886
langflow-ai langflow v1.9.3 is affected by: Code Injection. The impact is: execute arbitrary code remote. The component is: src/backend/base/langflow/api/v1/validate.py:validate-postvalidatecode-a-real-authenticated-http-post-to-api-v1. The attack vector is: Attack surface: HTTP or browser-backed...
