poc-CVE-2026-64638-

XSS2Shell — CVE-2026-64638 PoC Cadeia de exploração WordPress Pre-Auth XSS → RCE, baseada em pesquisa de pwn.ai publicada em ionsec.io. ⚠️ AVISO LEGAL : Apenas para FINS EDUCACIONAIS e TESTES AUTORIZADOS. Use somente contra sistemas que você possui ou para os quais tenha permissão explícita por...

mal_unpack

malunpack Dynamic unpacker based on PE-sieve 📖 Read more . It deploys a packed malware, waits for it to unpack the payload, dumps the payload, and kills the original process. !CAUTION This unpacker deploys the original malware. Use it only on a VirtualMachine. ⚙ Usage Basic usage: root@kitploit:...

ps4host

PS4Host A zero-dependency PS4 WebKit exploit host with a...

mlkem-native

mlkem-native mlkem-native è un'implementazione sicura, veloce e portabile in C901 di ML-KEM2. È un fork dell'implementazione di riferimento di ML-KEM3. Tutto il codice C in mlkem/src/ e mlkem/src/fips202/ è dimostrato memory-safe nessun overflow di memoria e type-safe nessun overflow di interi...

couchdb-exploit

🚀 CouchDB Exploit - CVE-2017-12635 & CVE-2017-12636 Apache CouchDB - Privilege Escalation & Remote Code Execution 📖 Overview This tool exploits two critical vulnerabilities in Apache CouchDB: CVE| Description| Severity ---|---|--- CVE-2017-12635| Privilege Escalation via JSON Parsing Bypass| 🔴...

SymCrypt-OpenSSL

SCOSSL - Il motore SymCrypt e provider per OpenSSL Il motore SymCrypt e provider per OpenSSL SCOSSL consentono l'uso di OpenSSL con SymCrypt come provider per le operazioni crittografiche core. La motivazione principale è supportare la certificazione FIPS, poiché OpenSSL 1.1.1 vanilla non dispone...

PowerShell-Pro-Obfuscator-Python

PowerShell Pro Obfuscator — Offusca e Virtualizza Codice PowerShell PowerShell Pro Obfuscator protegge script .ps1 proprietari con rinomina, crittografia polimorfa di stringhe e interi, appiattimento del flusso di controllo, automi a stati finiti FSA, un motore VM, controlli di integrità...

PT-2026-83569

WWBN AVideo contains an unauthenticated credential submission vulnerability in plugin/Live/api/preauthorize.json.php that accepts credentials over GET without rate limiting. Attackers can submit correct credentials repeatedly to trigger uncapped two-factor confirmation emails and perform sustaine...

PT-2026-83546

Improper Neutralization of Special Elements in Data Query Logic vulnerability in ash-project ash sql allows a user who supplies a search term to contains/2, string starts with/2, or string ends with/2 to inject live SQL LIKE wildcards, turning a literal substring search into an attacker-controlle...

PT-2026-83563

Readest is an open-source e-book reader built on Tauri. In versions prior to 0.11.16, EPUB chapter HTML is sanitized with DOMPurify using a configuration that forbade only the tag FORBID TAGS: 'script' in apps/readest-app/src/services/transformers/sanitizer.ts. DOMPurify does not parse the conten...

PT-2026-83637

Name of the Vulnerable Software and Affected Versions Open5GS versions prior to 2.8.0 Description A weakness in the SMF component allows a remote attacker to cause a reachable assertion by manipulating the preemptCap argument within the smf nudm sdm handle get function located in the...

PT-2026-83559

NextChat versions from 2.15.8 through 2.16.1 contain an improper URL validation vulnerability in the proxy endpoint that allows attackers to obtain the server's OpenAI API key. The x-base-url header is validated using substring matching instead of hostname parsing, allowing any URL containing...

PT-2026-83553

Dolibarr versions 10.0.0 before 24.0.0 fail to perform per-object authorization checks in the Users::getGroups REST API endpoint, allowing authenticated users to retrieve group memberships of other users. Attackers can call GET /users/id/groups with arbitrary user identifiers to access group name...

PT-2026-83518

Name of the Vulnerable Software and Affected Versions ash sqlite versions 0.1.2-rc.0 through 0.2.17 Description Improper neutralization of special elements in data query logic allows an attacker to traverse into nested JSON data that the application did not intend to expose, potentially disclosin...

PT-2026-83583

Name of the Vulnerable Software and Affected Versions Admidio versions prior to 5.0.12 Description The software fails to enforce login-only module restrictions within the RSS feed endpoints for the forum and announcements modules. This allows unauthenticated attackers to retrieve forum topics and...

Exploit for Code Injection in Langflow

CVE-2026-9198 — IBM Langflow OSS Unauthenticated RCE Proof-of...

Malicious code in grafeno-billing (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72306b800994fea3aa6c6d12e137657ffe70ec9ac6c44abfe3ceaa547ef8e5c6 [email protected] is a stub package whose only substantive code is a preinstall lifecycle hook. On npm install, preinstall.js enumerates...

MAL-2026-15571 Malicious code in grafeno-billing (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72306b800994fea3aa6c6d12e137657ffe70ec9ac6c44abfe3ceaa547ef8e5c6 [email protected] is a stub package whose only substantive code is a preinstall lifecycle hook. On npm install, preinstall.js enumerates...

Malicious code in grafeno-payments (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7af58da84956e51749cbb96923f12264cfdee76456b5010b526599b7da2c0caa On npm install, package.json's preinstall hook node preinstall.js || true auto-runs a script that 1 enumerates process.env for keys matching...

MAL-2026-15572 Malicious code in grafeno-payments (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7af58da84956e51749cbb96923f12264cfdee76456b5010b526599b7da2c0caa On npm install, package.json's preinstall hook node preinstall.js || true auto-runs a script that 1 enumerates process.env for keys matching...