CVE-2024-6387_PoC

CVE-2024-6387 PoC This Bash script is designed to check if a server is running a vulnerable version of OpenSSH based on its SSH banner. It verifies if the SSH port is open and examines the banner response to determine if it matches any known vulnerable versions. Usage 1. Clone the Repo git clone...

Belati

Belati Belati - The Traditional Swiss Army Knife For OSINT Belati is tool for Collecting Public Data & Public Document from Website and other service for OSINT purpose. This tools is inspired by Foca and Datasploit for OSINT : Current Version v0.2.4 Belati In Action Why I Made this? Just for...

Maian Cart 3.8 — Unrestricted `addBanners` Banner Upload Enables Webshell Write — Detect

Fingerprint / reachability check for Maian Cart 3.8 — Unrestricted addBanners Banner Upload Enables Webshell Write and RCE Administrator Session Required !/usr/bin/env python3 -- coding: utf-8 -- """Detection for Maian Cart 3.8 — Unrestricted addBanners Banner Upload Enables Webshell Write and RC...

UnrealIRCd CVE-2010-2075 Detect

Detects UnrealIRCd banner on IRC port. !/usr/bin/env python3 -- coding: utf-8 -- """Detects UnrealIRCd banner on IRC port.""" import socket from kittysploit import from lib.protocols.tcp.tcpscannerclient import Tcpscannerclient class ModuleScanner, Tcpscannerclient: info = "name": "UnrealIRCd...

Malware in @ppa-web-components/ppa-banner

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in @ppa-web-components/ppa-banner (npm)

Source: amazon-inspector bcf0b03540a27943a2afcc26927ce7256d85328bc4fcbc2562f36a88ad75ce8d @ppa-web-components/[email protected] is described as a 'Compatibility shim' but ships only two code paths: a no-op Proxy as its main export, and beacon.cjs. beacon.cjs defines BEACON =...

Malicious Package

Overview @ppa-web-components/ppa-banner is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and thi...

MAL-2026-18272 Malicious code in @ppa-web-components/ppa-banner (npm)

@ppa-web-components/ppa-banner is a dependency-confusion package: it is described as a "Compatibility shim", uses inflated version numbers, and its README calls it an "authorized dependency-confusion test". Each listed version 3.0.0, 1.0.1, 2.0.0, 1.1.0, 0.0.1, 2.0.1, 1.0.0 has a postinstall scri...

Malicious code in @ppa-web-components/ppa-banner (npm)

@ppa-web-components/ppa-banner is a dependency-confusion package: it is described as a "Compatibility shim", uses inflated version numbers, and its README calls it an "authorized dependency-confusion test". Each listed version 3.0.0, 1.0.1, 2.0.0, 1.1.0, 0.0.1, 2.0.1, 1.0.0 has a postinstall scri...

PHP 8.5.11 php2shell Vulnerability Scanner

PHP versions before 8.2.35, 8.3.36, 8.4.27, and 8.5.12 contain php2shell vulnerabilities. The provided Python tool performs banner-based PHP version checks and reports potentially affected hosts...

php2shell-banner-check

PHP2Shell Banner Check Low-impact PHP version banner checks for...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

php2shell-check A safe, passive, read-only detector for t...

WordPress Simple Banner plugin < 3.3.3 - Authenticated Privilege Escalation vulnerability

Authenticated Privilege Escalation vulnerability discovered by Jakub Herman in WordPress Plugin Simple Banner versions 3.3.3...

CVE-2026-107506

The Simple Banner WordPress plugin before 3.3.3 does not correctly limit the capabilities it grants to the user roles an administrator allows to manage its banners, granting such roles the full administrator capability, which allows users in a low-privileged role to escalate their privileges and...

CVE-2026-107506 Simple Banner < 3.3.3 - Authenticated Privilege Escalation via User Permissions Setting

The Simple Banner WordPress plugin before 3.3.3 does not correctly limit the capabilities it grants to the user roles an administrator allows to manage its banners, granting such roles the full administrator capability, which allows users in a low-privileged role to escalate their privileges and...

CVE-2026-107506 Simple Banner < 3.3.3 - Authenticated Privilege Escalation via User Permissions Setting

The Simple Banner WordPress plugin before 3.3.3 does not correctly limit the capabilities it grants to the user roles an administrator allows to manage its banners, granting such roles the full administrator capability, which allows users in a low-privileged role to escalate their privileges and...

CVE-2026-107506

The Simple Banner WordPress plugin, in versions prior to 3.3.3 , contains a privilege management flaw. The plugin fails to properly restrict the capabilities granted to user roles authorized by an administrator to manage banners. This oversight allows users with low-privileged roles to escalate t...

EUVD-2026-107061

The Simple Banner WordPress plugin before 3.3.3 does not correctly limit the capabilities it grants to the user roles an administrator allows to manage its banners, granting such roles the full administrator capability, which allows users in a low-privileged role to escalate their privileges and...

PT-2026-120456

The Simple Banner WordPress plugin before 3.3.3 does not correctly limit the capabilities it grants to the user roles an administrator allows to manage its banners, granting such roles the full administrator capability, which allows users in a low-privileged role to escalate their privileges and...

CVE-2026-38671

Cross Site Scripting vulnerability in Ellucian Banner Student Registration Self-Service StudentRegistrationSsb 9.23 and prior no fixed version available allows a remote attacker to execute arbitrary code via the mepCode parameter of the /ssb/registration endpoint...