Malicious code in hydration-dim-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16cd04f35f684a64b6abd8178154fc7d1f5a970c76f7d77c45635c1c3bcf0d9b [email protected] presents itself as a calendar-day math utility, but its main entry dist/index.mjs runs at import time: it chmod 0755's...

React2Shell_Exploit

React2ShellExploit CVE-2025-55182 Ho creato un semplice exploit Python per react2shell CVE-2025-55182 USAGE 1. Salva lo script: salva il codice sopra come exploit.py. 2. Aggiorna gli Host: assicurati che reactor.htb risolva all'IP di destinazione nel tuo file /etc/hosts. echo " reactor.htb" | sud...

CVE-2025-53770-SharePoint-Zero-Day-Variant-Exploited-for-Full-RCE

🚨 CVE‑2025‑53770 – Variante Zero-Day di SharePoint Sfruttata per RCE Completa Una critica escalation da CVE‑2025‑49706 Di Aditya Bhatt – Red Team | VAPT 📌 In Breve CVE‑2025‑53770 è una vulnerabilità critica CVSS 9.8 RCE senza autenticazione in Microsoft SharePoint ora attivamente sfruttata in...

CVE-2026-52617

CVE-2026-52617 — @sworddut/mcp-ffmpeg-helper: iniezione di comandi del sistema operativo tramite le opzioni dello strumento ffmpeg runFFmpegCommand passa una stringa costruita dai parametri dello strumento MCP a spawn…, shell: true , quindi i metacaratteri della shell in options, format, codec,...

CVE-2024-25832-PoC

CVE-2024-25830 e CVE-2024-25832 - Controllo degli accessi improprio e caricamento di file senza restrizioni in DataCube3. Panoramica Questo repository presenta un Proof of Concept PoC per una catena di exploit in due fasi che prende di mira i dispositivi DataCube3. Combina CVE-2024-25830 Controll...

CVE-2022-36553-PoC

CVE-2022-36553 - Hytec Inter HWL-2511-SS Nicht authentifizierte Remote-Befehlseinschleusung. Übersicht Dieses Repository enthält ein Proof-of-Concept PoC Reverse-Shell-Skript zur Ausnutzung von CVE-2022-36553, einer kritischen Schwachstelle in Hytec Inter HWL-2511-SS-Geräten. Das Skript ist eine...

CVE-2026-65611

A flaw was found in nnn, a file manager. This vulnerability, known as Shell Command Injection, allows an attacker to execute arbitrary commands. By creating a specially crafted directory name containing shell syntax on a shared filesystem, removable media, or within an extracted archive, an...

tplink-archer-root-exploit

TP-Link Archer AX73 / AX10 — Root Shell Exploit Auto-Mail L...

Follina

Follina PATCHED Remote Access Shell für Windows basiert auf cve-2022-30190 ⚠️ Nur für Bildungszwecke 📚 Installation und Nutzung 🛠️ root@kitploit: $ git clone https://github.com/AbdulRKB/Follina.git $ cd Follina $ pip install -r requirements.txt $ python main.py...

CVE-2026-76055

CVE-2026-76055 is an OS command injection in the package manager component of Black Duck blackduck-c-cpp prior to version 3.0.7. Filesystem paths encountered while traversing a scanned build directory are interpolated into shell command strings without quoting or escaping , allowing shell metacha...

CVE-2026-76055

Improper Neutralization of Special Elements used in an OS Command in the package manager component of Black Duck blackduck-c-cpp before 3.0.7 allows an actor able to create a file within the scanned build directory to execute operating system commands as the account running the scan. Filesystem...

EUVD-2026-64896

Improper Neutralization of Special Elements used in an OS Command in the package manager component of Black Duck blackduck-c-cpp before 3.0.7 allows an actor able to create a file within the scanned build directory to execute operating system commands as the account running the scan. Filesystem...

CVE-2026-68519

A flaw was found in Glances. This issue occurs because the --disable-config-exec option does not properly prevent on-alert action commands from executing shell operators. A local attacker with high privileges could exploit this to execute arbitrary commands, leading to high impact on...

CVE-2024-0039-Exploit

CVE-2024-0039-Exploit Beschreibung Python-Skript zur Ausnutzung der Schwachstelle CVE-2024-0039: Ausführung von beliebigem Code auf anfälligen Android-Geräten. ACHTUNG : Dieser Code dient nur zu Bildungs- und Schaffenszwecken, im Dienste des Guten, sozusagen! Verwendung Führen Sie das Skript mit...

CVE-2021-44168

CVE-2021-44168 के लिए शोषण उद्देश्य CVE-2021-44168 का शोषण करके Fortigate फ़ायरवॉल पर एक शेल ड्रॉप करें और LDPRELOAD ट्रिक्स के माध्यम से इसकी पहुँच सक्षम करें, जो Fortigate के कुछ CLI कमांड चलाने पर निष्पादित होती हैं। आपको एक रूट शेल मिलता है। उपयोग संकलन: root@kitploit: gcc -o gensrc-vispkgfil...

spip-cve-2023-27372-rce

SPIP CVE-2023-27372 Exploit de RCE Não Autenticado Upload de Web Shell Este script Python explora a CVE-2023-27372, uma vulnerabilidade de execução remota de código não autenticada no SPIP CMS em versões anteriores à 4.2.1. Ele aproveita uma falha de envenenamento de cache no mecanismo de...

jboss-autopwn-1

jboss-autopwn JBoss Autopwn come presentato al BlackHat Europe 2010 - questa versione incorpora CVE-2010-0738, la vulnerabilità di bypass dell'autenticazione JBoss tramite manipolazione del verbo VERB, scoperta da Minded Security. C. Papathanasiou 2010 INTRODUZIONE Questo script JBoss distribuisc...

ROOT-APP-NPM-CVE-2026-9277 CVE-2026-9277 in shell-quote - Patched by Root

Root has patched CVE-2026-9277 in the shell-quote package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2021-42740 CVE-2021-42740 in shell-quote - Patched by Root

Root has patched CVE-2021-42740 in the shell-quote package for Root:npm. Multiple fixed versions available...

CVE-2020-14295

CVE-2020-14295 Dettagli vulnerabilità - https://github.com/Cacti/cacti/issues/3622 Installazione pip3 install -r requirements.txt Utilizzo root@kitploit: $ ./gimme-a-shell.py --help usage: gimme-a-shell.py -h -t Target -U Username -P Password -i Shell-IP -p Shell-Port optional arguments: -h, --he...