RvbbitSafe

RvbbitSafe: La Pesadilla del Hacker – Una Arquitectura Anti-Ransomware de Seis Fortalezas para Windows 🛡️ Descripción general RvbbitSafe es un prototipo de investigación que demuestra un cambio de paradigma en la defensa contra ransomware. Es una fortaleza activa y multicapa que combina...

kratosminifilter

🛡️ Kratos Minifilter — Windows 内核级反勒索软件驱动程序 防御性安全研究项目 — 用 C++ 开发的 Windows 微过滤器驱动程序，用于在内核态 Ring 0 实时检测和消除勒索软件。 📋 目录 概述 架构 检测机制 基于指纹的黑名单 安装 配置 限制 法律警告 概述 Kratos Kratos.sys 是一个 Windows 微过滤器驱动程序，通过筛选器管理器 fltmgr.sys 运行在海拔 425342 （反病毒层级）。与基于静态签名的防病毒解决方案不同，Kratos 采用纯行为 方法： 无签名数据库 — 检测未知勒索软件 内核模式 —...

CVE-2026-5966

ThreatSonar Anti-Ransomware developed by TeamT5 has an Arbitrary File Deletion vulnerability. Authenticated remote attackers with web access can exploit Path Traversal to delete arbitrary files on the system...

CVE-2026-5967

ThreatSonar Anti-Ransomware (TeamT5) is affected by a Privilege Escalation vulnerability. The description states that authenticated remote attackers with shell access can inject OS commands and execute them with root privileges, indicating a post-authentication, command-injection path that could ...

CVE-2026-5966

ThreatSonar Anti-Ransomware developed by TeamT5 has an Arbitrary File Deletion vulnerability. Authenticated remote attackers with web access can exploit Path Traversal to delete arbitrary files on the system...

CVE-2026-5966 TeamT5｜ThreatSonar Anti-Ransomware - Arbitrary File Deletion

ThreatSonar Anti-Ransomware developed by TeamT5 has an Arbitrary File Deletion vulnerability. Authenticated remote attackers with web access can exploit Path Traversal to delete arbitrary files on the system...

PT-2026-33732

Name of the Vulnerable Software and Affected Versions ThreatSonar Anti-Ransomware versions prior to 4.0.0 Description Authenticated remote attackers with shell access can inject and execute OS commands with root privileges. This issue involves an OS command injection in an unknown function...

CISA Flags Four Security Flaws Under Active Exploitation in Latest KEV Update

The U.S. Cybersecurity and Infrastructure Security Agency CISA on Tuesday added four security flaws to its Known Exploited Vulnerabilities KEV catalog, citing evidence of active exploitation in the wild. The list of vulnerabilities is as follows - CVE-2026-2441 CVSS score: 8.8 - A use-after-free...

Hackers Dox ICE, DHS, DOJ, and FBI Officials

Plus: A secret FBI anti-ransomware task force gets exposed, the mystery of the CIA’s Kryptos sculpture is finally solved, North Koreans busted hiding malware in the Ethereum blockchain, and more...

EUVD-2020-27176

Malware in sbrugna...

EUVD-2020-30270

Malware in sbrugna...

EUVD-2020-21336

Malware in sbrugna...

EUVD-2020-27177

Malware in sbrugna...

EUVD-2025-15660

Malicious code in bioql PyPI...

EUVD-2024-48579

Malicious code in bioql PyPI...

CVE-2025-7145

ThreatSonar Anti-Ransomware developed by TeamT5 has an OS Command Injection vulnerability, allowing remote attackers with product platform intermediate privileges to inject arbitrary OS commands and execute them on the server, thereby gaining administrative access to the remote host...

CVE-2025-7145 TeamT5｜ThreatSonar Anti-Ransomware - OS Command Injection

ThreatSonar Anti-Ransomware developed by TeamT5 has an OS Command Injection vulnerability, allowing remote attackers with product platform intermediate privileges to inject arbitrary OS commands and execute them on the server, thereby gaining administrative access to the remote host...

CVE-2025-7145

CVE-2025-7145 concerns ThreatSonar Anti-Ransomware from TeamT5. The vulnerability is described as an OS Command Injection that allows remote attackers with intermediate privileges on the affected product to inject and execute arbitrary OS commands on the server, potentially gaining administrative...

PT-2025-28118 · Unknown · Threatsonar Anti-Ransomware

Name of the Vulnerable Software and Affected Versions: ThreatSonar Anti-Ransomware affected versions not specified Description: The issue allows remote attackers with intermediate privileges to inject arbitrary OS commands and execute them on the server, gaining administrative access to the remot...

RansomLord NG Anti-Ransomware Exploit Tool 1.0

RansomLord is a proof-of-concept tool that automates the creation of PE files, used to compromise ransomware pre-encryption. This tool uses dll hijacking to defeat ransomware by placing PE files in the x32 or x64 directories where the program is run from. This is the NG version that currently...