donut

Current version: v1.1 Table of contents 1. Introduction 2. How It Works 3. Building 4. Usage 5. Subprojects 6. Developing with Donut 7. Questions and Discussions 8. Disclaimer 1. Introduction Donut is a position-independent code that enables in-memory execution of VBScript, JScript, EXE, DLL file...

LittleCorporal

LittleCorporal LittleCorporal: C 자동화된 Maldoc 생성기 C:\LittleCorporal\bin\ReleaseLittleCorporal.exe C:\beacon.bin explorer.exe . . . . | | ||/ |/ || | \ \ | | | | | \ \ \ | / / \ / / \ \ \ / \ \ \ | | | || || | | | | |\ /\ \ | / | | // | | | ||| || |/\ \ //|| | / /|| // / / / || / / \ / o...

Fritter

Fritter Donut의 교묘한 사촌. Fritter는 TheWover와 Odzhan의 Donut 셸코드 생성기를 대폭 수정한 포크입니다. VBScript, JScript, EXE, DLL 및 .NET 어셈블리를 메모리 내에서 실행하기 위한 위치 독립적 셸코드를 생성하며, 회피와 시그니처 저항에 중점을 둡니다. 코드베이스는 x64 전용입니다. 달라진 점 많습니다. Fritter는 일반적으로 필요하지 않은 기능을 제거하고 수년간 시그니처가 잘 알려진 내부 구조를 교체합니다. 암호화, 압축, 해싱 및 API 해석 계층은 다른 여...

donut-decryptor

donutdecryptor donut 바이너리 난독화 도구를 위한 구성 및 모듈 추출기 설명 donut-decryptor는 파일에서 donut 난독화 도구의 로더 셸코드의 알려진 시그니처를 검사합니다. 발견되면 셸코드를 파싱하여 바이너리에 내장된 DONUTINSTANCE 구조체를 찾아 복호화하고 추출한 뒤, 관련 구성 데이터를 보고합니다. 바이너리에 DONUTMODULE이 존재하면 이를 복호화하여 디스크에 덤프합니다. 설치 프로젝트 루트 디렉터리로 이동한 후 pip를 사용하여 donut-decryptor를 설치할 수 있습니다:...

CVE-2026-93296

MISP contains a stored cross-site scripting XSS vulnerability in the Overmind theme's statistics views. The event General card and the server/feed preview card constructed donut chart legend labels by directly concatenating object name or category keys into an innerHTML string without...

CVE-2026-93296: Improper Neutralization of Input During Web Page Generation

MISP contains a stored cross-site scripting XSS vulnerability in the Overmind theme's statistics views. The event General card and the server/feed preview card constructed donut chart legend labels by directly concatenating object name or category keys into an innerHTML string without...

PYSEC-2026-1977 Transformers is vulnerable to ReDoS attack through its DonutProcessor class

A Regular Expression Denial of Service ReDoS vulnerability was discovered in the Hugging Face Transformers library, specifically within the DonutProcessor class's token2json method. This vulnerability affects versions 4.51.3 and earlier, and is fixed in version 4.52.1. The issue arises from the...

Transformers is vulnerable to ReDoS attack through its DonutProcessor class

A Regular Expression Denial of Service ReDoS vulnerability was discovered in the Hugging Face Transformers library, specifically within the DonutProcessor class's token2json method. This vulnerability affects versions 4.51.3 and earlier, and is fixed in version 4.52.1. The issue arises from the...

Security Bulletin: IBM Maximo Application Suite - Monitor Component uses transformers-4.51.3-py3-none-any.whl which is vulnerable to CVE-2025-3933.

Summary IBM Maximo Application Suite - Monitor Component uses transformers-4.51.3-py3-none-any.whl which is vulnerable to CVE-2025-3933. This bulletin contains information regarding the vulnerability and its fixture. Vulnerability Details CVEID:CVE-2025-3933 DESCRIPTION: A Regular Expression Deni...

Malicious code in donut-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49baf6523329832c4696b711cbaab5fad85e5c152f15849e4da1c323535a28ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101735 Malicious code in donut-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49baf6523329832c4696b711cbaab5fad85e5c152f15849e4da1c323535a28ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-77064

Malicious code in donut-notthedevs npm...

CVE-2025-11820 Graphina – Elementor Charts and Graphs <= 3.1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Chart Widgets

The Graphina – Elementor Charts and Graphs plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple chart widgets in all versions up to, and including, 3.1.8 due to insufficient input sanitization and output escaping on data attributes. This makes it possible for authenticat...

EUVD-2014-5596

Malware in sbrugna...

MAL-2025-6324 Malicious code in vis-donut-chart (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in vis-donut-chart (npm)

The package communicates with a domain associated with malicious activity...

GHSA-37MW-44QP-F5JM Transformers is vulnerable to ReDoS attack through its DonutProcessor class

A Regular Expression Denial of Service ReDoS vulnerability was discovered in the Hugging Face Transformers library, specifically within the DonutProcessor class's token2json method. This vulnerability affects versions 4.51.3 and earlier, and is fixed in version 4.52.1. The issue arises from the...

Regular Expression Denial of Service (ReDoS)

Overview transformers is a State-of-the-art Machine Learning for JAX, PyTorch and TensorFlow Affected versions of this package are vulnerable to Regular Expression Denial of Service ReDoS via the token2json function in the processingdonut module. An attacker can cause high CPU usage and potential...

Void Banshee APT Exploits Microsoft MHTML Flaw to Spread Atlantida Stealer

An advanced persistent threat APT group called Void Banshee has been observed exploiting a recently disclosed security flaw in the Microsoft MHTML browser engine as a zero-day to deliver an information stealer called Atlantida. Cybersecurity firm Trend Micro, which observed the activity in mid-Ma...

Israeli Entities Targeted by Cyberattack Using Donut and Sliver Frameworks

Cybersecurity researchers have discovered an attack campaign that targets various Israeli entities with publicly-available frameworks like Donut and Sliver. The campaign, believed to be highly targeted in nature, "leverage target-specific infrastructure and custom WordPress websites as a payload...