Malicious code in google-img-scrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86caa3dfd7fbfa99dfa8042e4792f31346c57427e7eb83cbc468b5a14d4c0e14 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-15967 Malicious code in @yoannchb/wtf-json (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9479b89e13ce2a4f3327c18fc429547d79e4324efc86243c49213cae1493ea22 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-15980 Malicious code in ens-namehash-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 14b2ef072c91f8f3543ffbe2c1058ad379782fece91aac0f3cd1eac6a931f60f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2026-18238

The rpcap client code that processes a RPCAPMSGPACKET message received from the server incorrectly validates its headers. A malicious server can send a crafted message and cause the client to treat up to 20 bytes of the client process memory beyond the end of the buffer as if it was a part of the...

AZL-99735 CVE-2026-18313 affecting package libpcap 1.10.6-1

rpcapd can allocate up to 65536 bytes per each RPCAPMSGUPDATEFILTERREQ or RPCAPMSGSTARTCAPREQ message received from the client, but it never frees the memory, so it leaks memory even under normal use. A malicious client can cause the server to leak memory substantially faster...

CVE-2026-18313

rpcapd can allocate up to 65536 bytes per each RPCAPMSGUPDATEFILTERREQ or RPCAPMSGSTARTCAPREQ message received from the client, but it never frees the memory, so it leaks memory even under normal use. A malicious client can cause the server to leak memory substantially faster...

CVE-2026-18238

libpcap versions before 1.10.7 are affected by an out-of-bounds read in the rpcap client . The code that processes an RPCAP_MSG_PACKET message from the server incorrectly validates its headers, allowing a malicious server to cause the client to treat up to 20 bytes of client process memory beyond...

CVE-2026-18238 OOBR in rpcap client in libpcap before 1.10.7

The rpcap client code that processes a RPCAPMSGPACKET message received from the server incorrectly validates its headers. A malicious server can send a crafted message and cause the client to treat up to 20 bytes of the client process memory beyond the end of the buffer as if it was a part of the...

EUVD-2026-72021

The rpcap client code that processes a RPCAPMSGPACKET message received from the server incorrectly validates its headers. A malicious server can send a crafted message and cause the client to treat up to 20 bytes of the client process memory beyond the end of the buffer as if it was a part of the...

CVE-2026-18313 rpcapd memory leak in libpcap before 1.10.7

rpcapd can allocate up to 65536 bytes per each RPCAPMSGUPDATEFILTERREQ or RPCAPMSGSTARTCAPREQ message received from the client, but it never frees the memory, so it leaks memory even under normal use. A malicious client can cause the server to leak memory substantially faster...

CVE-2019-5010

CVE-2019-5010 Autor: Jonathan M. Wilbur Año de copyright: 2019 Licencia: Licencia MIT Cómo usar 1. Instale todas las dependencias ejecutando npm install. 2. Compile el proyecto usando npm run build. 3. Ejecute node ./dist/index.js para crear el certificado malicioso en...

CVE-2022-30190-Analysis-With-LetsDefends-Lab

Análisis de CVE-2022-30190 con el Laboratorio de LetsDefend El 27 de mayo de 2022, el equipo técnico de NaoSec intentó analizar y encontró un documento en formato .doc que parecía malicioso. Dicho documento tenía indicios de haber sido subido desde una dirección IP de Bielorrusia. Esta sospecha f...

jsonorg-tp1

json.org CVE-2022-45688 verdadero positivo El proyecto ilustra CVE-2022-45688 en json.org -- hay una aplicación sencilla XML2JSONConverter para leer XML de la entrada, convertirlo a JSON e imprimirlo con formato bonito en la consola. Usando una entrada maliciosa, la aplicación falla con un...

CVE-2021-40444

CVE-2021-40444 PoC Generador de docx malicioso para explotar CVE-2021-40444 Ejecución remota de código en Microsoft Office Word La creación de este script se basa en ingeniería inversa sobre la muestra utilizada in-the-wild: 938545f7bbe40738908a95da8cdeabb2a11ce2ca36b0f6a74deda9378d380a52 archivo...

CVE-2025-30065-PoC

CVE-2025-30065 PoC Usage Build the image root@kitploit: docker build -t cve-2025-30065 . Generate the malicious Parquet root@kitploit: docker run --rm -v $pwd:/poc/out cve-2025-30065 generate "cat /etc/passwd" ./out/malicious.parquet Trigger the exploit root@kitploit: docker run --rm -v...

CVE-2025-23040

CVE-2025-23040 - Credential Leak in GitHub Desktop GitHub Desktop 3.4.12 is vulnerable to an attack that allows exfiltration of credentials via malicious remote URLs. An attacker can convince a user to clone a manipulated repository to obtain username and OAuth token...

wakuwaku

AppleDog/Hooks Este repositorio es parte de un PoC para explotar CVE-2024-32002, una vulnerabilidad en Git que permite RCE durante las operaciones de clonación de Git. Este repositorio contiene hooks maliciosos utilizados en ataques que explotan esta vulnerabilidad. Resumen Para obtener una...

libssh2-Exploit

libssh2-Exploit Crear un exploit para la vulnerabilidad de libssh2 descrita en CVE-2019-13115 Objetivos 1. Establecer un servidor openssh. // Completado para el 20 de octubre 2. Crear un cliente cpp de libssh2 y establecer conectividad con el servidor. // Completado para el 20 de octubre 3...

Malicious code in proxycer (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2286dac5be0a9e8cc2e7b1ff92253d4b09beb0c43d5e795b9b9ea1391e6f8764 The package's top-level init.py imports starts.py, which is a single-line loader that reverses a 100KB string literal, base64-decodes it, marshal.loa...

Malicious code in dbt-sa-cli (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a3fc52d1baa65bd51dd9659641f0df237ea2a595358cd91b19fd8988ba3236a setup.py defines rcepoc and invokes it at module top level, so the code runs unconditionally during pip install dbt-sa-cli. The function collects...