CVE-2022-31298

CVE-2022-31298 Haraj Script 3.7 - Authenticated Stored XSS Exploit Title: Haraj Script 3.7 - Authenticated Stored XSS Date: 2022-06-13 CVE: CVE-2022-31298 Exploit Author: Abdulaziz Saad @b4zb0z Vendor Homepage: https://angtech.org/ Software Link: https://angtech.org/product/view/3 Version: 3.7...

CVE-2023-41425

CVE-2023-41425 CVE-2023-41425 is a reflected XSS vulnerability in Wonder CMS which further allows to execute arbitrary code through a malicious script via the installModule component. Usage Running the exploit against the target's loginURL, specifying our IP and port for the web server hosting th...

Stormshield Network Security Cross-Site Scripting Vulnerabilities

Stormshield Network Security versions 5.0.0 to 5.0.9 and 5.1.0 to 5.1.3 have a cross-site scripting vulnerability. This vulnerability stems from DOM-based cross-site scripting issues in the web management panel. Attackers can exploit this vulnerability by constructing specific parameter URLs...

Malicious code in quasitonnts (PyPI)

Source: kam193 6b73744742a9129ba02b40242325d596780af7d8e456c7040e8458d29c125540 The package belongs to a series of packages falsely advertising 'audio-analysis profiles' loader. In fact, the only purpose is to execute remote code, but the URL is not embedded in the package. It is likely a...

Malicious code in voltswannts (PyPI)

Source: kam193 5fa306d5f7de491546822f6b026c35cc395d7d379258b7a8382b50468ce708b2 The package belongs to a series of packages falsely advertising 'audio-analysis profiles' loader. In fact, the only purpose is to execute remote code, but the URL is not embedded in the package. It is likely a...

Malicious code in tonemaptts (PyPI)

Source: kam193 19491cfac57ebbc5106857c286eb420bb2c84f246781670579fc4311cb7d1cad The package belongs to a series of packages falsely advertising 'audio-analysis profiles' loader. In fact, the only purpose is to execute remote code, but the URL is not embedded in the package. It is likely a...

Malicious code in pyrechoasr (PyPI)

Source: kam193 abd16e8f67cf00b05cd9b944eaae2569a33cd419f50b3df499f203ea838fc447 The package belongs to a series of packages falsely advertising 'audio-analysis profiles' loader. In fact, the only purpose is to execute remote code, but the URL is not embedded in the package. It is likely a...

Malicious code in novalithtts (PyPI)

Source: kam193 4d136563fb3f5bd0febb4dc01f0af8d3ce9638271f1416f814d126fb49239840 The package belongs to a series of packages falsely advertising 'audio-analysis profiles' loader. In fact, the only purpose is to execute remote code, but the URL is not embedded in the package. It is likely a...

Malicious code in glassbeakasr (PyPI)

Source: kam193 de05a7ca1743ea6c3ceba4abc7f5452783d567b39f20007aeb57071a6d4019ed The package belongs to a series of packages falsely advertising 'audio-analysis profiles' loader. In fact, the only purpose is to execute remote code, but the URL is not embedded in the package. It is likely a...

Malicious code in driftwavets (PyPI)

Source: kam193 e69baa6a16626f26b6f71e04ce89a53a693a06c6545446a9addbecfd6c95d92f The package belongs to a series of packages falsely advertising 'audio-analysis profiles' loader. In fact, the only purpose is to execute remote code, but the URL is not embedded in the package. It is likely a...

Malicious code in emberlytts (PyPI)

Source: kam193 c53182f7339fc139b58f28bdd6588e55eb25c1c6d07089f6fc57b87f8339f547 The package belongs to a series of packages falsely advertising 'audio-analysis profiles' loader. In fact, the only purpose is to execute remote code, but the URL is not embedded in the package. It is likely a...

Malicious code in tonemaptts (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d30c3584f91da98dea7065e548acd378e0c1fa8abe692bbfd20c4abb384e05e Package tonemaptts version 0.1.0 was scanned 6 files. No install-time network I/O, no credential or environment harvesting, no suspicious lifecycle...

MAL-2026-17916 Malicious code in pyrechoasr (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b2a02d42b12227c9d61eaa5f23ffb432599d04d44adc2d7be9fae0589363d98 Package pyrechoasr version 0.1.0 on PyPI contains 6 files. No install-time or import-time network I/O, credential access, subprocess execution of...

Malicious code in pyrechoasr (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b2a02d42b12227c9d61eaa5f23ffb432599d04d44adc2d7be9fae0589363d98 Package pyrechoasr version 0.1.0 on PyPI contains 6 files. No install-time or import-time network I/O, credential access, subprocess execution of...

Malicious code in driftwavets (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc5ec2368bccc13ec6d3f5b028449a5dffe0cf88b1796271052e9e3c97145b4e driftwavets 0.1.0 contains no observed install-time or import-time code paths that read installer secrets, fetch and execute remote content, relay...

MAL-2026-17912 Malicious code in driftwavets (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc5ec2368bccc13ec6d3f5b028449a5dffe0cf88b1796271052e9e3c97145b4e driftwavets 0.1.0 contains no observed install-time or import-time code paths that read installer secrets, fetch and execute remote content, relay...

MAL-2026-17915 Malicious code in novalithtts (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bb01cabcce365078bca95c60c71c3b5b7e131a0779772cccf2706d5895a1c9f Analysis of the package contents surfaced no install-time or import-time behavior affecting the installer. No lifecycle scripts, no outbound network...

Malicious code in novalithtts (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bb01cabcce365078bca95c60c71c3b5b7e131a0779772cccf2706d5895a1c9f Analysis of the package contents surfaced no install-time or import-time behavior affecting the installer. No lifecycle scripts, no outbound network...

Malicious code in voltswannts (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5740f5637c15349ecbe95721abb18891aa6c18dcfb05adbb698ccfe505ae5a72 The package voltswannts 0.1.0 on PyPI contains 6 scanned files with no behaviors indicating supply-chain attack against installers. No install-time o...

MAL-2026-17920 Malicious code in voltswannts (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5740f5637c15349ecbe95721abb18891aa6c18dcfb05adbb698ccfe505ae5a72 The package voltswannts 0.1.0 on PyPI contains 6 scanned files with no behaviors indicating supply-chain attack against installers. No install-time o...