herpaderping

Process Herpaderping png.HerpaderpIcon Process Herpaderping is a method of obscuring the intentions of a process by modifying the content on disk after the image has been mapped. This results in curious behavior by security products and the OS itself. !png.mimioogle !gif.SurivDemo Summary...

CVE-2015-1769

CVE-2015-1769 CVE-2015-1769에 대한 PoC CVE-2015-1769를 재현하기 위한 VHD 파일입니다. VHD에는 실제 페이로드는 포함되어 있지 않으며, 오직 notepad.exe만 있습니다. 마운트 시 최신 패치가 설치되어 있으면 시스템 로그에서 차단 오류가 보고되는지 확인합니다. 배치 스크립트는 취약점을 트리거하는 심볼릭 링크가 생성되는 방법을 보여줍니다. 동일한 메커니즘을 사용하여 HDD 또는 USB 드라이브를 수정할 수 있습니다...

Exploit for CVE-2026-31431

copy-fail-go Go port of grenkocahttps://gist.github.com/gr...

maxminddb's `Reader::open_mmap` unsoundly marks unsafe memmap operation as safe

maxminddb prior to version 0.27 declared Reader::openmmap as safe despite wrapping an inherently unsafe memmap2 operation with no extra step done to guarantee safety. This could have led to undefined behaviour if the file were to be modified on disk while the memory map was still active...

EUVD-2020-4739

Malware in sbrugna...

EUVD-2017-16012

Malware in sbrugna...

EUVD-2022-51058

Malicious code in bioql PyPI...

CVE-2022-48359

The recovery mode for updates has a vulnerability that causes arbitrary disk modification. Successful exploitation of this vulnerability may affect confidentiality...

CVE-2020-12427

The Western Digital WD Discovery application before 3.8.229 for MyCloud Home on Windows and macOS is vulnerable to CSRF, with impacts such as stealing data, modifying disk contents, or exhausting disk space...

SUSE CVE-2025-30219

RabbitMQ is a messaging and streaming broker. Versions prior to 4.0.3 are vulnerable to a sophisticated attack that could modify virtual host name on disk and then make it unrecoverable with other on disk file modifications can lead to arbitrary JavaScript code execution in the browsers of...

UBUNTU-CVE-2025-30219

RabbitMQ is a messaging and streaming broker. Versions prior to 4.0.3 are vulnerable to a sophisticated attack that could modify virtual host name on disk and then make it unrecoverable with other on disk file modifications can lead to arbitrary JavaScript code execution in the browsers of...

CVE-2022-48359

The recovery mode for updates has a vulnerability that causes arbitrary disk modification. Successful exploitation of this vulnerability may affect confidentiality...

CVE-2022-48359

The recovery mode for updates has a vulnerability that causes arbitrary disk modification. Successful exploitation of this vulnerability may affect confidentiality...

CVE-2022-48359: Improperly Controlled Modification of Dynamically-Determined Object Attributes

The recovery mode for updates has a vulnerability that causes arbitrary disk modification. Successful exploitation of this vulnerability may affect confidentiality...

CVE-2022-48359

CVE-2022-48359 describes a vulnerability in the recovery mode for updates that can lead to arbitrary disk modification and potential confidentiality impact. Public sources (NVD) assign CVSS v3.1: Network attack vector, low attack complexity, no privileges required, user interaction not needed, wi...

CVE-2022-48359

The recovery mode for updates has a vulnerability that causes arbitrary disk modification. Successful exploitation of this vulnerability may affect confidentiality...

PT-2023-15736 · Huawei · Emui +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The recovery mode for updates contains a flaw that allows for arbitrary disk modification, potentially impacting confidentiality. There is no informatio...

Huawei HarmonyOS 安全漏洞

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. Huawei HarmonyOS suffers from a security vulnerability that originates from a disk that can be arbitrarily modified. An attacker could exploit the...

Western Digital WD Discovery Cross-Site Request Forgery Vulnerability

Western Digital MyCloud Home is a personal storage device from Western Digital.Western Digital WD Discovery is a remote connectivity management tool for Western Digital personal storage devices. A cross-site request forgery vulnerability exists in Western Digital WD Discovery versions prior to...

CVE-2020-12427

The Western Digital WD Discovery application before 3.8.229 for MyCloud Home on Windows and macOS is vulnerable to CSRF, with impacts such as stealing data, modifying disk contents, or exhausting disk space...