13108 matches found
MAL-2026-13756 Malicious code in joule-sbx-poc (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 c460336aaf7e02cc7b37e4a0e58df5e22431f9de9ea852af21bb1aa2f333039c During installation, the code exfiltrates basic information and exfiltrates more information to a localhost service as well as starts a reverse shell there. It...
ShieldBreak
ShieldBreak - Windows Defender 0day vulnerability Microsoft h...
Pocsuite3-Nuclei-Bridge
Pocsuite3-Nuclei-Bridge A professional skill repository for c...
RockyLinux 10 : nodejs-nodemon (RLSA-2026:52841)
The remote RockyLinux 10 host has a package installed that is affected by a vulnerability as referenced in the RLSA-2026:52841 advisory. brace-expansion: brace-expansion: Denial of Service via unbounded intermediate arrays CVE-2026-69152 Tenable has extracted the preceding description block...
react2shell-poc
React2Shell PoC CVE-2025-55182 Skrip Proof of Concept PoC...
Exploit for Missing Authentication for Critical Function in Coreweave Marimo
CVE-2026-39987-Poc Proof o...
Exploit for Improper Locking in Linux Linux_Kernel
Linux Kernel Vulnerability Analysis: CVE-2021-26708 Overvi...
Malicious code in poc-ch4rlygr (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 341e5cb63d816ed6a8ed092f3b174e9826e10d051d8e78a53f0564b1437d0e04 On require/import, index.js collects os.hostname, os.arch, dirname, os.userInfo.username, and the full contents of process.env serialized via...
POC_platform
🛡️ POC Management Platform Local POC/EXP Management Platform:...
Exploit for CVE-2026-52102
CVE-2026-52102 - Exploit PoC A Proof of Concept PoC demonst...
Exploit for Use After Free in Redis
🔥 CVE-2026-23479 – Redis UAF Proof of Concept !Licensehtt...
CVE-PoC-Hub — Updated!
🔬 CVE-PoC-Hub — Curated Proof-of-Concept Exploits Working, verified PoC scripts for recent CVEs. Tested in lab environments. For security researchers, penetration testers, and CTF players. ⚠️ Disclaimer All PoCs are for educational and authorized testing only. Each exploit has been tested in...
MAL-2026-11431 Malicious code in @0xlr/dep-confusion-poc (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15016319bdfd6f98a13cf4dcca7adad8ad4a97678bfaa77e2cb9b7068be0a435 Self-described dependency-confusion proof-of-concept targeting the @gojek/argus internal scope name. The package's postinstall hook only runs echo...
GHSA-HR7P-WG7R-HG9M Flyto2 Core: ${env.VAR} interpolation reads any env secret despite env.get being denylisted
Summary The capability policy denies the env.get and env.loaddotenv modules by default, with the stated reason that they read arbitrary host environment variables API keys, DSNs and are a secret-exfil risk. But the workflow engine's variable resolver expands $env.VAR for any environment variable...
wp2shell-poc-fulljs — Updated!
WordPress CVE Logical Flow Demonstration Overview This project allows to reproduce the logical flow related to CVE-2026-63030 and CVE-2026-60137 leading to an sql injection serving as a base to finally trigger a RCE in WordPress. CVE-2026-63030 CVE-2026-60137 The demonstration illustrates how the...
Public PoC Released for Exploited Check Point SmartConsole Authentication Bypass
Cybersecurity researchers have shared additional technical details about a recently patched critical security flaw impacting Check Point Security Management Server and Multi-Domain Security Management Server MDS that has come under active exploitation in the wild. The vulnerability, tracked as...
Exploit for Improper Authentication in Redhat Keycloak
PoC CVE-2023-0264 — front OIDC session hijacking Front está...
Malicious Package
Overview crypt0co-walet-poc is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
Malicious Package
Overview n8n-nodes-security-test-poc is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...