CVE-2022-29464

Exploit CVE-2022-29464 This repository contains a script to exploit the CVE-2022-29464 vulnerability, which allows file uploads to vulnerable servers. Use it only in authorized environments and for educational purposes. Requirements Python 3.8 or higher Installation Step 1: Clone the repository...

CVE-2021-46071

CVE-2021-46071 Título del Exploit: Vehicle Service Management System - 'Category List' Cross Site Scripting XSS Almacenado Autor del Exploit: SANU P.L CVE: CVE-2021-46071 CVSS: 4.8 MEDIO Referencias:...

FLAIR

F-Secure Lightweight Acquisition for Incident Response FLAIR This document describes the purpose and basic operation of the FLAIR acquisition script. Purpose During investigation of incidents on client estate, there are occasions where no EDR deployed which the IR team can make use of to collect...

macOSTriageCollectionScript

macOSTriageCollectionScript A triage data collection script for macOS that utilises sysdiagnose with a few additions to gather useful triage data for investigations. What does the script collect? Data collected includes: sysdiagnose , a utility on a vareity of macOS/iOS operating systems that...

shadowhammer

バッチモード対応 Shadowhammer MACアドレスチェッカー...

CVE-2023-33977

CVE-2023-33977 Stored XSS Via SVG Upload in kiwitcms/kiwi - by M Nadeem Qazi Description This repository addresses the stored XSS vulnerability discovered in the kiwitcms/kiwi application, which was assigned the CVE-2023-33977 identifier. The vulnerability allows for the execution of malicious...

CVE-2025-68147-OSPOS-Stored-XSS

CVE-2025-68147: Stored Cross-Site Scripting XSS in OpenSourcePOS...

CVE-2025-41088

CVE-2025-41088: XSS Almacenado en Xibo CMS He descubierto una vulnerabilidad de Cross-Site Scripting XSS almacenado en Xibo CMS v4.1.2. Esta vulnerabilidad permite a un atacante autenticado inyectar scripts maliciosos en la aplicación debido a una validación incorrecta de la entrada proporcionada...

Ghost-CMS-Code-Injection-Audit-CVE-2026-26980

Ghost CMS Code Injection Cleaner Removes injected code from every post and page on a Ghost CMS website via the Admin API. Use this to clean up a compromised Ghost site — for example, one affected by the code injection vulnerability CVE-2026-26980 — by stripping attacker-supplied tags and other...

nmap-nse-scripts

Repositorio para el desarrollo de NSE Nmap Scripting Engine. Encontrarás mis scripts incluyendo los no oficiales, librerías, recursos y otro material relacionado de mis talleres. TODO Finalizando la librería NSE de SMB2 Actualmente trabajando en la funcionalidad de modificación de contraseñas...

Malicious code in action-slack-message-root (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d5f3deb6623e5340770d4e8866adc3d7239938e5adefc4b699c897287d84eba package.json declares scripts.preinstall = 'node index.js', which runs automatically on npm install. index.js collects host reconnaissance —...

MAL-2026-16323 Malicious code in action-slack-message-root (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d5f3deb6623e5340770d4e8866adc3d7239938e5adefc4b699c897287d84eba package.json declares scripts.preinstall = 'node index.js', which runs automatically on npm install. index.js collects host reconnaissance —...

Malicious code in @baanx/solana-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6462ecac2764fc9cf78d47ee57fec1fd3d6a0cf573ee02eaddcc2e5b5f3f0d7e The package declares scripts.install = node index.js, so npm install @baanx/solana-lib automatically executes index.js, which loads lib/core.js. That...

MAL-2026-16300 Malicious code in @baanx/solana-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6462ecac2764fc9cf78d47ee57fec1fd3d6a0cf573ee02eaddcc2e5b5f3f0d7e The package declares scripts.install = node index.js, so npm install @baanx/solana-lib automatically executes index.js, which loads lib/core.js. That...

MAL-2026-16303 Malicious code in @nimbusedge2/authxsas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0146259024cc8ef3a174ff98571fe4af975b3eecf9184a0a5339d42808243d10 The package's package.json declares a preinstall script that fires unconditionally on npm install. The script uses curl to query the cloud instance...

dracut: dracut: root code execution via unescaped error message written to sourced emergency hook script in die()

A flaw was found in dracut. The die error-handling function writes its message into a shell script under the initramfs emergency-hook directory without properly shell-quoting it. When the message contains data derived from the DHCP ROOTPATH option, an attacker on the adjacent network who controls...

EulerOS Virtualization 2.10.0 : samba (EulerOS-SA-2026-3888)

According to the versions of the samba packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A flaw was found in the Samba printing subsystem. Samba passes the client-controlled job description string to the command configure...

EulerOS Virtualization 2.10.1 : samba (EulerOS-SA-2026-3854)

According to the versions of the samba packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A flaw was found in the Samba printing subsystem. Samba passes the client-controlled job description string to the command configure...

CVE-2026-79320

Stencil core 4.43.5 contains a DOM-based cross-site scripting (XSS) vulnerability in the component runtime . The issue occurs when a downstream application enables the experimental slot fixes option and utilizes scoped components . Specifically, assigning a string to the textContent property of a...

CVE-2024-3400

PAN-OS CVE-2024-3400 チェック 概要 内部使用専用 このスクリプトは、Palo Alto Networks ファイアウォール上で CVE-2024-3400 PAN-OS エクスプロイトの痕跡をチェックします。 CVE: https://security.paloaltonetworks.com/CVE-2024-3400 IOCs: https://otx.alienvault.com/pulse/66198c3b58d2dd2ad4043bc6/ 要件 Python 3.6+ netmiko ライブラリ tqdm ライブラリ インストール 1...