CVE-2022-23935

CVE-2022-23935 🐍 Exploit Python per CVE-2022-23935 Generatore di Payload per Reverse Shell Staged per CVE-2022-23935 Esempio root@kitploit: cve-2022-23935 10.10.16.3 44444 Utilizzo root@kitploit: usage: cve-2022-23935 -h -l SERVERPORT -s SHELL ip port positional arguments: ip IP Address/Host for...

CVE-2022-41343

CVE-2022-41343 🐍 Python Exploit für CVE-2022-41343 Staged Reverse Shell für dompdf 2.0.1 Basiert auf: Positive Sec's write-up und PoC Beispiel root@kitploit: cve-2022-41343 10.10.16.3 44444 Verwendung root@kitploit: usage: cve-2022-41343 -h -l SERVERPORT -s SHELL -n FONTNAME ip port positional...

CVE-2022-46169

CVE-2022-41343 🐍 CVE-2022-46169 के लिए पायथन एक्सप्लॉइट Cacti = 1.2.22 के लिए स्टेज्ड रिवर्स शेल उदाहरण root@kitploit: cve-2022-46169 10.10.14.5 44444 -u http://cacti.htb उपयोग root@kitploit: usage: cve-2022-46169 -h -u URL -s SHELL ip port positional arguments: ip Shell Callback IP Address/Host...

Beaconator

Beaconator Beaconator è uno script aggressor per Cobalt Strike utilizzato per generare shellcode staged o stageless e impacchettare lo shellcode generato usando il tuo strumento preferito. Attualmente supporta i seguenti strumenti: Generatore di Beacon Staged Alaris Generatore di Beacon Stageless...

CVE-2020-3580

CVE-2020-3580 Exploit aggiuntivi per XSS nei dispositivi Cisco ASA scoperti da PTSwarm Utilizzo Stage modifica l'indirizzo Dimostrazione Accedi a Cisco ASA WebVPN Visita la pagina dannosa preparata Recupera le tue credenziali Patch ; Esempio / Risultato...

staged-DLL-Injection-SMB-

staged-DLL-Injection Prova di concetto di iniezione DLL a stadi sviluppata in C utilizzando API Win32 — realizzata in un ambiente di laboratorio isolato per lo studio della certificazione red team CRTO. ⚠️ Avvertenza: Questo progetto è stato sviluppato rigorosamente in un ambiente di laboratorio...

Linux_X86_Reverse_TCP_Alphanumeric_Staged_Shellcode_Execve-bin-bash

Questo repository non contiene un README...

MAL-2026-13628 Malicious code in streak-map-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2790159028b31b656c9e704c3a0e4b1a5d114042e0d92c601d133057f760b537 streak-map-kit is advertised as a dependency-free calendar-day/streak math library but ships a Linux ELF at dist/internal/calc-mapping.bin framed as ...

CVE-2026-16054

The Drag and Drop Multiple File Upload for WooCommerce WordPress plugin before 1.1.8 does not prevent unauthenticated users from obtaining a valid nonce that is the only control gating its file-deletion routine, allowing anonymous attackers to delete files staged in its upload directory and...

Malicious code in bnpl-blocks-atom-bnpl-breadcrumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35d35af02d640655669a475465b8fc992dc8b79950584824dab0e86c285f8b01 On require of the package, index.js loads polyfill.js, which fetches a platform-specific opaque binary from obfuscated Cloudflare Workers subdomains...

Malicious code in bnpl-blocks-atom-bnpl-fade-overflow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f78c9360e199f852a5b395b6549e12b6334ec3dce096462a4404a3a0e809f545 On require of this package, index.js loads runtime.js which selects a platform-specific payload path, fetches bytes over HTTPS from...

MAL-2026-12182 Malicious code in json-validator-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 255dbc17164a6243a92bab0b4d71132efad3028b53e73d7d2924a1d7ccd1e8cf The package advertises itself as a JSON/XML validator but lib/core.js contains a multi-stage dropper triggered on any call to the public API...

MAL-2026-12268 Malicious code in tinkoff-statist-browser-typed-client-mb.product.tgeofencing (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 471fb9b5c8d45abc59ffda97063561b4882d28109c9959c717fbcd0d9f25c00d On require of this package, index.js loads platform.js which assembles remote hostnames at runtime by concatenating fragmented string arrays to hide...

Malicious code in tinkoff-statist-browser-typed-client-mb.product.tgeofencing (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 471fb9b5c8d45abc59ffda97063561b4882d28109c9959c717fbcd0d9f25c00d On require of this package, index.js loads platform.js which assembles remote hostnames at runtime by concatenating fragmented string arrays to hide...

Malicious code in tailwind-hide-scrollbar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb0348430af0110be6ac537a38b5bb98983ec6b6f8f1474778ff16e4a4f4e8d8 dist/index.js appends an evalatob'...' payload after the legitimate export default scrollbarHide; line. The decoded payload queries Ethereum RPC...

SUSE CVE-2026-64348

In the Linux kernel, the following vulnerability has been resolved: usb: free iso schedules on failed submit EHCI and FOTG210 isochronous submits build an ehciisosched before linking the URB to the endpoint queue, and keep the staged schedule in urb-hcpriv until isostreamschedule and the link...

EUVD-2026-48892

In the Linux kernel, the following vulnerability has been resolved: usb: free iso schedules on failed submit EHCI and FOTG210 isochronous submits build an ehciisosched before linking the URB to the endpoint queue, and keep the staged schedule in urb-hcpriv until isostreamschedule and the link...

CVE-2026-64348 usb: free iso schedules on failed submit

In the Linux kernel, the following vulnerability has been resolved: usb: free iso schedules on failed submit EHCI and FOTG210 isochronous submits build an ehciisosched before linking the URB to the endpoint queue, and keep the staged schedule in urb-hcpriv until isostreamschedule and the link...

PT-2026-64569

In the Linux kernel, the following vulnerability has been resolved: usb: free iso schedules on failed submit EHCI and FOTG210 isochronous submits build an ehci iso sched before linking the URB to the endpoint queue, and keep the staged schedule in urb-hcpriv until iso stream schedule and the link...

Malicious code in nordpass (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9df6f21fababcd99ba522d380a0729d35aa4ff44ee2f6612fe75b906da844aee Package name impersonates the NordPass password-manager product while presenting itself as 'A simple authentication module.' The package.json...