statiStrings

statiStrings | | | | || | / | / | | \ | | '| | ' \ / / | \ \ || | | || | | || | | | | | | | \ \ |/\,|||/ || ||| ||, |/ |/ YARA Rule Strings Statistics Calculator Shelly Raban Sh3llyR, February 2021, Version 0.1 Table of Contents 1. About The Project Built With 2. Getting Started Installation...

CVE-2022-30190

CVE-2022-30190 CVE-2022-30190 Follina POC Host exploit.html on localhost, port 80. Open the docx to pop calc. To change the remote address the doc points to, open in 7Z and edit word\rels\document.xml.rels to point to a new location. YOU MUST keep the exclamation mark. It will literally not run i...

CVE-2018-0802_POC

CVE-2018-0802POC usage: cve-2018-0802poc.py -h -e EXECUTABLE -o OUTPUT The .rtf sample exploit the vulnerability to execute the calculator...

OWASP-Calculator

OWASP Risk Assessment Calculator 🧮 An online calculator to assess the risk of web vulnerabilities based on OWASP Risk Assessment. GO TO ONLINE CALCULATOR Made with ❤️ in Spain...

Cost Calculator Builder <= 3.2.15 - SQL Injection

The Cost Calculator Builder plugin for WordPress is vulnerable to SQL Injection via discount codes in versions up to, and including, 3.2.15 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for...

CVE-2018-14667

CVE-2018-14667 detail:https://xz.aliyun.com/t/3264 poc calcwindows：...

CVE-2025-55182

简体中文 | English This is an analysis, validation environment, and POC repository for CVE-225-55182 vulnerability. Learn the Vulnerability See this article 《CVE-2025-55182 Analysis.md》. Verify the vulnerability After setting up the test or debugging environment, run the script poc.py. If a calculato...

CVE-2018-4878

CVE-2018-4878 Samples Sample source: https://github.com/brianwrf/CVE-2017-4878-Samples Analysis report: http://blog.talosintelligence.com/2018/02/group-123-goes-wild.html Exploit source in Python script: https://github.com/vysec/CVE-2018-4878 cve-2018-4878.py is the exploit generation script, the...

spring-spel-0day-poc

spring-spel-0day-poc spring-cloud/spring-cloud-function RCE EXP POC https://github.com/spring-cloud/spring-cloud-function header spring.cloud.function.routing-expression:Tjava.lang.Runtime.getRuntime.exec"open -a calculator.app" build wget...

Malicious code in @bigdevin55/calculator-install-demo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c4f509ad1b4b7cd4ab0ae5811238d85189643a2aae0157b75925ccd18f375e58 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in @bigdevin55/calculator-install-demo

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2026-18465 Malicious code in @bigdevin55/calculator-install-demo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c4f509ad1b4b7cd4ab0ae5811238d85189643a2aae0157b75925ccd18f375e58 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in calculator-preinstall-chain-demo

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in calculator-preinstall-hook-demo

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in @bigdevin55/calculator-install-hook

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in @bigdevin55/calculator-install-hook (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 47b31798da27fd690ed90f5702bbe7458e3363fa5488b9d2c77ddd8e17da6111 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-18466 Malicious code in @bigdevin55/calculator-install-hook (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 47b31798da27fd690ed90f5702bbe7458e3363fa5488b9d2c77ddd8e17da6111 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Exploit for CVE-2026-14900

CVE-2026-14900: Unauthenticated RCE in Cost Calculator Builder...

Malicious code in calculator-preinstall-hook-demo (npm)

[email protected] presents itself as a test fixture for npm lifecycle hooks. Its preinstall script runs node preinstall.js on npm install, which POSTs the machine's hostname and the OS username to the Discord webhook...

Malicious code in calculator-preinstall-chain-demo (npm)

[email protected] has no install script of its own but depends on exactly [email protected], so npm install runs that package's preinstall script node preinstall.js. The script POSTs the machine's hostname and the OS username to the Discord webhook...