CVE-2024-48990-Exploit

CVE-2024-48990 Exploit My full writeup for how I came to re-discovering this N-day and creating my own exploit for it can be found on my blog. Essentially, you can git clone this repository into an attacker-controlled directory, export PYTHONPATH=, and then run main.py with that PYTHONPATH value...

CVE-2026-88797

The Vayu X WordPress theme before 1.0.6 does not perform any capability check on one of its AJAX actions and exposes the nonce guarding it to every logged-in user, allowing any authenticated user, such as a subscriber, to install and activate any hosted on the WordPress.org repository...

cuckooautoinstall

Sobre CuckooAutoinstall Cuckoo Sandbox . script de autoinstalación ¿Qué es Cuckoo Sandbox? Cuckoo Sandbox es un sistema de análisis de malware. ¿Qué significa eso? Significa que puedes lanzarle cualquier archivo sospechoso y obtener un informe con detalles sobre el comportamiento del archivo dent...

MaNGOSWebV4 < 4.0.8 - Cross-Site Scripting

paintballrefjosh/MaNGOSWebV4 4.0.8 contains a reflected XSS caused by unsanitized input in install/index.php step parameter, letting attackers execute arbitrary scripts in the victim's browser, exploit requires victim to visit a maliciously crafted URL id: CVE-2017-6478 info: name: MaNGOSWebV4...

osCommerce 2.3.4.1 - Remote Code Execution

osCommerce Online Merchant 2.3.4.1 contains a remote code execution caused by insecure default configuration and missing authentication in the installer workflow, letting unauthenticated attackers execute arbitrary PHP code via install4.php, exploit requires accessible /install/ directory after...

Malicious code in @chatunity/baileys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6d06d6b516b21b0ac6ed45e5653dca243695a2c17326669ec58498e4c9bcf45 package.json declares the runtime dependency libsignal with the value github:chatunitycenter/libsignal-node, an off-registry git source with no commi...

CVE-2026-42089

CVE-2026-42089 A local package installation helper trusted caller-supplied package names too much. In yeoman-environment, missing generators could be installed without user confirmation, turning attacker-controlled project metadata into a package-install and code-execution path. Intro I found thi...

CVE-2025-1562

CVE-2025-1562 POST /index.php?restroute=%2Fautonami-app%2Fplugin%2Finstallandactivate&bwf-nonce=0f2449cddf9a7d692627071cfdef9ecf HTTP/2 Host: wp.192.168.31.110.nip.io User-Agent: Mozilla/5.0 Windows NT 10.0; Win64; x64 AppleWebKit/537.36 KHTML, like Gecko Chrome/91.0.4472.124 Safari/537.36...

Malicious code in @hrmony/kit-5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6457aa73ec15f68e06005977033aaba349467d40e3d406f0810684a43b74fcb5 The package's preinstall script and its main entry index.js both perform identical credential-harvesting: they query the EC2 Instance Metadata Servic...

mini-shai-hulud-scanner

Mini Shai-Hulud Scanner A free, offline scanner for the npm/PyPI supply chain worm that's currently chewing through major packages. Built by the Intrudify team. No signup, no telemetry, runs entirely offline. NHS CC-4781 · CVE-2026-45321 CVSS 9.6 · GHSA-g7cv-rxg3-hmpx What this is If you've run n...

wordpress_DoS

WordPress 4.9.8 is vulnerable to DoS Attacks. Additional Information We found a Denial of Service DoS in WordPress version 4.9.8. An unauthenticated remote user can perform a series of requests on the vulnerable pages, resulting in increased processing, swap and disk I/O on the server. This...

CVE-2021-24356

CVE-2021-24356 Simple 301 Redirects by BetterLinks - 2.0.0 – 2.0.3 - Subscriber + Arbitrary Plugin Installation Description A lack of capability checks and insufficient nonce check on the AJAX action in the plugin, made it possible for authenticated users to install arbitrary plugins on vulnerabl...

CVE-2026-23744-PoC

Description MCPJam inspector is the local-first development platform for MCP servers. Versions 1.4.2 and earlier are vulnerable to remote code execution RCE vulnerability, which allows an attacker to send a crafted HTTP request that triggers the installation of an MCP server, leading to RCE. Sinc...

Malicious code in express-javascript (npm)

The package express-javascript impersonates the legitimate 'express' package it republishes express's package metadata and code and adds a malicious preinstall hook that runs automatically on npm install, before any dependency is installed: curl...

Malicious code in react-nodejs (npm)

The package react-nodejs impersonates the legitimate 'react' package it republishes react's package metadata and code and adds a malicious preinstall hook that runs automatically on npm install, before any dependency is installed: curl...

RayHunter-Web-Flasher

◈ RayHunter Install Wizard Interactive step-by-step guide to flashEFF's Rayhunter IMSI catcher detector on an Orbic RC400L hotspot. Auto-detects your OS. 🚀 Launch the Wizard 👉Open the Install Wizard What is Rayhunter? Rayhunter is the Electronic Frontier Foundation's open-source tool for detectin...

CVE-2017-4490-install-Script-Python-in-Terminal-

CVE-2017-4490-install-Script-Python-in-Terminal- What is the CVE-2017-4490 post-Exploitation, == Come on, my idea Exploit, .bashrc in Use Many of the ideas are harmful 1 install Script Script webdeilvary In Terminal by Use .bashrc 2 Destroy and display horrifying texts In Terminal 3 Subversion an...

wp2shell-cve-2026-63030-root-cause

wp2shell CVE-2026-63030 + CVE-2026-60137: Independent Root Cause Analysis WordPress core disclosed wp2shell on 2026-07-17 as a critical, unauthenticated RCE affecting default installs WordPress 6.9.0-6.9.4, 7.0.0-7.0.1, zero plugins required. The original discoverer Searchlight Cyber withheld...

ph0neutria

ph0neutria ph0neutria malware crawler v1.0.1 https://github.com/phage-nz/ph0neutria Note: This project is not actively maintained. About ph0neutria is a malware zoo builder that sources samples straight from the wild. Everything is stored in Viper for ease of access and manageability. This projec...

CVE-2026-41651-Python

Pack2TheRoot: CVE-2026-41651 Python Python PoC of the PackageKit TOCTOU Local Privilege Escalation exploit. Any local unprivileged user can install arbitrary packages as root with no authentication. Field| Value ---|--- CVE| CVE-2026-41651 Component| PackageKit daemon packagekitd Affected version...