MAL-2026-17510 Malicious code in internallib_v275 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80c1c6d383b3defb01da235e39e08ce56276d887e63d900aea2ee689836f71b4 index.js exports a command function that invokes /bin/bash -c to curl a reverse-shell payload from reverse-shell.sh targeting the hardcoded host...

MAL-2026-17519 Malicious code in promises-dotenv3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 146d9688d00e8fa785e2fb62976f0dad169e8055c6c92d3795536cc63527c640 [email protected] is a typosquat of dotenv-family packages that executes an obfuscated payload at module load. On top-level require of the...

Malicious code in promises-dotenv3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 146d9688d00e8fa785e2fb62976f0dad169e8055c6c92d3795536cc63527c640 [email protected] is a typosquat of dotenv-family packages that executes an obfuscated payload at module load. On top-level require of the...

Malicious code in tailwindcss-forms-styles (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 587d9a389f35a8ec2d3ed714c90f7daa43feb6875f4ce2e4280f5ce19569d895 The package name tailwindcss-forms-styles mimics the legitimate @tailwindcss/forms plugin, and its src/index.js copies that plugin's code verbatim as...

MAL-2026-17524 Malicious code in tailwindcss-forms-styles (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 587d9a389f35a8ec2d3ed714c90f7daa43feb6875f4ce2e4280f5ce19569d895 The package name tailwindcss-forms-styles mimics the legitimate @tailwindcss/forms plugin, and its src/index.js copies that plugin's code verbatim as...

CVE-2025-55182-MassPayloadAttack

CVE-2025-55182 대량 페이로드 공격 React2Shell CVE-2025-55182 React2Shell 를 대상으로 하는 수정된 대량 RCE 익스플로잇 스크립트로, Next.js 애플리케이션을 공격합니다. 이 도구는 pax-k의 원본 PoC 스크립트의 수정판 입니다. 원본 스크립트가 단일 호스트를 대상으로 하는 반면, 이 버전은 URL 목록에서 대량 스캔 을 지원하도록 개선되어, 효율적인 취약점 평가를 위해 페이로드 주입, 명령 실행, 출력 파싱을 자동화합니다. 🚀 기능 대량 익스플로잇 : 대상 URL 목록이 포함...

vulnerable-next-js-poc

CVE-2025-55182 React2Shell - 概念実証 ⚠️ セキュリティ研究専用 このリポジトリには、React Server Componentsにおける重大なリモートコード実行脆弱性 CVE-2025-55182 の概念実証が含まれています。これは許可されたセキュリティテストおよび研究目的のみ です。 脆弱性概要 CVE ID : CVE-2025-55182 脆弱性名 : React2Shell CVSS スコア : 10.0 重大 タイプ : CWE-502 - 信頼できないデータのデシリアライゼーション 攻撃ベクトル : ネットワーク AV:N 認証 : 不要...

Malicious code in botmaker-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86fdc86c67d202ca9938942ef7786534d1b72169187cce13b1cefd8899fa54aa On npm install, postinstall.js collects the installer's hostname, username, current working directory, architecture, platform, and network interface...

MAL-2026-17502 Malicious code in botmaker-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86fdc86c67d202ca9938942ef7786534d1b72169187cce13b1cefd8899fa54aa On npm install, postinstall.js collects the installer's hostname, username, current working directory, architecture, platform, and network interface...

Malicious code in css-reading-flow-polyfill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b18e313d5fc67f07c1bcf051bd79a85dca97bb3c4510d9755efca6414bb55ff The package is published as css-reading-flow-polyfill but ships thunderboltRegistry.js, which impersonates internal Wix thunderbolt registry modules...

MAL-2026-17483 Malicious code in css-reading-flow-polyfill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b18e313d5fc67f07c1bcf051bd79a85dca97bb3c4510d9755efca6414bb55ff The package is published as css-reading-flow-polyfill but ships thunderboltRegistry.js, which impersonates internal Wix thunderbolt registry modules...

