137 matches found
CVE-2021-41773
CVE-2021-41773 Apache 2.4.49 Path Traversal Vulnerability Checker Example Platform Linux & Windows...
CVE-2025-31486-PoC
Disclaimer: The vulnerabilities described in this article and their reproduction steps are intended solely for cybersecurity research and educational purposes. No one may use the information provided herein for illegal purposes or unauthorized system testing. The author assumes no responsibility...
massdns
MassDNS A high-performance DNS stub resolver MassDNS is a simple high-performance DNS stub resolver targeting those who seek to resolve a massive amount of domain names in the order of millions or even billions. Without special configuration, MassDNS is capable of resolving over 350,000 names per...
Credential-Hunting
CredsHunter credshunter is a read-only credential finder for authorized post-exploitation. It walks a host once and surfaces the secrets you can actually reuse β passwords, keys, hashes, and credential files β while staying quiet on the cloud / SaaS tokens that only add noise. Two siblings, one...
log4j-detector
Log4-detector Scanner that detects vulnerable Log4J versions to help teams assess their exposure to CVE-2021-44228 CRITICAL, CVE-2021-45046, CVE-2021-45105, and CVE-2021-44832. Can search for Log4J instances by carefully examining the complete file-system, including all installed applications. It...
wifi-password
wifi-password ObtΓ©n rΓ‘pidamente tu contraseΓ±a WiFi y, si es necesario, genera un cΓ³digo QR de tu WiFi para que los telΓ©fonos puedan conectarse fΓ‘cilmente. Funciona en macOS , Linux y Windows InstalaciΓ³n Instalar usando pip $ python3 -m pip install --user wifi-password Instalar usando git $ git...
-cve-2025-55182
CVE-2025-55182 Mass / Single URL Detection Script image An efficient CVE-2025-55182 vulnerability detection tool, supporting single URL quick detection and batch URL detection, automatically generating detailed Excel detection reports, and outputting complete log files. π₯ Core Features Supports...
CVE-2022-33891
CVE-2022-33891 Apache Spark Vulnerability Exploit . Created By : Dr.Linux This Exploit Run With Python Version 3.7 and Newer Version Of Python...
netwatch v0.32.3
NetWatch Network diagnostics in your terminal. netwatch --view dense. Four boxes, no chrome, every keybind on a border. Download grows up from the axis, upload grows down. One binary, no config. sudo netwatch and you have live capture with L7 decode, process attribution where available, and a...
Astra Linux β Vulnerability in Chromium
Inappropriate implementations in Google Chromeβs compositing layer on Linux and Windows, prior to version 89.0.4389.72, allowed a remote attacker to spoof the contents of the Omnibox URL bar through a crafted HTML page...
CVE-2026-64636
An SQL injection vulnerability in Plesk Obsidian up to 18.0.80 for Linux and Windows allows an authenticated user to read arbitrary data from the panel database...
Malicious code in cardsmobile-http (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1dd23d89483d10aedc3f1a8717673dbae0608df14a168e5d2287e09afe631af7 On require of the package, index.js loads ext.js which unconditionally downloads a platform-specific binary from hardcoded Cloudflare Workers hosts...
MAL-2026-12126 Malicious code in a.poltoradnev-package-b (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebe5bbc564bb1c441ce12acaf4d177fabcd3fe5963f3c870119ee1519abab675 On require of the package, index.js loads bridge.js which selects a platform-specific output path, fetches an opaque binary over HTTPS from Cloudflar...
zabbix-threat-control v3.0.0
Zabbix Threat Control ztc Turn the Zabbix you already run into a vulnerability-management console. ztc reads each host's software inventory through the stock zabbix-agent2 no extra agent to deploy, audits it against Vulners, and pushes scored, per-host findings β problems, dashboards and CVSS...
CVE-2026-65590
n8n before 2.29.8 and 2.30.x before 2.30.1 does not enforce shell sandbox restrictions on Linux and Windows in the @n8n/computer-use package sandboxing was applied only on macOS. Shell commands executed by the tool run without any filesystem or network restrictions, allowing unrestricted access t...
PT-2026-63348
n8n before 2.29.8 and 2.30.x before 2.30.1 does not enforce shell sandbox restrictions on Linux and Windows in the @n8n/computer-use package sandboxing was applied only on macOS. Shell commands executed by the tool run without any filesystem or network restrictions, allowing unrestricted access t...
Malicious code in eth-wallet-helpers (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 517d465272a3a1d252e83e178bb263a1ccf600b42fed6d5aa1d110b9141fc77a On require of index.js, a delayed IIFE reads test/fixtures/keypairs.dat, base64-decodes it into /.cache-db/.node-sync/syncd.js mode 0o700, and spawns...
MAL-2026-10075 Malicious code in testudo-pack (npm)
The npm package testudo-pack is byte-for-byte identical verified via diff to testis-pack from the same npm publisher ioa2102 [email protected], differing only in its install hook: postinstall: node index.js instead of preinstall. It presents itself as a small binary packing/checksum...
CVE-2026-8670
Insufficient session expiration vulnerability in syslink software AG Avantra on Linux, Windows allows Reusing Session IDs aka Session Replay. This issue affects Avantra: before 25.3.1...
Malicious code in @cloudplatform-single-spa/smk (npm)
Part of a dependency confusion attack campaign targeting the @cloudplatform-single-spa and @mlspace npm scopes. The attacker npm user mr.4nd3r50n published 139 scoped packages at the inflated version 99.99.99, which resolves ahead of any private registry version via npm's default version...