Razi-Interactive/claude-project-scanner

PoC

Read-only safety scanner for Claude Code projects. Catches CVE-2025-59536, statusLine injection, prompt injection, and more.

view exploit source poc_in_githubauthor Razi-Interactivepublished 2026-04-30catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2025-59536US	high8.8	27.2% (98th)	Exploit	2025-10-03
Claude Code is an agentic coding tool. Versions before 1.0.111 were vulnerable to Code Injection due to a bug in the startup trust dialog implementation. Claude Code could be trick…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.