107 matches found
CVE-2024-28995
CVE-2024-28995 SolarWinds Serv-U には、ホストマシン上の機密ファイルを読み取ることができるディレクトリトラバーサル脆弱性がありました。 インストール git clone https://github.com/gotr00t0day/CVE-2024-28995.git cd CVE-2024-28995 pip3 install -r requirements.txt 使い方 単一ターゲットをスキャン root@kitploit: python3 CVE-2024-28995.py -t domain.com ドメインリストをスキャン...
Malicious code in originaldevelopmentstelemetry (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60940a80ca72863b54a3cc8f1cc7da49be77b38e9111d4cb77cfc1417671f399 The package is advertised as a telemetry utility but its sole exported function, downloadAndRunClient, downloads updater.hta from...
Malicious code in 3layerdipstack4dhmdb (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db0ccaa499343ec1f18b5618c6f7e9c86899fee1d1e184e9cbf419add99187c0 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
viper
This repository is archived and development of Viper 1.x is discontinued. A full refactor of the project started withViper 2. Viper is a binary analysis and management framework. Its fundamental objective is to provide a solution to easily organize your collection of malware and exploit samples a...
CVE-2026-72878
Dokploy is a free, self-hostable Platform as a Service PaaS. Prior to 0.29.13, Dokploy's backup and restore pipeline constructs shell commands by directly interpolating user-controlled database fields into bash -c "..." and sh -c "..." strings, then executes them via childprocess.exec. An...
CVE-2026-55115
The CVE-2026-55115 entry describes a Server-Side Request Forgery (SSRF) in the UniFi Protect Application that could allow a low-privilege, network-accessible attacker to escalate privileges on the host. The available sources state the affected component as the UniFi Protect Application and identi...
Johnson Controls CEM AC2000
ADVISORY SUMMARY Successful exploitation of this vulnerability could allow a standard user to escalate privileges on the host machine. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability. Minimize network exposure for...
SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability
SolarWinds Web Help Desk contain a deserialization of untrusted data vulnerability in AjaxProxy that could allow an attacker to run commands on the host machine...
CVE-2025-12556
An argument injection vulnerability exists in the affected product that could allow an attacker to execute arbitrary code within the context of the host machine...
EUVD-2018-17203
Malware in sbrugna...
EUVD-2017-14015
Malware in sbrugna...
EUVD-2021-21888
Malware in sbrugna...
EUVD-2021-2338
Malware in sbrugna...
EUVD-2020-0626
Malware in sbrugna...
EUVD-2018-17204
Malware in sbrugna...
EUVD-2021-32230
Malicious code in bioql PyPI...
EUVD-2022-0867
Malicious code in bioql PyPI...
CVE-2025-41237
VMware ESXi, Workstation, and Fusion contain an integer-underflow in VMCI Virtual Machine Communication Interface that leads to an out-of-bounds write. A malicious actor with local administrative privileges on a virtual machine may exploit this issue to execute code as the virtual machine's VMX...