MAL-2025-5554 Malicious code in fneves-my-test-poc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 815b581bf6795de9c99486eb17b7d30b47b6d5619cb296f97499f4149b9231c7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Exploit for CVE-2025-49144

CVE-2025-49144 – Exploit for Notepad++ 8.8.1 This repository...

Gogs XSS allowed by stored call in PDF renderer

Summary A stored XSS is present in Gogs which allows client-side Javascript code execution. Details Gogs Version: docker images REPOSITORY TAG IMAGE ID CREATED SIZE gogs/gogs latest fe92583bc4fe 10 hours ago 99.3MB Application version: 0.14.0+dev Local setup using: bash Pull image from Docker Hub...

Exploit for SQL Injection in Vishalmathur Cloudclassroom-Php_Project

CVE-2025-44608 CloudClassroom-PHP Project v1.0 is vulnerable...

Malicious code in nstmrt-stf-api-poc (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 29e69957371cd4fe181aa65e4f774a3c807e8ff11ebda5f2226dd881f89961ae The OpenSSF Package Analysis project identified 'nstmrt-stf-api-poc' ...

Exploit for SQL Injection in Internet-Formation Wp-Advanced-Search

CVE-2024-9796 WP-Advanced-Search 3.3.9.2 - Unauthenticated S...

chi Allows Host Header Injection which Leads to Open Redirect in RedirectSlashes

Summary The RedirectSlashes function in middleware/strip.go is vulnerable to host header injection which leads to open redirect. We consider this a lower-severity open redirect, as it can't be exploited from browsers or email clients requires manipulation of a Host header. Details The...

Exploit for External Control of File Name or Path in Microsoft

VIETNAMESE - Với file CVE-2025-24054.py và Exploit.librar...

Exploit for Improper Access Control in Microsoft

CVE-2025-33073 PoC Exploit for the NTLM reflection SMB flaw...

Malicious code in 0vulns-dependency-confusion-poc (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d282025fb2ec1b4012e3b979cec1f66520e643fcadfd2864e54989de50dd00d The package.json preinstall script runs wget against an attacker-controlle...

Malicious code in volehai-poc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 695b1f1647ff88855017c178d47ab04527b14c3817e9b4ed343c1220cc7b18df Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Exploit for CVE-2025-24514

🔥 CVE-2025-24514 원격 취약점 점검 PoC 이 스크립트는 CVE-2025-24514 취약점ing...

PoCGen: Generating Proof-Of-Concept Exploits for Vulnerabilities in Npm Packages

Security vulnerabilities in software packages are a significant concern for developers and users alike. Patching these vulnerabilities in a timely manner is crucial to restoring the integrity and security of software systems. However, previous work has shown that vulnerability reports often lack...

Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Imagemagick

CVE-2022-44268 Automation Script - Quick Guide Credits - O...

Malicious code in educational-depconf-poc (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8edb795d28942ec8fe6ea239625dc72e6a73b5965b8631c09f3544c800e54880 Any computer that has this package installed or running should be considered...

Exploit for CVE-2025-25014

POC for CVE-2025-25014 A Prototype pollution vulnerability in...

CVE-2024-45870

Bandisoft BandiView 7.05 is vulnerable to Incorrect Access Control in sub0x3d80fc via a crafted POC file...

Exploit for Out-of-bounds Write in Fortinet Fortiproxy

CVE-2024-21762FortiNetPoC Proof-of-concept scanner targeting...

Exploit for CVE-2025-51060

CVE-2025-51060 Proof of Concept PoC This repository contain...

Malicious code in fwm-poc-built-sites (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fa93c0829bbd693830f9aeffc69c03a26071b5fe6d560c9b1110c4b52e54da37 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...