81 matches found
kratosminifilter
๐ก๏ธ Kratos Minifilter โ ะัะฐะนะฒะตั ัะดัะฐ Windows ะดะปั ะทะฐัะธัั ะพั ะฟัะพะณัะฐะผะผ-ะฒัะผะพะณะฐัะตะปะตะน ะัะพะตะบั ะธััะปะตะดะพะฒะฐัะตะปััะบะพะน ัะฐะฑะพัั ะฒ ะพะฑะปะฐััะธ ะทะฐัะธัะฝะพะน ะฑะตะทะพะฟะฐัะฝะพััะธ โ ะดัะฐะนะฒะตั-ะผะธะฝะธัะธะปััั Windows, ัะฐะทัะฐะฑะพัะฐะฝะฝัะน ะฝะฐ C++ ะดะปั ะพะฑะฝะฐััะถะตะฝะธั ะธ ะฝะตะนััะฐะปะธะทะฐัะธะธ ะฟัะพะณัะฐะผะผ-ะฒัะผะพะณะฐัะตะปะตะน ะฒ ัะตะฐะปัะฝะพะผ ะฒัะตะผะตะฝะธ ะฝะฐ ััะพะฒะฝะต ัะดัะฐ Ring 0. ๐...
RvbbitSafe
RvbbitSafe: ะะพัะผะฐั ั ะฐะบะตัะฐ โ ะจะตััะธะบัะตะฟะพััะฝะฐั ะฐัั ะธัะตะบัััะฐ ะทะฐัะธัั ะพั ะฟัะพะณัะฐะผะผ-ะฒัะผะพะณะฐัะตะปะตะน ะดะปั Windows ๐ก๏ธ ะะฑะทะพั RvbbitSafe โ ััะพ ะธััะปะตะดะพะฒะฐัะตะปััะบะธะน ะฟัะพัะพัะธะฟ, ะดะตะผะพะฝัััะธััััะธะน ัะผะตะฝั ะฟะฐัะฐะดะธะณะผั ะฒ ะทะฐัะธัะต ะพั ะฟัะพะณัะฐะผะผ-ะฒัะผะพะณะฐัะตะปะตะน. ะญัะพ ะฐะบัะธะฒะฝะฐั ะผะฝะพะณะพััะพะฒะฝะตะฒะฐั ะบัะตะฟะพััั, ัะพัะตัะฐััะฐั ะฐะฟะฟะฐัะฐัะฝัั ะฒะธัััะฐะปะธะทะฐัะธั, ะพะฑะผะฐ...
RansomLord
RansomLord NG v1.0 ์ํฐ๋์ฌ์จ์ด ์ต์คํ๋ก์ ๋๊ตฌ ๋์ฌ์จ์ด ์ฌ์ ์ํธํ๋ฅผ ์ ์ฉํ๋ PE ํ์ผ ์์ฑ์ ์๋ํํ๋ ๊ฐ๋ ์ฆ๋ช ๋๊ตฌ์ ๋๋ค. ์ ๋ฐ์ดํธ๋ NG ๋ฒ์ : https://github.com/malvuln/RansomLord/releases/tag/v1.0 ์ธ์ด: C SHA256: ACB0C4EEAB421761B6C6E70B0FA1D20CE08247525641A7CD03B33A6EE3D35D8A ๋ฌด๋ ฅํ ๊ธฐ๋ฅ PoC ์์ NG v1.0 2025:...
