Microsoft-Office-Word-MSHTML-Remote-Code-Execution-Exploit

Microsoft-Office-Word-MSHTML-Remote-Code-Execution-Exploit CVE-2021-40444 EXPLOIT TO USE IN METASPLOIT, ALLOWS ATTACKERS TO GET AN REMOTE CODE EXECUTION THROUGH MICROSOFT OFFICE WORD BY INJECTING MALICIOUS CODE IN THE FILE...

MAL-2026-19118 Malicious code in 0sec-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6ca0694213fab27d0292d43aee954b81c13e551a81563903fb9afd7e54a9dda2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-3094-checker

CVE-2024-3094 checker xz Utils versions 5.6.0 and 5.6.1 appear to be compromised. XZ Utils is data compression software and may be present in Linux distributions. The malicious code may allow unauthorized access to affected systems. Sources: https://vulners.com/cve/CVE-2024-3094...

web_exploit_detector

Web Exploit Detector Introduction The Web Exploit Detector is a Node.js application and NPM module used to detect possible infections, malicious code and suspicious files in web hosting environments. This application is intended to be run on web servers hosting one or more websites. Running the...

Malicious code in chalks-log (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0989c6b31e99988848556608782ed4e28d21b14b9360324463765752195636d2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in termchalk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b41f585c4e82520cf84ca20367823520bced473a6fbc03f50ab77c7c5bb83e77 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Joomla! Component Preventive And Reservation 1.0.5 - Local File Inclusion

A directory traversal vulnerability in the Preventive & Reservation compreventive component 1.0.5 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impacts via a .. dot dot in the controller parameter to index.php. id: CVE-2010-1475 info: name: Joomla...

php-malware-finder

PHP Malware Finder | || || || | | | | || || | | || || || | Webshell finder, | || || | kiddies hunter, | | | |||| || | website cleaner. || || |||| Detect potentially malicious PHP files. What does it detect? PHP-malware-finder does its very best to detect obfuscated/dodgy code as well as files usi...

CVE-2024-3094-info

CVE-2024-3094-info https://github.com/lockness-Ko/xz-vulnerable-honeypot https://tukaani.org/xz-backdoor/ - Lasse Collin response https://gist.github.com/thesamesam/223949d5a074ebc3dce9ee78baad9e27...

CVE-2024-3094_xz_check

CVE-2024-3094 xz Check Script This repository contains a Bash script and a one-liner command to verify if a system is running a vulnerable version of the "xz" utility, as specified by CVE-2024-3094. See the description and impact statement below from information available via RedHat...

MAL-2026-19085 Malicious code in @lemili9804/mcp-weather-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5d30fa4c52f798996f66ca05cae3f2308deec8aeab0e7f475e92aaff0770376f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-19086 Malicious code in direct-message-receiver (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9b7463d3684446638cd4991bcb8dd795101822c1c46f1e78219b75efa77a201f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-19091 Malicious code in discordjs-dm-parse (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a51912e26847a4be9c01b17b55ca21b03e5f1dca5bdf77d5be6a0312e706b60b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-19088 Malicious code in discord-dm-parser (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6d5e724d3b829b2dac02eec0032468dd75509726c45995e474c5bb0a4d6b1fb1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-19089 Malicious code in discord-selfbot-functions (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 13f88d8e83fb37239b1e5154b604a722528d9979c24dd92028e8ba2595e1392c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-19092 Malicious code in sms-activate.js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7d44b2e323198739f384ef3fae6cc6c64e13bd44cda21221e1b45f4eacd7920d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-19087 Malicious code in discord-badge-parser (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7d2a24796d3a59ca34d7c8469ffc4109f8f9293ab58eee299ec1ef815b176a06 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-19090 Malicious code in discord-user-parser (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2766aea53528ed77bd814610cca5ea5fc97d488f1363648b0661dbfe77280748 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

are-you-get-tanstack-attack

TanStack Router CVE Scanner A security scanning tool to detect the TanStack Router CVE | TanStack Router GHSA in your projects. Overview This tool scans your codebase for indicators of the TanStack Router vulnerability CVE-2026-45321 / GHSA-g7cv-rxg3-hmpx, which affects specific versions of...

Malicious code in agent-trace-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3205c915b20c02b2ef68e41585a81f9bf045967458ad3c79e029a50e64b2b645 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...