13105 matches found
MAL-2026-15921 Malicious code in box-sign-client-poc (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc47a8e8a147ec412ecc05d666655b675a36b9eec0823e278767a286993e7e0d package.json declares a preinstall hook that runs index.js on npm install. The script reads the installer's hostname and OS username, embeds them...
Malicious Package
Overview box-sign-client-poc is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
Malicious Package
Overview agentrc-security-poc-policy is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...
Malicious Package
Overview @yuva2210/okx-poc-rce-impact is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...
CVE-2026-72808
creationtimestamp| type| source ---|---|--- 2026-09-04 00:35:27+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-v7ph-r5r6-4jcj 2026-09-04 08:32:32+00:00| seen| https://gist.github.com/alon710/4e3a59a46f5538004facf996eb24fc2d...
CVE-2026-72800
creationtimestamp| type| source ---|---|--- 2026-09-04 00:35:03+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-5fhr-f75j-8wr9 2026-09-04 00:53:19+00:00| seen| https://gist.github.com/alon710/e7f11f4247b66892a17548a4438b01cd...
CVE-2026-68585
creationtimestamp| type| source ---|---|--- 2026-09-03 22:35:03+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-pm3w-vxp9-ccwc 2026-09-04 13:04:27+00:00| seen| https://gist.github.com/alon710/0a73f204f4113f41e2621c39634bb023...
CVE-2026-78070
creationtimestamp| type| source ---|---|--- 2026-09-03 22:00:06+00:00| published-proof-of-concept| Telegram/YUSQnHRGPoy1hnFlMACvlxl4ArBdfPL6N2OZrh3RVUvk4 2026-09-04 00:00:11+00:00| published-proof-of-concept| Telegram/YUSQnHRGPoy1hnFlMACvlxl4ArBdfPL6N2OZrh3RVUvk4...
CVE-Exploits
一个收集各种CVE漏洞的PoC（概念验证）或Exploit（漏洞利用）工具的仓库。旨在为安全研究、渗透测试提供参考和便利。...
CVE-2026-73570
CVE-2026-73570 PoC - Probador de Inyección de Comandos SMTP Un script personalizado de prueba de concepto PoC en Python de bajo nivel para probar vulnerabilidades de inyección de comandos SMTP CVE-2026-73570. Esta herramienta envía una dirección RCPT TO malformada que contiene sustitución de...
CVE-2026-81724
creationtimestamp| type| source ---|---|--- 2026-09-02 16:35:53+00:00| published-proof-of-concept| https://github.com/nltk/nltk/security/advisories/GHSA-cw6x-m8jw-qmrh...
CVE-2026-71492
creationtimestamp| type| source ---|---|--- 2026-09-02 16:35:33+00:00| published-proof-of-concept| https://github.com/masci/banks/security/advisories/GHSA-x8wg-4xgc-vr54...
Malicious Package
Overview peertube-plugin-poc-marker is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...
Malicious Package
Overview frank-research-poc-apple is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...
Exploit for CVE-2022-25765
CVE-2022-...
Malicious code in peertube-plugin-poc-marker (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff307f6227ac4a9217a899b419a6931ddfe0376cb0cc6ba3570c0f589247241c index.js runs id; uname -a; hostname; date -u; ls -d /var/www/peertube via execSync when PeerTube invokes the plugin's register hook, then POSTs the...
MAL-2026-15817 Malicious code in peertube-plugin-poc-marker (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff307f6227ac4a9217a899b419a6931ddfe0376cb0cc6ba3570c0f589247241c index.js runs id; uname -a; hostname; date -u; ls -d /var/www/peertube via execSync when PeerTube invokes the plugin's register hook, then POSTs the...
CVE-2026-31321
creationtimestamp| type| source ---|---|--- 2026-09-02 01:00:04+00:00| published-proof-of-concept| Telegram/yppx2WWa40cV5hBHui4bTL2VMdAtcaI4VaugdhOfmt8Lg 2026-09-03 00:01:00+00:00| published-proof-of-concept| Telegram/yppx2WWa40cV5hBHui4bTL2VMdAtcaI4VaugdhOfmt8Lg...