CVE-2023-30800_PoC_go

CVE-2023-30800PoCgo KodiTV 용 CVE-2023-30800 개념 증명Proof of Concept — Go로 작성됨 이 도구는 KodiTV 버전 20.1 미만의 취약한 설치를 공격하여 셸을 획득하는 방법을 보여줍니다. RCE는 서버의 JSON-RPC 기능을 남용하여 exec 명령을 실행합니다. 본 도구는 교육 및 연구 목적으로만 사용해야 합니다. 승인되지 않은 시스템에서 사용하면 불법이 될 수 있습니다. 정보| 값 ---|--- 도구 이름| CVE-2023-30800 PoC 언어| Go 공격 유형| 원격 코...

CVE-2025-0282

CVE-2025-0282 Ivanti Connect Secure IFT TLS 스택 오버플로우 사전 인증 RCE CVE-2025-0282 이는 의도적으로 비자명한 방식으로 손상되어 있으며, 이전에 저희의 익스플로잇 기술 블로그 게시물에서 설명한 대로 작동하도록 하려면 상당한 노력이 필요합니다. 이 취약점을 이해하려면 저희의 기술 문서를 참조하십시오. 익스플로잇 워크스루 및 기술 - Ivanti Connect Secure RCE CVE-2025-0282 PoC 이 코드는 두 가지 모드로 작동합니다: 1. 일반 모드 2. 익스플로...

Malicious code in focus-visible-polyfill-lite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5225b5a8636a589f9b90272ad04c3f4104670a23d5c24b45f6aeaa757a4f2a2b The package is advertised as a focus-visible polyfill but ships thunderboltRegistry.js, which impersonates Wix thunderbolt internal registry modules...

MAL-2026-17491 Malicious code in focus-visible-polyfill-lite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5225b5a8636a589f9b90272ad04c3f4104670a23d5c24b45f6aeaa757a4f2a2b The package is advertised as a focus-visible polyfill but ships thunderboltRegistry.js, which impersonates Wix thunderbolt internal registry modules...

CVE-2026-73570

CVE-2026-73570 — Zimbra Collaboration Suite RCE Note: This repository contains an independent technical analysis and PoC reproduction of CVE-2026-73570. It is not the original vulnerability report. Zimbra Collaboration Suite RCE — SMTP log poisoning → swatchdog → OS Command Injection CVSS 8.9, CI...

PoC-CVE-2025-66224

OrangeHRM RCE Exploit - CVE-2025-66224 📋 説明 この概念実証（PoC）は、OrangeHRM の sendmailpath 設定パラメータにおけるコマンドインジェクションを通じたリモートコード実行（RCE）脆弱性を示しています。 このエクスプロイトは以下のように動作します： 1. 悪意のあるペイロードを MySQL データベース（hshrconfig テーブル）に注入する 2. メール設定 API エンドポイントを介してペイロードの実行をトリガーする 3. 元の値を自動的に復元して痕跡を消去する 🎯 影響を受けるバージョン OrangeHRM...

hazel-cve-2026-43499

Hazel Fire TV temporary root Temporary root exploit for the Amazon hazel Fire TV platform, based on CVE-2026-43499. The exploit is is intended for the ARM32 Linux 4.9 firmware shared by Hazel televisions from several manufacturers. Profiles currently cover firmware from PS7657.3645N through...

log4shell-vulnerable-app

Log4Shell サンプル脆弱性アプリケーション（CVE-2021-44228）- 二度編集済み このリポジトリには、CVE-2021-44228 に対して脆弱な Spring Boot Web アプリケーションが含まれています。この脆弱性は Log4Shell と呼ばれています。 Log4j 2.14.1（spring-boot-starter-log4j2 2.6.1 経由）と JDK 1.8.0181 を使用しています。 アプリケーションの実行 実行: docker run --name vulnerable-app --rm -p 8080:8080...

CVE-2026-73519-WolfStack-PoC

CVE-2026-73519 — WolfStack ハードコード済みクラスターシークレット → 非認証RCE WolfStack に存在するハードコード済みデフォルト認証シークレットの PoC です。これにより、リモートの非認証攻撃者が管理下の任意の Docker/LXC コンテナ内で root として任意のコマンドを実行できます。 | ---|--- CVE| CVE-2026-73519 CNA| VulnCheck Advisory| GHSA-r3mw-2wmq-j6jg · VulnCheck writeup CVSS 3.1| 9.8 Critical —...