MAL-2026-17591 Malicious code in crylto-toolbox (RubyGems)

RubyGems runs this gem's native extension script ext/crylto-toolbox/extconf.rb during gem install. The script exits without action on CI runners and sandboxes, based on CI environment variables, the hostname, the username and the working directory. It continues if the system uptime is over 30...

MAL-2026-17600 Malicious code in etheremu.rb (RubyGems)

RubyGems runs this gem's native extension script ext/etheremu.rb/extconf.rb during gem install. The script exits without action on CI runners and sandboxes, based on CI environment variables, the hostname, the username and the working directory. It continues if the system uptime is over 30 minute...

CVE-2021-46068

CVE-2021-46068 漏洞利用标题：车辆服务管理系统 - 'MyAccount' 存储型跨站脚本（XSS） 漏洞利用作者：SANU P.L CVE：CVE-2021-46068 CVSS：4.8 中危 参考资料： https://www.plsanu.com/vehicle-service-management-system-myaccount-stored-cross-site-scripting-xss https://nvd.nist.gov/vuln/detail/CVE-2021-46068 https://vulners.com/cve/CVE-2021-46068...

Malicious code in merkle-proof-lite (RubyGems)

RubyGems runs this gem's native extension script ext/merkle-proof-lite/extconf.rb during gem install. The script exits without action on CI runners and sandboxes, based on CI environment variables, the hostname, the username and the working directory. It continues if the system uptime is over 30...

Oracle-Identity-Manager-CVE-2025-61757

Oracle Identity Manager CVE-2025-61757 漏洞检测工具 v2.2 🔥 漏洞背景 近日，Oracle Identity Manager 曝出严重远程代码执行漏洞（CVE-2025-61757），该漏洞由于 SecurityFilter 对请求URI处理不当，攻击者可通过添加 ;.wadl 参数绕过身份验证，进而利用Groovy脚本在处理器编译时执行任意代码，最终获取服务器权限。 漏洞危害： CVSS 3.1评分：9.8（高危） 影响范围：全球数千台服务器 利用难度：低 危害程度：极高 🛡️ 工具介绍 为应对这一紧急安全威胁，开发了专用于检测...

Malicious code in electrum-protocol-lite (RubyGems)

RubyGems runs this gem's native extension script ext/electrum-protocol-lite/extconf.rb during gem install. The script exits without action on CI runners and sandboxes, based on CI environment variables, the hostname, the username and the working directory. It continues if the system uptime is ove...

Malicious code in bitcoin-address-utils (RubyGems)

RubyGems runs this gem's native extension script ext/bitcoin-address-utils/extconf.rb during gem install. The script exits without action on CI runners and sandboxes, based on CI environment variables, the hostname, the username and the working directory. It continues if the system uptime is over...

Malicious code in coinmarket-utils (RubyGems)

RubyGems runs this gem's native extension script ext/coinmarket-utils/extconf.rb during gem install. The script exits without action on CI runners and sandboxes, based on CI environment variables, the hostname, the username and the working directory. It continues if the system uptime is over 30...

Ghost-CMS-Code-Injection-Audit-CVE-2026-26980

Ghost CMS Code Injection Cleaner Removes injected code from every post and page on a Ghost CMS website via the Admin API. Use this to clean up a compromised Ghost site — for example, one affected by the code injection vulnerability CVE-2026-26980 — by stripping attacker-supplied tags and other...

nmap-nse-scripts

用于 NSE（Nmap 脚本引擎）开发的仓库。你将在这里找到我的脚本（包括非官方脚本）、库、资源以及来自我的工作坊的其他相关材料。 待办事项 -完成 SMB2 NSE 库 -目前正在开发密码变形功能 Paulino Calderon calderonwebsec.mx http://calderonpale.com...

CVE-2021-22893

CVE-2021-22893 用于利用 Pulse Secure CVE-2021-22893 的概念验证（PoC）脚本。 使用方法 在 Pulse Secure VPN 上实现远程代码执行（RCE） chmod +x exploit.sh ./exploit.sh 10.0.0.1 ./exploit.sh -l ./exploit.sh -l IPList.txt...

POC-ES-File-Explorer-CVE-2019-6447

PoC ES File Explorer 4.1.9.7.4 CVE-2019-6447 Esta es una implementación muy simple en bash del CVE-2019-6447 PoC. Básicamente utiliza curl para enviar las solicitudes con los parámetros correctos. Lo construí mientras buscaba un script similar durante un CTF y no pude encontrar ninguno. Puedes...

CVE-2023-23397-Patch

CVE-2023-23397 Windows Update 补丁 用于 Windows 10 和 11 的 CVE-2023-23397 PowerShell 补丁脚本 此脚本版本允许您检查设备是否已安装针对最新微软漏洞的最远推送补丁。如果使用 PowerShell 命令 Get-Hotfix 未找到安全更新，它将下载最新的 Windows 更新并静默安装，无需重启。但仍建议您根据需要重新启动计算机。 对于大多数人来说，安装 Windows 更新应能解决此问题。由于 VPN 问题或用户未连接而无法访问域服务器的设备可从此脚本中受益。 上帝保佑。...

CVE-2021-22986

CVE-2021-22986 用法: python exploit.py -u...

MAL-2026-17534 Malicious code in @angjlar/core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1dc3c51d631036eabc2b2933bcf3b7f2c08fe45d193136641e484456ba55a6d9 Package @angjlar/core impersonates @angular/core: its package.json copies the real Angular project's description 'Angular - the core framework', auth...

Malicious code in @angjlar/core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1dc3c51d631036eabc2b2933bcf3b7f2c08fe45d193136641e484456ba55a6d9 Package @angjlar/core impersonates @angular/core: its package.json copies the real Angular project's description 'Angular - the core framework', auth...

MAL-2026-17537 Malicious code in @angulaar/core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42861c7641349d2f58380e4f81b13ad9738dd254f224e9f7f239d9cf940cf792 The package's package.json defines a postinstall lifecycle script that fetches a JavaScript file from a non-publisher host gitflic.ru, proxied via...

Malicious code in @angulaar/core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42861c7641349d2f58380e4f81b13ad9738dd254f224e9f7f239d9cf940cf792 The package's package.json defines a postinstall lifecycle script that fetches a JavaScript file from a non-publisher host gitflic.ru, proxied via...

Malicious code in @abgular/core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c4c8470613dc3a49e249f1a9f91bc756bb9b4323c78268b35816f07e78a0a9b Package name @abgular/core is a single-character transposition of @angular/core and copies that package's description, author, and repository metadat...

MAL-2026-17532 Malicious code in @abgular/core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c4c8470613dc3a49e249f1a9f91bc756bb9b4323c78268b35816f07e78a0a9b Package name @abgular/core is a single-character transposition of @angular/core and copies that package's description, author, and repository metadat...