12 matches found
goCabrito
goCabrito フィッシングキャンペーンを送信するための、超整理された柔軟なスクリプト。 特徴 単一のメールアドレスに送信 メールアドレスのリスト（テキスト）に送信 名・姓を含むメールアドレスのリスト（CSV）に送信 添付ファイルをサポート メールをグループに分割 グループ間の送信に遅延を設定 メッセージ本文に配置・置換可能なタグをサポート name タグを HTML メッセージに追加し、名前で置き換え（--to CSV 使用時） track-click タグを HTML メッセージ内の URL に追加 track-open タグを HTML メッセージに追加 num...
CVE-2022-26134-POC
説明： これは、マルチスレッドを使用したConfluence OGNLインジェクション脆弱性（CVE-2022-26134）の一括検出をサポートするスクリプトツールです 使い方： url.txtファイル内のターゲットアドレス 効果： 1. 単一ターゲットの検出 2. 一括検出（検出成功時はコマンドウィンドウに黄色のハイライトエコーが表示されます ） 免責事項： このツールは学習目的のみに使用されます。ネットワークセキュリティ関連の法律および規制を遵守してください。違法使用による責任は開発者には一切ありません！！...
CVE-2026-16204
Technical details for CVE-2026-16204 are not publicly provided in the supplied documents; no concrete affected versions, vulnerable components, or remediation details are available here. Monitor for updates.
CVE-2026-16204 zevorn rt-claw Telegram-to-AI Tool Execution Flow script.c tool_run_script_execute code injection
A security flaw has been discovered in zevorn rt-claw up to 0.2.0. This affects the function toolrunscriptexecute of the file claw/services/tools/script.c of the component Telegram-to-AI Tool Execution Flow. Performing a manipulation results in code injection. It is possible to initiate the attac...
PT-2026-61038
A security flaw has been discovered in zevorn rt-claw up to 0.2.0. This affects the function tool run script execute of the file claw/services/tools/script.c of the component Telegram-to-AI Tool Execution Flow. Performing a manipulation results in code injection. It is possible to initiate the...
Malicious code in vulndify-mcp-server (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6110bfbfb3eac275094aefd342ef273350829f83c53c480e29df1f872b335650 The package advertises itself in the README as offering only a benign hello MCP tool, but src/vulndifymcpserver/server.py registers two additional,...
CVE-2025-63603
A command injection vulnerability exists in the MCP Data Science Server's reading-plus-ai/mcp-server-data-exploration 0.1.6 in the safeeval function src/mcpserverds/server.py:108. The function uses Python's exec to execute user-supplied scripts but fails to restrict the builtins dictionary in the...
CVE-2025-63603
A command injection vulnerability exists in the MCP Data Science Server's reading-plus-ai/mcp-server-data-exploration 0.1.6 in the safeeval function src/mcpserverds/server.py:108. The function uses Python's exec to execute user-supplied scripts but fails to restrict the builtins dictionary in the...
CVE-2025-63603
A command injection vulnerability exists in the MCP Data Science Server's reading-plus-ai/mcp-server-data-exploration 0.1.6 in the safeeval function src/mcpserverds/server.py:108. The function uses Python's exec to execute user-supplied scripts but fails to restrict the builtins dictionary in the...
PT-2025-47331
Name of the Vulnerable Software and Affected Versions MCP Data Science Server version 0.1.6 Description A command injection issue exists in the safe eval function src/mcp server ds/server.py:108 of the software. The function utilizes Python’s exec to run scripts provided by users, but it does not...
EUVD-2025-198042
A command injection vulnerability exists in the MCP Data Science Server's reading-plus-ai/mcp-server-data-exploration 0.1.6 in the safeeval function src/mcpserverds/server.py:108. The function uses Python's exec to execute user-supplied scripts but fails to restrict the builtins dictionary in the...
