131572 matches found
CVE-2026-11417-AWS-CDK-RCE
Supply Chain Command Injection in AWS CDK's NodejsFunction CVE-2026-11417 Author: Hesham Ashraf @HeshamASH Date: June 10, 2026 Severity: High CVSSv3.1: 7.3, CVSSv4: 7.0 CWE: CWE-78 โ Improper Neutralization of Special Elements used in an OS Command OS Command Injection Affected Package: aws-cdk-l...
dcipher-cli
dcipher-cli Crack hashes using online rainbow & lookup table attack services, right from your terminal. Install โฏโฏโฏ npm install -g dcipher-cli Usage โฏโฏโฏ dcipher --help Crack hashes using online rainbow & lookup table attack services, right from your terminal. Usage โฏโฏโฏ dcipher โฏโฏโฏ echo | dcipher...
CVE-2021-21315-exploit
CVE-2021-21315 Exploit Des: My python Script to exploit system Information Library for Node.JS npm package "systeminformation". npmjs.com/systeminformation I thought this POC will not show real world impact, But it'll be cool in CTF's...
cwe-tool
cwe-tool A command line CWE discovery tool based on OWASP / CAPSEC database of Common Weakness Enumeration. Official OWASP CWE Toolkit Page Install Executable with Node.js tooling If you have a Node.js environment, you can invoke cwe-tool using the npx tool as follows: npx cwe-tool ...command-lin...
CVE-2026-42089
CVE-2026-42089 A local package installation helper trusted caller-supplied package names too much. In yeoman-environment, missing generators could be installed without user confirmation, turning attacker-controlled project metadata into a package-install and code-execution path. Intro I found thi...
CVE-2026-45321-Tanstack
Supply Chain Attack Simulation โ CVE-2026-45321 TanStack Educational Lab for Understanding npm Supply Chain Attacks, CI/CD Abuse, and Install-Time Code Execution Disclaimer This project is created only for: cybersecurity learning, defensive security research, local lab simulation, understanding t...
cve-lite-cli
Most tools tell you what's wrong. CVE Lite CLI tells you what to run. CVE Lite CLI ๐ Officially recognized as anOWASP Lab Project Vulnerability scanning that starts in your terminal and fits cleanly into CI. Scan your lockfile, get copy-and-run fix commands, and ship clean code. Scan. Understand...
js-x-ray
!slsa...
revera
Revera The credit score for npm packages. Revera helps you decide whether a package is worth installing before you run npm install. It analyzes package quality, maintenance, security, ecosystem health, and publisher trust โ and now propagates risk transitively across your entire dependency graph ...
PolinRider
PolinRider: DPRK Threat Actor Implants Malware in Hundreds of GitHub Repos Date: 2026-03-07 Last updated: 2026-04-11 โ see April 10โ11 Update below Severity: CRITICAL โ active supply chain infection across 1,950+ public repositories, confirmed operational merger with the TasksJacker / Contagious...
CVE-2024-21533-PoC-ggit
CVE-2024-21533 Argument Injection vulnerability in ggit ggit describes itself as: Local promise-returning git command wrappers Resources: Project's GitHub source code: https://github.com/bahmutov/ggit Project's npm package: https://www.npmjs.com/package/ggit Article write-up on this argument...
CVE-2020-7598
CVE-2020-7598 - Prototype Pollution in minimist Disclaimer This project is created only for: learning, security research, and private local lab. Do not use against systems without permission. About CVE CVE-2020-7598 is a Prototype Pollution vulnerability in the npm package: minimist vulnerable...
CVE-2024-21532-PoC-ggit
CVE-2024-21532 Command Injection vulnerability in ggit ggit describes itself as: Local promise-returning git command wrappers Resources: Project's GitHub source code: https://github.com/bahmutov/ggit Project's npm package: https://www.npmjs.com/package/ggit Article write-up on this vulnerability:...
CVE-2021-21315-PoC
CVE-2021-21315-systeminformation This is Proof of Concept for CVE-2021-21315 which affects The System Information Library for Node.JS npm package "systeminformation". npmjs.com/systeminformation "be sure to check or sanitize service parameters that are passed to si.inetLatency, si.inetChecksite,...
ReactNext2Shell
React-Next-Scanner Safe CLI scanner for CVE-2025-55182 and CVE-2025-66478 This tool provides a lightweight, non-exploitative vulnerability scanner focused on modern JavaScript stacks, specifically: API services affected by CVE-2025-55182 Next.js applications affected by CVE-2025-66478 It works on...
CVE-2020-17453
Badges License MIT Installation Install CVE-2020-17453 with npm npm install cve-2020-17453 -g Usage Example for single url CVE-2020-17453 -u http://example.com Usage Example for list of urls CVE-2020-17453 -l urls.txt -o out.txt Screenshots Help menu Get all items ๐ Hey karthithehacker...
egg-scripts-CVE-2018-3786
egg-scripts deploy tool for egg project. Note: Windows is partially supported, see22 Install $ npm i egg-scripts --save Usage Add eggctl to package.json scripts: "scripts": "start": "eggctl start --daemon", "stop": "eggctl stop" Then run as: npm start npm stop Note: egg-scripts is not recommended...
ROOT-APP-NPM-CVE-2026-77078 CVE-2026-77078 in multer - Patched by Root
Root has patched CVE-2026-77078 in the multer package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-82333 CVE-2026-82333 in multer - Patched by Root
Root has patched CVE-2026-82333 in the multer package for Root:npm. Multiple fixed versions available...
CVE-2023-45827
CVE-2023-45827 ์ทจ์ฝ์ ๊ฐ์ CVE-2023-45827 CVSS : 9.8 Nov 3, 2023 ProtoType Pollution in node.js package rebob ํ๋ก์ ํธ์ ์ผํ ์ทจ์ฝ์ ์ค๋ช github advisories This is a Prototype PollutionPP vulnerability in dot-diver. It can leads to RCE. vulnerable code...