Malicious code in hydration-ui-pkg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d848dd11c0e0692f1f47c8fcb3cb0506316e96ab32f8b63a8913ad67e9570318 Package main dist/index.mjs locates dist/internal/mathcalc.mjs — a raw x8664 ELF binary shipped under an.mjs extension and described in the README as...

MAL-2026-15900 Malicious code in hydration-ui-pkg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d848dd11c0e0692f1f47c8fcb3cb0506316e96ab32f8b63a8913ad67e9570318 Package main dist/index.mjs locates dist/internal/mathcalc.mjs — a raw x8664 ELF binary shipped under an.mjs extension and described in the README as...

fabric8io__kubernetes-client_CVE-2021-4178_5-0-2

Kubernetes & OpenShift Java Client This client provides access to the full Kubernetes & OpenShift REST APIs via a fluent DSL. kubernetes-client: kubernetes-model-core: openshift-client: knative-client: !Maven Centralhttps://img.shields.io/m...

CVE-2024-27198-RCE

사이버 공간 매핑 Dork Fofa root@kitploit: app="JETBRAINS-TeamCity" ZoomEye root@kitploit: app:"JetBrains TeamCity" Hunter.how root@kitploit: product.name="TeamCity" Shodan root@kitploit: http.component:"teamcity" 사용 방법 저는 Python3.9를 사용합니다. root@kitploit: pip install requests urllib3 root@kitploit: pytho...

username-anarchy

Username Anarchy 버전: 0.6 2024년 9월 20일 저자: urbanadventurer Andrew Horton 홈페이지: https://www.morningstarsecurity.com/research/username-anarchy 소스: https://github.com/urbanadventurer/username-anarchy/ 라이선스: MIT 설명 침투 테스트 시 사용자 이름 생성을 위한 도구입니다. 사용자 이름은 암호 무차별 대입 공격 문제의 절반을 차지합니다. 이는 사용자 계정/암호 무차별 대입 추...

username-anarchy

Username Anarchy Version: 0.6 20 September 2024 Author: urbanadventurer Andrew Horton Homepage: https://www.morningstarsecurity.com/research/username-anarchy Source: https://github.com/urbanadventurer/username-anarchy/ License: MIT Description Tools for generating usernames when penetration...

cve-2022-22965

Spring4Shell - CVE-2022-22965 Build let's clone the repository, build and run the container root@kitploit: $ git clone https://github.com/twseptian/cve-2022-22965.git $ cd cve-2022-22965 $ docker build . -t spring4shell-poc $ docker run -p 8080:8080 --name spring4shell-poc spring4shell-poc check...

Phantom-Evasion

PHANTOM EVASION 3.0 Phantom-Evasion es una herramienta de evasión de antivirus escrita en Python compatible tanto con Python como con Python3 capaz de generar ejecutables casi totalmente indetectables incluso con los payloads de msfvenom x86 más comunes. Los siguientes sistemas operativos soporta...

linux-4.1.15_CVE-2023-28772

Linux kernel release 4.x http://kernel.org/ These are the release notes for Linux version 4. Read them carefully, as they tell you what this is all about, explain how to install the kernel, and what to do if something goes wrong. WHAT IS LINUX? Linux is a clone of the operating system Unix, writt...

Cooper

Cooper, noun, a maker or repairer of casks and barrels It's a "fish in a barrel" joke. I enjoy puns! A Python tool for ingesting HTML and producing HTML source suitable for phishing campaigns. Cooper simplifies the process of cloning a target website or email for use in a phishing campaign. Just...

ipxe

iPXE network bootloader iPXE is the leading open source network boot firmware. It provides a full PXE implementation enhanced with additional features such as: boot from a web server via HTTP or HTTPS, boot from an iSCSI, FCoE, or AoE SAN, control the boot process with a script, create interactiv...

mach_race

Mach Race OS X Local Privilege Escalation Exploit c fG! 2015, 2016, [email protected] - https://reverse.put.as A SUID, SIP, and binary entitlements universal OS X exploit CVE-2016-1757. Usage against a SUID binary: ./machraceserver /bin/ps compatmode for i in seq 0 1000000; do...

CVE-2022-48429_poc

CVE-2022-48429 - YouTrack 저장형 XSS NVD 데이터베이스의 CVE 설명은 정확하지 않습니다. 다음은 더 정확한 설명입니다: Youtrack 버전 = 2022.3.65373에는 대시보드에 저장형 크로스 사이트 스크립팅XSS 취약점이 있습니다. 악의적인 낮은 권한의 사용자가 변조된 대시보드를 생성하여 다른 사용자예: 관리자에게 공유할 수 있습니다. 이로 인해 관리자 계정 탈취가 발생할 수 있습니다. Original author: echo-devim 상세 설명 및 개념 증명 PoC Youtrack 버전...

KittyStager

KittyStager KittyStager is a stage 0 C2 comprising an API, client, and malware. The API is responsible for delivering basic tasks and shellcode to be injected into memory by the malware. The client also connects to the API and allows for interaction with the malware by creating tasks. The goal of...

explo

explo explo es una herramienta simple para describir problemas de seguridad web en un formato legible por humanos y máquinas. Al definir un flujo de trabajo de solicitud/condición, explo es capaz de explotar problemas de seguridad sin necesidad de escribir un script. Esto permite compartir...

CVE-2026-54597

CVE-2026-54597 - ITFlow 시간 기반 블라인드 SQL 인젝션 심각도: 높음 권고: GHSA-m63v-j7fw-hq2h 영향: ITFlow agent/ajax.php — expires 매개변수 수정 커밋: 63d8691 작성자: iltosec 요약 ITFlow의 공유 링크 생성 핸들러에서 시간 기반 블라인드 SQL 인젝션 취약점이 발견되었습니다. expires GET 매개변수가 숫자 검증 없이 MySQL INTERVAL 표현식에 직접 전달되어, 인증된 사용자가 데이터베이스에서 임의의 데이터를 유출할 수 있습니다...

CVE-2024-48705

Overview During recent security research for the Wavlink AC1200 Model: WL-WN532A3 a Post-Authentication Command Injection Vulnerability was identified in the "/cgi-bin/adm.cgi" endpoint. This vulnerability could enable malicious actors who have compromise the credentials for the router, to run...

Inventus

Inventus Inventus is a spider designed to find subdomains of a specific domain by crawling it and any subdomains it discovers. It's a Scrapy spider, meaning it's easily modified and extendable to your needs. Demo asciicast Requirements Linux -- I haven't tested this on Windows. Python 2.7 or Pyth...

CVE-2026-38526

CVE-2026-38526 - Krayin CRM RCE Description PoC script for critical vulnerability in Krayin CRM v2.2.x allowing authenticated RCE via unrestricted file upload. Usage root@kitploit: Web shell python3 exploit.py -u http://target.com -e [email protected] -p password123 Reverse shell python3...

malice

malice Malice's mission is to be a free open source version of VirusTotal that anyone can use at any scale from an independent researcher to a fortune 500 company. Try It Out DEMO: demo.malice.io username : malice password : ecilam Requirements Hardware 16GB disk space 4GB RAM Software Docker...