CVE-2026-105294

Legcord versions 1.1.0 through 1.3.0 are vulnerable to a configuration injection vulnerability via the window.legcord settings.setConfig bridge. This flaw allows scripts running on the Discord page to write arbitrary configuration keys. If an attacker leverages a Discord XSS , they can modify add...

domains-from-csp

domains-from-csp A Python script to parse domain names from CSP header A script to extract domain names from Content Security PolicyCSP headers The output is print to stdout for now Demo Screenshots 3rd party package dependency requests click Setup Clone this repo $ git clone...

assets-from-spf

assets-from-spf A Python script to parse netblocks & domain names from SPFSender Policy Framework DNS record For every parsed asset, the script will also find and print Autonomous System NumberASN details For now, the output is printed in JSON format only Demo Screenshots 3rd party package...

Exchange_IOC_Hunter

ExchangeIOCHunter 설명: IIS 로그에서 IOC 탐색 - CVE-2021-26855, CVE-2021-26857, CVE-2021-26858, CVE-2021-27065 지원 아티팩트: C2 IP 주소 스캔 및 익스플로잇에 사용됨 파일 이름 익스플로잇 시도에서 관찰됨 원격 코드 실행 RCE 사용법: powershell .\ExchangeIOCHunter.ps1 업데이트: 이 저장소는 보안 업무가 발전함에 따라 새로운 IOC로 업데이트됩니다...

PT-2026-106027

A flaw was found in Quay. A remote attacker could trick a user into logging in through a crafted link, resulting in cross-site scripting XSS. Because the application does not validate the redirect destination before navigating, this flaw allows the execution of arbitrary script in the context of...

PT-2026-106183

Name of the Vulnerable Software and Affected Versions Ghost versions 4.22.0 through 6.64.0 Description SVG media thumbnails and SVG images uploaded with a non-SVG file extension are stored without sanitization. This allows staff users, including those with Contributor roles, to host malicious...

RHEL 7 : rhc-worker-script (RHSA-2026:75689)

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:75689 advisory. Remote Host Configuration rhc worker for executing scripts on hosts managed by Red Hat Lightspeed. Security Fixes: encoding/asn1: golang: G...

PT-2026-106198

Name of the Vulnerable Software and Affected Versions Ghost versions 6.22.1 through 6.63.0 Description Ghost is a Node.js content management system. When using the default local storage adapter, the system fails to restrict the content type of uploaded files. This allows files uploaded by staff...

CVE-2026-105679: Improper Neutralization of Input During Web Page Generation

Ghost is a Node.js content management system. From 6.22.1 until 6.64.0, Ghost restricted the content type used to serve uploaded files to prevent browsers from executing them. On sites using the default local storage adapter, this restriction was not applied, so files uploaded by any staff user...

CVE-2026-105649: Improper Neutralization of Input During Web Page Generation

Ghost is a Node.js content management system. From 4.22.0 until 6.65.0, SVG media thumbnails and SVG images uploaded with a non-SVG file extension were stored without sanitization. This allowed any staff user, including Contributors, to host scripts on the site's domain, possibly resulting in...

CVE-2026-102576: Improper Neutralization of Input During Web Page Generation

A flaw was found in Quay. A remote attacker could trick a user into logging in through a crafted link, resulting in cross-site scripting XSS. Because the application does not validate the redirect destination before navigating, this flaw allows the execution of arbitrary script in the context of...

CVE-2026-59787: Improper Neutralization of Record Delimiters

The Perl SNMP trap receiver script shipped with Zabbix does not properly neutralize the ZBXTRAP record delimiter in trap content. This means someone able to send SNMP traps can inject a record targeting another host, resulting in a loss of integrity...

CVE-2026-104404: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Liquid Web / StellarWP GiveWP give allows Stored XSS.This issue affects GiveWP: from n/a through 4.17.0...

PT-2026-106004

The convert playwright script prompt in the k6 MCP server accepts a file path as its playwright script argument. Paths given in the documented '@'-prefixed form are restricted to the server's current working directory, but a bare path is resolved by a separate undocumented code path that applies ...

Infineon-CVE-2017-15361

Infineon-CVE-2017-15361 Simple PowerShell script to check whether a computer is using an Infineon TPM chip that is vulnerable to CVE-2017-15361. IMPORTANT: THIS MUST BE EXECUTED AS ADMINISTRATOR!! This script only works on Windows 8.1 and Windows Server 2012 or later releases of Windows. The scri...

CVE-2002-0346

CVE-2002-0346 Vulnerabilidad de cross-site scripting en Cobalt RAQ 4 permite a atacantes remotos ejecutar script arbitrario como otros usuarios de Cobalt mediante Javascript en una URL hacia 1 service.cgi o 2 alert.cgi. Publicación de Packetstorm en...

WP-CVE-2025-4322---Scan

Uso Normal Test python3 wp-backdoor-remote-scan.py https://misitio.com con output JSON python3 wp-backdoor-remote-scan.py https://misitio.com --json Ajustar threads y timeout para sitios con rate limit python3 wp-backdoor-remote-scan.py https://misitio.com --threads 5 --timeout 15...

Malicious code in lite-matte (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e7b0ae9e42c334c1c22627e60add7a2c5a0d558a2ab65a3af0043e27bb0e686 package.json declares "postinstall": "wscript.exe 4444.vbs", causing npm install to auto-execute a 765KB Windows Script Host file shipped in the...

Samba-CVE-2007-2447-Exploit-Username-Map-Script

Samba CVE-2007-2447 Exploit Username Map Script Este repositorio contiene un script de Python diseñado para automatizar la explotación de la vulnerabilidad CVE-2007-2447 en servidores Samba versiones 3.0.20 a 3.0.25rc3. Esta herramienta ha sido desarrollada con fines exclusivamente educativos y...

MAL-2026-17529 Malicious code in ultimate-websocket (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7574e423b830695141ee6e089006e0c355109e240c69881512806869cfee8114 package.json declares its only dependency node-net-pool as a bare tarball URL pointing at the mutable main branch of an unrelated GitHub user...