Malicious code in grafeno-billing (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72306b800994fea3aa6c6d12e137657ffe70ec9ac6c44abfe3ceaa547ef8e5c6 [email protected] is a stub package whose only substantive code is a preinstall lifecycle hook. On npm install, preinstall.js enumerates...

MAL-2026-15571 Malicious code in grafeno-billing (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72306b800994fea3aa6c6d12e137657ffe70ec9ac6c44abfe3ceaa547ef8e5c6 [email protected] is a stub package whose only substantive code is a preinstall lifecycle hook. On npm install, preinstall.js enumerates...

Exploit for CVE-2026-18729

Description Proof of concept exploit code for CVE-2026-18729...

CVE-2021-3281

CVE-2021-3281 Esiste una vulnerabilità di Directory Traversal in django.utils.archive.py, riga 171, nella classe TarArchive. La chiamata di funzione os.path.jointopath, name non controlla il parametro "name"; se qualcuno usa questa utility su piattaforma Windows, c'è un rischio di Directory...

refinery

Binary Refinery root@kitploit: High Octane Triage Analysis || || || || || | / / / \ || ==||=====|| | / |/ \ /==| / \ ===| '======|| | \ | | \ | \ /| | || || /||/ / | | | || =========''====/=========/ /==||=====||======' \ / / The Binary Refinery™ is a collection of Python scripts that...

refinery

Binary Refinery root@kitploit: High Octane Triage Analysis || || || || || | / / / \ || ==||=====|| | / |/ \ /==| / \ ===| '======|| | \ | | \ | \ /| | || || /||/ / | | | || =========''====/=========/ /==||=====||======' \ / / Binary Refinery™ è una raccolta di script Python che implementano...

exploit-chain

exploit-chain — UBI Stage 6 Exploit Chain as Code Custom Pyth...

CVE-2026-72898

CVE-2026-72898 PoC : Iniezione SQL non autenticata in Metabase Iniezione SQL pre-autenticazione in Metabase che porta alla compromissione dell'admin Proof-of-concept per CVE-2026-72898, una vulnerabilità critica di SQL injection non autenticata nell'endpoint di reset della password di Metabase. I...

[SECURITY] [DLA 4760-1] roundcube security update

Debian LTS Advisory DLA-4760-1 [email protected] https://www.debian.org/lts/security/ Guilhem Moulin August 29, 2026 https://wiki.debian.org/LTS Package : roundcube Version : 1.4.15+dfsg.1-1+deb11u11 1.6.5+dfsg-1+deb12u11 CVE ID : CVE-2026-74997 CVE-2026-74998 CVE-2026-74999...

TangledWinExec

Tangled WinExec Dieses Repository dient der Untersuchung von Windows-Prozessausführungstechniken. Die meisten PoCs tragen einen Namen, der der jeweiligen Technik entspricht. Projekte BlockingDLL : Dieses Toolset dient zum Testen des Blocking-DLL-Prozesses. Siehe README.md. CloneProcess : Dieses...

Exploit for CVE-2026-1357

CVE-2026-1357 Unauthenticated Arbitrary File Upload → Remote...

CVE-2024-1655

CVE-2024-1655 विवरण 12-04-2024 पैच से पहले के ASUS ExpertWiFi EBM63, EBM68, और RT-AX57 Go फर्मवेयर में splashpageSDN.cgi फ़ंक्शन में कमांड इंजेक्शन भेद्यता मौजूद है। जब कोई हमलावर विशेष रूप से तैयार अनुरोध भेजता है, तो वे मनमाना कोड निष्पादन प्राप्त कर सकते हैं। संदर्भ: आधिकारिक रिपोर्ट उपयोग यह...

MAL-2026-15567 Malicious code in htps-provider (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ed7eca74d8fb188a8618c67facb5015d747e423ccdf4e51caae2e4e63f82ea2 Package is published as htps-provider with a README copy-pasted verbatim from the legitimate Cosmos chain-registry project advertising assets, chains...

Malicious code in htps-provider (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ed7eca74d8fb188a8618c67facb5015d747e423ccdf4e51caae2e4e63f82ea2 Package is published as htps-provider with a README copy-pasted verbatim from the legitimate Cosmos chain-registry project advertising assets, chains...

CVE-2021-31630-OpenPLC-3-Authenticated-RCE

CVE-2021-31630 OpenPLC 3 WebServer Authentifizierte Remotecodeausführung. Beschreibung Das Vorhandensein von Command Injection im Open PLC Webserver v3 ermöglicht es entfernten Angreifern, beliebigen Code auszuführen, indem sie die Komponente „Hardware Layer Code Box" ausnutzen, die auf der Seite...

vajra

██╗ ██╗ █████╗ ██╗██████╗ █████╗ ██║ ██║██...

CVE-2023-38646

CVE-2023-38646 Lo script originale proviene da securezeron Durante i miei test, ho scoperto che la reverse shell generata da questo PoC, dopo la codifica base64, falliva a causa del carattere '=' alla fine. L'ho leggermente modificato per risolvere questo problema. root@kitploit: 原始的生成reverse...

CVE-2024-0235-PoC

CVE-2024-0235-PoC Il plugin WordPress EventON precedente alla versione 4.5.5 e il plugin WordPress EventON precedente alla versione 2.2.7 non effettuano un controllo di autorizzazione in un'azione AJAX, consentendo a utenti non autenticati di recuperare gli indirizzi email di qualsiasi utente del...

CVE-2024-50476

CVE-2024-50476 GRÜN spendino Spendenformular = 1.0.1 - Aggiornamento non autenticato di opzioni arbitrarie Descrizione: Il plugin GRÜN spendino Spendenformular – Mehr Spenden! Weniger Arbeit! per WordPress è vulnerabile alla modifica non autorizzata dei dati, che può portare a un escalation dei...

chisel v1.12.0

Chisel Chisel is a fast TCP/UDP tunnel, transported over HTTP, secured via SSH. Single executable including both client and server. Written in Go golang. Chisel is mainly useful for passing through firewalls, though it can also be used to provide a secure endpoint into your network. Table of...