306 matches found
CVE-2019-8601
利用 CVE-2019-8601 这是一个针对 WebKit 漏洞的利用代码，该漏洞最初由 Fluoroacetate 在温哥华的 pwn2own 比赛中发现。虽然这个漏洞不是我发现的，但我编写这个利用代码是为了练习我的漏洞利用开发技能。该漏洞的原始分析文章 在此，来自 Zero Day Initiative。虽然这篇分析文章写得很好，并且对我理解漏洞非常有帮助，但它是从验证漏洞的角度出发的。我发现，在从头开始编写利用代码时，一些关键细节是缺失的，我希望填补 ZDI 分析文章中遗漏的一些空白，并获得如何从头设计一个复杂利用代码的实用技能。 利用步骤 以下步骤概述了在...
Malicious Package
Overview ecosystem-butterfly-zeu344-project is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and...
Malicious Package
Overview aroma-butterfly-dtz487-project is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and thi...
Our PR team awarded me the “The Best Positive Speaker 2025” metal pin for public speaking, articles, and media commentary
Our PR team awarded me the “The Best Positive Speaker 2025” metal pin for public speaking, articles, and media commentary. Huge thanks to my colleagues for this! I’m very pleased. 😇 The collection is growing. 😉 This time, the pin is styled like the Friends sitcom logo. It’s made of metal, coated...
CVE-2023-40735
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Cavo – Connecting for a Safer World BUTTERFLY BUTTON Architecture flaw allows loss of plausible deniability and confidentiality.This issue affects BUTTERFLY BUTTON: As of 2023-08-21...
EUVD-2025-117361
Malicious code in fun-coffee-butterfly npm...
EUVD-2025-116976
Malicious code in yeasty-tomato-butterfly npm...
MAL-2025-135488 Malicious code in marked_butterfly_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c683dcaeb253e3199ba1d2e030aefb51f161aab335186936dfd012de9d9ee932 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in alternative_butterfly_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d1ed1afa187900d3daa43437e54a7c69c3ae860e2b50d17a19a5c89f36f8aa4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in breakable_butterfly_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 795236d9fc3c7f7a3d2aa1062b41ae1a56555087d05bb4b9af0b7726da13a192 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-100988
Malicious code in breakablebutterflyz3n npm...
EUVD-2025-100803
Malicious code in capitalistbutterflyz3n npm...
MAL-2025-125219 Malicious code in breakable_butterfly_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 795236d9fc3c7f7a3d2aa1062b41ae1a56555087d05bb4b9af0b7726da13a192 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-95117
Malicious code in shakybutterflyz3n npm...
EUVD-2025-95449
Malicious code in repulsivebutterflyz3n npm...
EUVD-2025-106032
Malicious code in communistbutterflyz3n npm...
EUVD-2025-105969
Malicious code in curiousbutterflyz3n npm...
MAL-2025-119364 Malicious code in delightful_butterfly_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector edb0be07af0701be6704834aac0d12c37b2c89541e27264df0fde30c8fe3a8f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-119271 Malicious code in communist_butterfly_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2945cdd8fe4dbb08cb70cb0a90d97079bbba7bfb8e90f278169d7084b4fc0d59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...