Malicious code in dzyclutch-libsignal-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 63716521c367b7aea5217499683a4fced3139831cc949b92387538692a679287 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-17619 Malicious code in dzyclutch (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8b5f3b0ba07dd680638f7c46393ed9a625dfa46962fbc53c5f17534995bb334f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dzyhaxz-baileys (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 08fd08c1026dee023b11946f939f5fb1c5763566c9577ccb99c2aa7a3c0c2684 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dzyclutch (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8b5f3b0ba07dd680638f7c46393ed9a625dfa46962fbc53c5f17534995bb334f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dzyhaxz-libsignal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9c8e7ca99c316f4b011bacc98bd321fb6e0afab999695d94c2cf41b1bff48b17 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dzyclutch-baileys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8bd1abac47f016ac53777bcc08d76d15a48330f1c53931e61d6704ce6f3398d The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-17618 Malicious code in @diezyclutch/baileys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 220c03791e2404d6bddaf8542dedfd4b7b69f4519b260ab8cb162791d5f389d1 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-17620 Malicious code in dzyclutch-baileys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8bd1abac47f016ac53777bcc08d76d15a48330f1c53931e61d6704ce6f3398d The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

CVE-2014-1303

CVE-2014-1303 PoC für Linux CVE-2014-1303 WebKit Heap based BOF Proof of Concept für Linux. Dieses Repository demonstriert die heap-basierte Pufferüberlauf-Schwachstelle in WebKit CVE-2014-1303 unter Linux. Verwendet im seccamp-Vortrag. HINWEIS: Der ursprüngliche Exploit ist für Mac OS X und PS4...

CVE-2021-44967

CVE-2021-44967 Exploit Title: LimeSurvey 5.2.4 - Authenticated Remote Code Execution RCE Google Dork: inurl:limesurvey/index.php/admin/authentication/sa/login Date: 05/12/2021 Discovered by: Y1LD1R1M Exploit Author: D3Ext Vendor Homepage: https://www.limesurvey.org/ Software Link:...

CVE-2026-23744-poc

CVE-2026-23744 — mcpJam-Exploit für Remote Code Execution RCE Ein Proof-of-Concept-Exploit in Python 3 für CVE-2026-23744 , eine Schwachstelle zur Ausführung beliebiger Befehle, die mcpJam v1.4.2 betrifft. Diese Anwendung automatisiert die Zustellung von Payloads, indem sie Befehle vor der...

CVE-2024-38472

Creare un modulo Metasploit per l'esecuzione remota di codice RCE per la vulnerabilità SSRF CVE-2024-38472 in Apache HTTP Server su Windows è impegnativo perché SSRF di per sé non porta direttamente a RCE. Tuttavia, SSRF può spesso essere un passo verso il raggiungimento di RCE, specialmente se l...

OpenPLC-CVE-2021-31630-RCE

OpenPLC v3 Authentifizierte RCE CVE-2021-31630 Dies ist ein moderner, mit Python 3.13+ kompatibler Proof-of-Concept-Exploit für CVE-2021-31630, eine Schwachstelle in OpenPLC v3, die es einem authentifizierten Benutzer ermöglicht, eine benutzerdefinierte Hardware-Schicht mit bösartigem Code...

CVE-2024-23995

Beekeeper-Studio PoC Ein Proof-of-Concept für die Schwachstelle CVE-2024-23995. 1. Übersicht über die Schwachstelle: Betroffene Schwachstelle: RCE via XSS Betroffene Version: = Beekeeper-Studio-4.1.13 Angriffstyp: Remote Code Execution Angriffsvektoren: Um die Schwachstelle auszunutzen, muss man...

WIn-CVE-2021-31166

WIn-CVE-2021-31166 Questo Repo è ispirato a 0vercl0k per una prova di concetto per CVE-2021-31166 "Vulnerabilità di esecuzione remota di codice nello stack del protocollo HTTP", un uso dopo libero use-after-free in http.sys corretto da Microsoft a maggio 2021. Infrastruttura di Build git clone...

CVE-2025-55182

CVE-2025-55182 - Exploração de RCE em React & Next.js Server Actions Exploit de execução remota de código e scanner completos para CVE-2025-55182 em React/Next.js Server Actions. PoC Original: Spritualkb/CVE-2025-55182-exp Visão Geral CVE-2025-55182 é uma vulnerabilidade crítica de poluição de...

CVE-2025-54794-Hijacking-Claude-AI-with-a-Prompt-Injection-The-Jailbreak-That-Talked-Back

🧠 CVE-2025-54794: Hijacking Claude AI with a Prompt Injection – Der Jailbreak, der zurückredete Von Aditya Bhatt | Offensive Security Specialist | Red Team Operator | VAPT Addict ⚔️ Einleitung: Wenn deine KI mit Wörtern gehackt werden kann In einer Ära, in der Sprachmodelle zu den Co-Piloten...

CVE-2025-14558

CVE-2025-14558 FreeBSD rtsold DNSSL-Befehlsinjektion RCE Beschreibung rtsold8 validiert DNSSL-Domänennamen nicht auf Shell-Metazeichen, bevor sie an resolvconf8 übergeben werden. Durch Befehlssubstitution mittels $ kann aus einem benachbarten Netzwerk Remote-Codeausführung erfolgen. Betroffen:...

tplink-CVE-2017-11519

tplink-CVE-2017-11519 POC für TP-Link Archer C9 - Admin-Passwort-Reset und RCE CVE-2017-11519 Siehe den Writeup unter https://devcraft.io/posts/2017/07/21/tp-link-archer-c9-admin-password-reset.html...

CVE-2025-5394

🚨 CVE-2025-5394 - Nicht authentifizierter beliebiger Plugin-Upload im Alone Theme 📌 Betroffenes Produkt: Alone – Charity Multipurpose Non-profit WordPress Theme Versionen: = 7.8.3 CVE: CVE-2025-5394 CVSS-Score: 9.8 Kritisch 🔥 Zusammenfassung der Sicherheitslücke: Das Alone Theme für WordPress ist...