Lucene search
+L

10436 matches found

osv_mal
osv_mal
•added 2024/08/10 11:05 p.m.•12 views

MAL-2024-12198 Malicious code in artifact-lab-3-package-34b21b63 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 a814378a8188b464c5289007203c2b20c3ec2a0383ee18bd96e0f41ad44d7982 Packages showing simple variants of revshell with targets to ngrok. Most probably experiments. Later versions moved to use Burp Collaborator to exfiltrate simp...

7.5AI score
SaveExploits0References1
osv_mal
osv_mal
•added 2024/08/10 11:05 p.m.•24 views

MAL-2024-12192 Malicious code in artifact-lab-3-package (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 0c18a16c7c21d93a8819aed298f6691835b1a31546ca573eb94ce4265d4fb291 Packages showing simple variants of revshell with targets to ngrok. Most probably experiments. Later versions moved to use Burp Collaborator to exfiltrate simp...

7.5AI score
SaveExploits0References1
osv_oesa
osv_oesa
•added 2024/08/09 11:07 a.m.•24 views

OESA-2024-1952 golang security update

. Security Fixes: The net/http HTTP/1.1 client mishandled the case where a server responds to a request with an "Expect: 100-continue" header with a non-informational 200 or higher status. This mishandling could leave a client connection in an invalid state, where the next request sent on the...

7.5CVSS6.7AI score0.01414EPSS
SaveExploits0References2
zdt
zdt
•added 2024/08/08 12:00 a.m.•313 views

Calibre 7.15.0 Python Code Injection Exploit

This Metasploit module exploits a Python code injection vulnerability in the Content Server component of Calibre version 6.9.0 through 7.15.0. Once enabled disabled by default, it will listen in its default configuration on all network interfaces on TCP port 8080 for incoming traffic, and does no...

9.8CVSS9.6AI score0.84116EPSS
SaveExploits8
OSSF Malicious Packages
OSSF Malicious Packages
•added 2024/08/07 12:09 p.m.•12 views

Malicious code in tsc-aws-s3 (npm)

The package contains a postinstall script to download and execute an ELF Metasploit reverse shell...

7.1AI score
SaveExploits0
osv_mal
osv_mal
•added 2024/08/07 12:09 p.m.•22 views

MAL-2024-8009 Malicious code in tsc-aws-s3 (npm)

The package contains a postinstall script to download and execute an ELF Metasploit reverse shell...

7.2AI score
SaveExploits0
GithubExploit
GithubExploit
•added 2024/08/07 4:36 a.m.•1780 views

Exploit for Unrestricted Upload of File with Dangerous Type in Laravel-Admin

CVE-2023-24249 Exploit Script Description This repository...

7.2CVSS7.7AI score0.02402EPSS
SaveExploits3
Mend
Mend
•added 2024/08/06 10:12 p.m.•6 views

MSC-2024-13060

This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: Remote reverse shell – this package enables acces...

9.8CVSS5.9AI score
SaveExploits0References1
Mend
Mend
•added 2024/08/06 10:12 p.m.•6 views

MSC-2024-13061

This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: Remote reverse shell – this package enables acces...

9.8CVSS5.9AI score
SaveExploits0References1
Mend
Mend
•added 2024/08/06 10:12 p.m.•5 views

MSC-2024-13059

This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: Remote reverse shell – this package enables acces...

9.8CVSS5.9AI score
SaveExploits0References1
Mend
Mend
•added 2024/08/06 9:36 p.m.•6 views

MSC-2024-13056

This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: Remote reverse shell – this package enables acces...

9.8CVSS5.9AI score
SaveExploits0References1
Mend
Mend
•added 2024/08/06 9:36 p.m.•6 views

MSC-2024-13058

This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: Remote reverse shell – this package enables acces...

9.8CVSS5.9AI score
SaveExploits0References1
Mend
Mend
•added 2024/08/06 9:36 p.m.•6 views

MSC-2024-13057

This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: Remote reverse shell – this package enables acces...

9.8CVSS5.9AI score
SaveExploits0References1
Mend
Mend
•added 2024/08/06 8:30 p.m.•5 views

MSC-2024-13053

This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: Remote reverse shell – this package enables acces...

9.8CVSS5.9AI score
SaveExploits0References1
Mend
Mend
•added 2024/08/06 8:30 p.m.•7 views

MSC-2024-13052

This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: Remote reverse shell – this package enables acces...

9.8CVSS5.9AI score
SaveExploits0References1
Mend
Mend
•added 2024/08/06 8:29 p.m.•8 views

MSC-2024-13054

This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: Remote reverse shell – this package enables acces...

9.8CVSS5.9AI score
SaveExploits0References1
Mend
Mend
•added 2024/08/06 8:29 p.m.•7 views

MSC-2024-13055

This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: Remote reverse shell – this package enables acces...

9.8CVSS5.9AI score
SaveExploits0References1
Mend
Mend
•added 2024/08/06 8:29 p.m.•6 views

MSC-2024-13051

This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: Remote reverse shell – this package enables acces...

9.8CVSS5.9AI score
SaveExploits0References1
Mend
Mend
•added 2024/08/06 8:29 p.m.•5 views

MSC-2024-13050

This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: Remote reverse shell – this package enables acces...

9.8CVSS5.9AI score
SaveExploits0References1
Mend
Mend
•added 2024/08/06 7:29 p.m.•6 views

MSC-2024-13049

This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: Remote reverse shell – this package enables acces...

9.8CVSS5.9AI score
SaveExploits0References1
Rows per page
Query Builder