yolo-cage

yolo-cage: autonomous coding agents that do no harm You're a responsible engineer. You'd never just let an AI run roughshod through your most sensitive systems and codebases. That's why you'd never just shut off the safeguards for a tool like Claude Code. It asks permission for every dangerous...

Malicious code in opiumbest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32d3c33077e46f79b1a53edad20c8cb8c7fc67c5cbedd8406257cb5ce9581097 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in quesoeducation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c428c1658948c78d2e7323de16bf1f37dced0bcd770cd73fd2b3c0855f6aa7b The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-15576 Malicious code in quesoeducation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c428c1658948c78d2e7323de16bf1f37dced0bcd770cd73fd2b3c0855f6aa7b The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-15575 Malicious code in opiumbest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32d3c33077e46f79b1a53edad20c8cb8c7fc67c5cbedd8406257cb5ce9581097 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

gf

gf Un envoltorio alrededor de grep para evitar escribir patrones comunes. ¿Qué? ¿Por qué? Uso grep un montón. Cuando audito bases de código, reviso la salida de meg, o simplemente trato con grandes cantidades de datos. A menudo termino usando patrones bastante complejos como este: root@kitploit: ...

cfn_nag

Antecedentes La herramienta cfn-nag busca patrones en las plantillas de CloudFormation que puedan indicar infraestructura insegura. En términos generales, buscará: Reglas de IAM demasiado permisivas comodines Reglas de grupos de seguridad demasiado permisivas comodines Registros de acceso que no...

red-clippy

Red Clippy Tus pruebas de agente. Red Clippy lleva el registro. Gestión de pentesting de código abierto diseñada para ser operada por un agente de IA. Conéctalo a Claude Code mediante MCP y ejecutará el compromiso junto a ti: alcance y activos, observaciones de reconocimiento, cobertura de...

langflow-exploit

CVE-2025-3248 - Langflow कोड सत्यापन एंडपॉइंट RCE Langflow के कोड सत्यापन एंडपॉइंट में रिमोट कोड निष्पादन भेद्यता को प्रदर्शित करने वाला एक प्रूफ-ऑफ-कॉन्सेप्ट एक्सप्लॉइट। यह भेद्यता Langflow के 1.3.0 से पहले के संस्करणों को प्रभावित करती है, जिससे बिना प्रमाणीकरण के हमलावर क्राफ्टेड HTTP अनुरोधों...

EXPLOIT-CVE-2026-9198

CVE-2026-9198 — IBM Langflow OSS RCE Não Autenticado Prova de conceito de exploit e um laboratório Docker autocontido para CVE-2026-9198 , uma vulnerabilidade de execução remota de código não autenticada em IBM Langflow OSS. O exploit encadeia dois endpoints — autologin que entrega um token...

CVE-2026-1357

CVE-2026-1357 — WPvivid Backup & Migration ≤ 0.9.123 Upload Arbitrário de Arquivo Não Autenticado → RCE PoC para CVE-2026-1357 CVSS 9.8 Crítico, CWE-434: um upload arbitrário de arquivo não autenticado no plugin WPvivid Backup & Migration para WordPress que leva à execução remota de código...

POC-CVE-2026-18729

Beschreibung Proof-of-Concept-Exploit-Code für CVE-2026-18729 Verwendung python3 poc.py -url -uname -pword -c Ohne Bash-Befehl Nachweis der Code-Ausführung über Divide-By-Zero-Fehler Mit Bash-Befehl HINWEIS: Die Bash-Ausgabe wird nicht zurückgegeben, da der Endpunkt nur die Komponentenvorlage und...

semgrep-rules

semgrep-rules di elttam Benvenuti nel repository pubblico di regole semgrep...

poc-CVE-2026-64638-

XSS2Shell — CVE-2026-64638 PoC Cadeia de exploração WordPress Pre-Auth XSS → RCE, baseada em pesquisa de pwn.ai publicada em ionsec.io. ⚠️ AVISO LEGAL : Apenas para FINS EDUCACIONAIS e TESTES AUTORIZADOS. Use somente contra sistemas que você possui ou para os quais tenha permissão explícita por...

MAL-2026-15590 Malicious code in com.db.autobahn.notification-center-electron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ae376efc666d8e07f356f9f3cbafe2dfc99e221a150ff96548db4a2b91bb452 package.json declares preinstall and postinstall lifecycle scripts that automatically run curl on npm install to send installer identity whoami,...

mal_unpack

malunpack Dynamic unpacker based on PE-sieve 📖 Read more . It deploys a packed malware, waits for it to unpack the payload, dumps the payload, and kills the original process. !CAUTION This unpacker deploys the original malware. Use it only on a VirtualMachine. ⚙ Usage Basic usage: root@kitploit:...

Malicious code in autobahn-electron-probe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9a749e23bbf7c5ca871c797923855dc2c7fe1006c5843ed8a13292d7fbd4256 package.json declares preinstall and postinstall lifecycle scripts that run curl against...

MAL-2026-15589 Malicious code in autobahn-electron-probe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9a749e23bbf7c5ca871c797923855dc2c7fe1006c5843ed8a13292d7fbd4256 package.json declares preinstall and postinstall lifecycle scripts that run curl against...

couchdb-exploit

🚀 CouchDB Exploit - CVE-2017-12635 & CVE-2017-12636 Apache CouchDB - Privilege Escalation & Remote Code Execution 📖 Overview This tool exploits two critical vulnerabilities in Apache CouchDB: CVE| Description| Severity ---|---|--- CVE-2017-12635| Privilege Escalation via JSON Parsing Bypass| 🔴...

CVE-2025-59287-WSUS-2

CVE-2025-59287 ⚠ Questo strumento è creato esclusivamente per uso educativo. L'uso non autorizzato al di fuori di ambienti controllati è severamente vietato. CVE-2025-59287 è una vulnerabilità critica di esecuzione di codice remoto in Microsoft Windows Server Update Services WSUS. Deriva da una...