Malicious code in aurenatts (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 ecc8915a04d9fbab4ecc0437f5eb05357d2e63bc3d30f629d67c7b3eb2c98eeb This campaign consists of similar loader packages, which provide executing code from a given URL. While they do not contain the malicious payload and the usage...

XPL-SEARCH

XPL SEARCH Search exploits/vulnerabilities in multiple databases online! XPL SEARCH is a multiplatform toolWindows and Linux, which was developed in PHP with the aim of helping the hacker community to find exploits or 'vulnerabilities', using online databases, below is the list of databases which...

kernel-mii

Cobalt Strike Beacon Object File foundation for kernel exploitation using CVE-2021-21551. Built by Tijme. Credits to Alex for teaching me! Made possible by Northwave Security Description This is a Cobalt Strike CS Beacon Object File BOF which exploits CVE-2021-21551. It only overwrites the beacon...

EagleVM

EagleVM Playground for generating virtual machine protected x64 assembly. Project Breakdown EagleVM Main protection application that virtualizes code. EagleVM.Core Static library used by EagleVM that provides all virtualization and analysis functionality. EagleVM.Sandbox Project for future testin...

Invoke-Obfuscation

Invoke-Obfuscation v1.8 Introduction Invoke-Obfuscation is a PowerShell v2.0+ compatible PowerShell command and script obfuscator. Background In the Fall of 2015 I decided to begin researching the flexibility of PowerShell's language and began cataloguing the various ways to accomplish a handful ...

privacybadger

Privacy Badger Privacy Badger is a browser extension that automatically learns to block hidden trackers. Privacy Badger is made by the leading digital rights nonprofit EFF to stop companies from spying on you. Privacy Badger sends the Global Privacy Control signal to opt you out of data sharing a...

CVE-2025-26198

🛡️ CVE Disclosure: CVE-2025-26198 — SQL Injection in CloudClassroom-PHP-Project Disclosure Date: 18 June 2025 CVE ID: CVE-2025-26198 Severity: CRITICAL CVSS 9.8 🧩 Summary A critical SQL Injection vulnerability exists in CloudClassroom-PHP-Project v1.0, specifically within the loginlinkadmin.php...

MAL-2026-18143 Malicious code in phonoviatts (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 0ad248ff66471a497d4c3a6d16384648636101a927c384cd4870adf920eced97 This campaign consists of similar loader packages, which provide executing code from a given URL. While they do not contain the malicious payload and the usage...

Malicious code in phonoviatts (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 0ad248ff66471a497d4c3a6d16384648636101a927c384cd4870adf920eced97 This campaign consists of similar loader packages, which provide executing code from a given URL. While they do not contain the malicious payload and the usage...

MAL-2026-18150 Malicious code in voxilaratts (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 39377b8b4c1d6d3243cb82f3e86bdc38869bf56e3800bf02ae817a1555ddb11b This campaign consists of similar loader packages, which provide executing code from a given URL. While they do not contain the malicious payload and the usage...

Malicious code in voxilaratts (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 39377b8b4c1d6d3243cb82f3e86bdc38869bf56e3800bf02ae817a1555ddb11b This campaign consists of similar loader packages, which provide executing code from a given URL. While they do not contain the malicious payload and the usage...

MAL-2026-18136 Malicious code in brummatts (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 605ea05e6c6344e7ddfb713297d7689ee050288b74ecbf0821039603dc3cdd45 This campaign consists of similar loader packages, which provide executing code from a given URL. While they do not contain the malicious payload and the usage...

Malicious code in brummatts (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 605ea05e6c6344e7ddfb713297d7689ee050288b74ecbf0821039603dc3cdd45 This campaign consists of similar loader packages, which provide executing code from a given URL. While they do not contain the malicious payload and the usage...

MAL-2026-18141 Malicious code in melcuratts (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 8bd7e6eda0ded5ef0e82eac489faca560422a8b8e46fd9c8d9b8215d9e89e6ba This campaign consists of similar loader packages, which provide executing code from a given URL. While they do not contain the malicious payload and the usage...

Malicious code in melcuratts (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 8bd7e6eda0ded5ef0e82eac489faca560422a8b8e46fd9c8d9b8215d9e89e6ba This campaign consists of similar loader packages, which provide executing code from a given URL. While they do not contain the malicious payload and the usage...

jsluice

jsluice jsluice is a Go package and command-line tool for extracting URLs, paths, secrets, and other interesting data from JavaScript source code. If you want to do those things right away: look at the command-line tool. If you want to integrate jsluice's capabilities with your own project: look ...

Awesome-LLMs-for-Vulnerability-Detection

Awesome Large Language Models for Vulnerability Detection A curated list of papers, projects, and agent skills on using LLMs for vulnerability detection and discovery. 📄 Papers Only showing 2025 and later. For earlier work, see Papers Archive 2024 and earlier. Title| Venue| Year| Paper| Github...

MAL-2026-18145 Malicious code in quillonatts (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 6297f0fae1c96dd5abefc4dd7f67a51ee7a737d1bb437fcffaed067d44d637a4 This campaign consists of similar loader packages, which provide executing code from a given URL. While they do not contain the malicious payload and the usage...

Malicious code in quillonatts (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 6297f0fae1c96dd5abefc4dd7f67a51ee7a737d1bb437fcffaed067d44d637a4 This campaign consists of similar loader packages, which provide executing code from a given URL. While they do not contain the malicious payload and the usage...

CVE-2025-55182-RCE-Exploit

POC for CVE-2025-55182 – Next.js 16.0.6 Remote Code Execution This repository contains a working proof-of-concept POC for CVE-2025-55182 , a critical deserialization vulnerability affecting Next.js 16.0.6. The exploit abuses $@ chunk deserialization and Chunk.prototype.then to gain full control...