130502 matches found
CVE-2020-17453
Badges License MIT Installation Install CVE-2020-17453 with npm npm install cve-2020-17453 -g Usage Example for single url CVE-2020-17453 -u http://example.com Usage Example for list of urls CVE-2020-17453 -l urls.txt -o out.txt Screenshots Help menu Get all items 👋 Hey karthithehacker...
dcipher
dcipher Decipher hashes using online rainbow & lookup table attack services. Install ❯❯❯ npm install dcipher Usage const dcipher = require'dcipher'; dcipher'21232f297a57a5a743894a0e4a801fc3'.thenplaintext = console.logplaintext; //= 'admin' ;...
PolinRider
PolinRider: DPRK Threat Actor Implants Malware in Hundreds of GitHub Repos Date: 2026-03-07 Last updated: 2026-04-11 — see April 10–11 Update below Severity: CRITICAL — active supply chain infection across 1,950+ public repositories, confirmed operational merger with the TasksJacker / Contagious...
CVE-2021-21315-PoC
CVE-2021-21315-systeminformation This is Proof of Concept for CVE-2021-21315 which affects The System Information Library for Node.JS npm package "systeminformation". npmjs.com/systeminformation "be sure to check or sanitize service parameters that are passed to si.inetLatency, si.inetChecksite,...
cve-lite-cli
Most tools tell you what's wrong. CVE Lite CLI tells you what to run. CVE Lite CLI 🏆 Officially recognized as anOWASP Lab Project Vulnerability scanning that starts in your terminal and fits cleanly into CI. Scan your lockfile, get copy-and-run fix commands, and ship clean code. Scan. Understand...
CVE-2026-39983
References https://github.com/patrickjuchli/basic-ftp/security/advisories/GHSA-chqc-8p9q-pq6q https://github.com/patrickjuchli/basic-ftp/commit/2ecc8e2c500c5234115f06fd1dbde1aa03d70f4b https://github.com/patrickjuchli/basic-ftp/releases/tag/v5.2.1...
deephas-1.0.7-Prototype-Pollution-PoC-CVE-2026-25047-
deephas = 1.0.8. References: GitHub Advisory GHSA-2733-6c58-pf27 NVD CVE-2026-25047...
CVE-2026-29786
CVE-2026-29786 Research: Joshua van Rijswijk Description This repository contains a Proof of Concept PoC for CVE-2026-29786 , a vulnerability in the tar npm package that allows a crafted archive to create a hardlink pointing outside the intended extraction directory. The issue occurs when a tar...
CVE-2021-21315-exploit
CVE-2021-21315 Exploit Des: My python Script to exploit system Information Library for Node.JS npm package "systeminformation". npmjs.com/systeminformation I thought this POC will not show real world impact, But it'll be cool in CTF's...
twifo-cli
T W I F O - C L I Get user information of a Twitter user! Install $ npm install --global twifo-cli OR $ sudo npm install --global twifo-cli Usage $ Usage: twifo Example: $ twifo 9gag Related twifo : API for this tool. quorafy: Get user information of a Quora user. License MIT © Rishi Giri...
cwe-tool
cwe-tool A command line CWE discovery tool based on OWASP / CAPSEC database of Common Weakness Enumeration. Official OWASP CWE Toolkit Page Install Executable with Node.js tooling If you have a Node.js environment, you can invoke cwe-tool using the npx tool as follows: npx cwe-tool ...command-lin...
node-ipc-malware-protestware-CVE-2022-23812
CVE-2022-23812 RIAEvangelist/node-ipc is malware / protestware The RIAEvangelist/node-ipc module contains protestware peacenotwar. Excerpt from RIAEvangelist/node-ipc: as of v11.0.0 & v9.2.2 this module uses the peacenotwar module. More importantly, commits 847047cf7f81ab08352038b2204f0e763344958...
cve-2025-12735-expr-eval-rce
CVE-2025-12735 expr-eval RCE Exploit A security research tool for detecting and testing the CVE-2025-12735 vulnerability in the expr-eval and expr-eval-fork npm packages. ⚠️ Disclaimer This tool is for authorized security testing and educational purposes only. Unauthorized access to computer...
ROOT-APP-NPM-CVE-2026-90711 CVE-2026-90711 in proxy-addr - Patched by Root
Root has patched CVE-2026-90711 in the proxy-addr package for Root:npm. Multiple fixed versions available...
CVE-2022-24434_POC
CVE-2022-24434 – PoC for Dicer This repository contains a Proof-of-Concept PoC for CVE-2022-24434 , a vulnerability affecting the Dicer npm package. PoC target version: 0.3.1 ensure the dicer code used is exactly v0.3.1 📂 Project Structure Make sure the directory is structured like this: . ├──...
CVE-2026-42089
CVE-2026-42089 A local package installation helper trusted caller-supplied package names too much. In yeoman-environment, missing generators could be installed without user confirmation, turning attacker-controlled project metadata into a package-install and code-execution path. Intro I found thi...
ROOT-APP-NPM-AIKIDO-2026-396404 AIKIDO-2026-396404 in tinypool - Patched by Root
Root has patched AIKIDO-2026-396404 in the tinypool package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-82659 CVE-2026-82659 in nodemailer - Patched by Root
Root has patched CVE-2026-82659 in the nodemailer package for Root:npm. Multiple fixed versions available...
CVE-2026-11417-AWS-CDK-RCE
Supply Chain Command Injection in AWS CDK's NodejsFunction CVE-2026-11417 Author: Hesham Ashraf @HeshamASH Date: June 10, 2026 Severity: High CVSSv3.1: 7.3, CVSSv4: 7.0 CWE: CWE-78 — Improper Neutralization of Special Elements used in an OS Command OS Command Injection Affected Package: aws-cdk-l...