detect-ransomware-filenames
๋์ฌ์จ์ด ํ์ผ ์ด๋ฆ ํ์ง ์ด ํจํค์ง/์คํฌ๋ฆฝํธ๋ SMB ํธ๋์ญ์ ์ ๊ฐ์ํ์ฌ ๋์ฌ์จ์ด๊ฐ ์ฌ์ฉํ๋ ๊ฒ์ผ๋ก ์๋ ค์ง ์ ํด ํ์ผ ์ด๋ฆ์ ์ฐพ์ต๋๋ค. ์ด๋ ์ฌ๊ธฐ์์ ์ ์ง ๊ด๋ฆฌ๋๋ ์ํฐ๋์ฌ์จ์ด ํ์ผ ์์คํ ๋ฆฌ์์ค ๊ด๋ฆฌ์ ๋ชฉ๋กAnti-Ransomware File System Resource Manager Lists์ ๊ธฐ๋ฐ์ผ๋ก ํฉ๋๋ค. ์ฌ์ฉ ๋ฐฉ๋ฒ ๋ชฉ๋ก์ ์ฃผ๊ธฐ์ ์ผ๋ก ์๋ก ๊ณ ์น ์ ์๋๋ก Python ์คํฌ๋ฆฝํธdownload-list.py๊ฐ ํฌํจ๋์ด ์์ต๋๋ค. ๊ธฐ๋ณธ์ ์ผ๋ก ์ ํ์ผ์ inputs/ ํด๋์ ๋ค์ด๋ก๋ํฉ๋๋ค. ์ค์น ์ด ํจํค์ง๋ zkg๋ฅผ ํตํด...
CVE-2026-5966
ThreatSonar Anti-Ransomware developed by TeamT5 has an Arbitrary File Deletion vulnerability. Authenticated remote attackers with web access can exploit Path Traversal to delete arbitrary files on the system...
CVE-2026-5967
ThreatSonar Anti-Ransomware (TeamT5) is affected by a Privilege Escalation vulnerability. The description states that authenticated remote attackers with shell access can inject OS commands and execute them with root privileges, indicating a post-authentication, command-injection path that could ...
CVE-2026-5966
ThreatSonar Anti-Ransomware developed by TeamT5 has an Arbitrary File Deletion vulnerability. Authenticated remote attackers with web access can exploit Path Traversal to delete arbitrary files on the system...
CVE-2026-5966 TeamT5๏ฝThreatSonar Anti-Ransomware - Arbitrary File Deletion
ThreatSonar Anti-Ransomware developed by TeamT5 has an Arbitrary File Deletion vulnerability. Authenticated remote attackers with web access can exploit Path Traversal to delete arbitrary files on the system...
PT-2026-33732
Name of the Vulnerable Software and Affected Versions ThreatSonar Anti-Ransomware versions prior to 4.0.0 Description Authenticated remote attackers with shell access can inject and execute OS commands with root privileges. This issue involves an OS command injection in an unknown function...
CISA Flags Four Security Flaws Under Active Exploitation in Latest KEV Update
The U.S. Cybersecurity and Infrastructure Security Agency CISA on Tuesday added four security flaws to its Known Exploited Vulnerabilities KEV catalog, citing evidence of active exploitation in the wild. The list of vulnerabilities is as follows - CVE-2026-2441 CVSS score: 8.8 - A use-after-free...
Hackers Dox ICE, DHS, DOJ, and FBI Officials
Plus: A secret FBI anti-ransomware task force gets exposed, the mystery of the CIAโs Kryptos sculpture is finally solved, North Koreans busted hiding malware in the Ethereum blockchain, and more...
EUVD-2020-27176
Malware in sbrugna...
EUVD-2020-30270
Malware in sbrugna...
EUVD-2020-21336
Malware in sbrugna...
EUVD-2020-27177
Malware in sbrugna...
EUVD-2025-15660
Malicious code in bioql PyPI...
EUVD-2024-48579
Malicious code in bioql PyPI...
CVE-2025-7145
ThreatSonar Anti-Ransomware developed by TeamT5 has an OS Command Injection vulnerability, allowing remote attackers with product platform intermediate privileges to inject arbitrary OS commands and execute them on the server, thereby gaining administrative access to the remote host...
CVE-2025-7145
CVE-2025-7145 concerns ThreatSonar Anti-Ransomware from TeamT5. The vulnerability is described as an OS Command Injection that allows remote attackers with intermediate privileges on the affected product to inject and execute arbitrary OS commands on the server, potentially gaining administrative...
CVE-2025-7145 TeamT5๏ฝThreatSonar Anti-Ransomware - OS Command Injection
ThreatSonar Anti-Ransomware developed by TeamT5 has an OS Command Injection vulnerability, allowing remote attackers with product platform intermediate privileges to inject arbitrary OS commands and execute them on the server, thereby gaining administrative access to the remote host...