CVE-2022-31298

CVE-2022-31298 Haraj Script 3.7 - Authenticated Stored XSS Exploit Title: Haraj Script 3.7 - Authenticated Stored XSS Date: 2022-06-13 CVE: CVE-2022-31298 Exploit Author: Abdulaziz Saad @b4zb0z Vendor Homepage: https://angtech.org/ Software Link: https://angtech.org/product/view/3 Version: 3.7...

CVE-2023-41425

CVE-2023-41425 CVE-2023-41425 is a reflected XSS vulnerability in Wonder CMS which further allows to execute arbitrary code through a malicious script via the installModule component. Usage Running the exploit against the target's loginURL, specifying our IP and port for the web server hosting th...

Malicious code in pyrechoasr (PyPI)

Source: kam193 abd16e8f67cf00b05cd9b944eaae2569a33cd419f50b3df499f203ea838fc447 The package belongs to a series of packages falsely advertising 'audio-analysis profiles' loader. In fact, the only purpose is to execute remote code, but the URL is not embedded in the package. It is likely a...

Malicious code in tonemaptts (PyPI)

Source: kam193 19491cfac57ebbc5106857c286eb420bb2c84f246781670579fc4311cb7d1cad The package belongs to a series of packages falsely advertising 'audio-analysis profiles' loader. In fact, the only purpose is to execute remote code, but the URL is not embedded in the package. It is likely a...

Malicious code in voltswannts (PyPI)

Source: kam193 5fa306d5f7de491546822f6b026c35cc395d7d379258b7a8382b50468ce708b2 The package belongs to a series of packages falsely advertising 'audio-analysis profiles' loader. In fact, the only purpose is to execute remote code, but the URL is not embedded in the package. It is likely a...

Malicious code in quasitonnts (PyPI)

Source: kam193 6b73744742a9129ba02b40242325d596780af7d8e456c7040e8458d29c125540 The package belongs to a series of packages falsely advertising 'audio-analysis profiles' loader. In fact, the only purpose is to execute remote code, but the URL is not embedded in the package. It is likely a...

Malicious code in emberlytts (PyPI)

Source: kam193 c53182f7339fc139b58f28bdd6588e55eb25c1c6d07089f6fc57b87f8339f547 The package belongs to a series of packages falsely advertising 'audio-analysis profiles' loader. In fact, the only purpose is to execute remote code, but the URL is not embedded in the package. It is likely a...

Malicious code in driftwavets (PyPI)

Source: kam193 e69baa6a16626f26b6f71e04ce89a53a693a06c6545446a9addbecfd6c95d92f The package belongs to a series of packages falsely advertising 'audio-analysis profiles' loader. In fact, the only purpose is to execute remote code, but the URL is not embedded in the package. It is likely a...

Malicious code in novalithtts (PyPI)

Source: kam193 4d136563fb3f5bd0febb4dc01f0af8d3ce9638271f1416f814d126fb49239840 The package belongs to a series of packages falsely advertising 'audio-analysis profiles' loader. In fact, the only purpose is to execute remote code, but the URL is not embedded in the package. It is likely a...

Malicious code in glassbeakasr (PyPI)

Source: kam193 de05a7ca1743ea6c3ceba4abc7f5452783d567b39f20007aeb57071a6d4019ed The package belongs to a series of packages falsely advertising 'audio-analysis profiles' loader. In fact, the only purpose is to execute remote code, but the URL is not embedded in the package. It is likely a...

Malicious code in tonemaptts (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 19491cfac57ebbc5106857c286eb420bb2c84f246781670579fc4311cb7d1cad The package belongs to a series of packages falsely advertising 'audio-analysis profiles' loader. In fact, the only purpose is to execute remote code, but the...

Malicious code in pyrechoasr (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 abd16e8f67cf00b05cd9b944eaae2569a33cd419f50b3df499f203ea838fc447 The package belongs to a series of packages falsely advertising 'audio-analysis profiles' loader. In fact, the only purpose is to execute remote code, but the...

Malicious code in driftwavets (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 e69baa6a16626f26b6f71e04ce89a53a693a06c6545446a9addbecfd6c95d92f The package belongs to a series of packages falsely advertising 'audio-analysis profiles' loader. In fact, the only purpose is to execute remote code, but the...

Malicious code in novalithtts (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 4d136563fb3f5bd0febb4dc01f0af8d3ce9638271f1416f814d126fb49239840 The package belongs to a series of packages falsely advertising 'audio-analysis profiles' loader. In fact, the only purpose is to execute remote code, but the...

Malicious code in voltswannts (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 5fa306d5f7de491546822f6b026c35cc395d7d379258b7a8382b50468ce708b2 The package belongs to a series of packages falsely advertising 'audio-analysis profiles' loader. In fact, the only purpose is to execute remote code, but the...

Malicious code in glassbeakasr (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 de05a7ca1743ea6c3ceba4abc7f5452783d567b39f20007aeb57071a6d4019ed The package belongs to a series of packages falsely advertising 'audio-analysis profiles' loader. In fact, the only purpose is to execute remote code, but the...

Malicious code in emberlytts (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 c53182f7339fc139b58f28bdd6588e55eb25c1c6d07089f6fc57b87f8339f547 The package belongs to a series of packages falsely advertising 'audio-analysis profiles' loader. In fact, the only purpose is to execute remote code, but the...

Malicious code in quasitonnts (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 6b73744742a9129ba02b40242325d596780af7d8e456c7040e8458d29c125540 The package belongs to a series of packages falsely advertising 'audio-analysis profiles' loader. In fact, the only purpose is to execute remote code, but the...

Malicious code in fromthehotel-poems (PyPI)

Source: kam193 bf72dad3e2f32ee2e66a3a5ee5642b4a20a9fb9458fcd677f6250b1e4b805906 One of the provided functions hides executing remote code from a newly created domain. During analysis, the remote code did not contain any malicious action. The description and other endpoints clearly suggest it's an...

CVE-2026-84244

IBM Guardium Data Protection 12.2 is vulnerable to a stored cross-site scripting (XSS) vulnerability in the Quick Search results grid . This flaw allows an unauthenticated attacker capable of influencing monitored database traffic to execute malicious scripts in the browser of an authenticated Gu...