113 matches found
vaas
判定即服务 Verdict-as-a-Service 判定即服务 VaaS 是一项云服务，提供扫描文件以检测恶意软件及其他威胁的能力。它允许您仅用几行代码就能轻松地将恶意软件检测集成到您的应用程序中。您可以使用 VaaS 来保护任何需要交换或存储文件的场景，例如： 包含文件提交的上传表单 协作软件，如 Teams、Nextcloud 或 Slack 备份和分布式文件存储，如 Dropbox 或 OneDrive 只需极少的精力，您就可以检查文件、URL 或哈希值是否包含恶意内容。无需在本地安装任何反恶意软件产品。VaaS 开箱即用，通过 G DATA 云提供检测结果。您也可以选择在自己的...
sandfly-entropyscan
What is sandfly-entropyscan? sandfly-entropyscan is a utility to quickly scan files or running processes and report on their entropy measure of randomness and if they are a Linux/Unix ELF type executable. Some malware for Linux is packed or encrypted and shows very high entropy. This tool can...
fuckshell
Fuckshell Simple Webshell Scanner. Using, defined files with dictionary!...
Vxscan
Vxscan 2.0 English | 简体中文 python3写的综合扫描工具，主要用来敏感文件探测目录扫描与js泄露接口，WAF/CDN识别，端口扫描，指纹/服务识别，弱口令探测，POC扫描，SQL注入等功能。 Update 2019.10.31 目录扫描使用了uvloop+asyncio+aiohttp 修复了一堆BUG 404页面验证添加了更多逻辑 2019.9.20 删除了暴力破解模块，速度实在是太慢了 修复了端口扫描和目录扫描的一部分BUG 修复了生成html报告空白问题，主要是没有转义 2019.8.19 添加了禁止扫描gov.cn与edu.cn域名，程序检测到会立即终止...
inspec-log4j
inspec-log4j Este perfil escanea en busca de versiones vulnerables de archivos JAR de Log4j Core directamente en el sistema de archivos y embebidos en archivos WAR. Ejecutar el perfil localmente git clone https://github.com/trickyearlobe/inspec-log4j inspec exec inspec-log4j Ejecutar el perfil...
zeek-gozi-detector
Gozi Malware Detector This Zeek packages detects Gozi banking malware activity. Resources: The RAR files this package looks for were discussed in the following articles: https://unit42.paloaltonetworks.com/march-wireshark-gozi-answers/...
SUSE-SU-2026:21880-1 Security update for vim
This update for vim fixes the following issues - CVE-2026-42307: Prior to version 9.2.0383, an OS command injection vulnerability exists in the netrw standard plugin bundled with Vim bsc1264706. - CVE-2026-43961: Vimscript Code Injection in netrw NetrwMarkFile via crafted filename bsc1265349. -...
H4C-WEB
H4C-WEB !/bin/bash =======================================...
CVE-2026-31808
file-type detects the file type of a file, stream, or data. Prior to 21.3.1, a denial of service vulnerability exists in the ASF WMV/WMA file type detection parser. When parsing a crafted input where an ASF sub-header has a size field of zero, the parser enters an infinite loop. The payload value...
VIPSQLi
🔥 VIP SQLi Scanner - Professional Triage Tool REAL SQLi PEH...
EUVD-2002-0589
Malware in sbrugna...
EUVD-2003-0615
Malware in sbrugna...
EUVD-2009-0840
Malware in sbrugna...
EUVD-2020-30742
Malware in sbrugna...
Picklescan has a missing detection when calling built-in python profile.Profile.run
Summary Using profile.Profile.run, which is a built-in python library function to execute remote pickle file. Details The attack payload executes in the following steps: First, the attacker craft the payload by calling to profile.Profile.run function in reduce method Then when the victim after...
CVE-2020-9963
The issue was addressed with improved handling of icon caches. This issue is fixed in macOS Big Sur 11.0.1, iOS 14.0 and iPadOS 14.0. A malicious app may be able to determine the existence of files on the computer...
CVE-2002-2031
Internet Explorer 5.0, 5.0.1 and 5.5 with JavaScript execution enabled allows remote attackers to determine the existence of arbitrary files via a script tag with a src parameter that references a non-JavaScript file, then using the onError event handler to monitor the results...
CVE-2020-9295
FortiOS 6.2 running AV engine version 6.00142 and below, FortiOS 6.4 running AV engine version 6.00144 and below and FortiClient 6.2 running AV engine version 6.00137 and below may not immediately detect certain types of malformed or non-standard RAR archives, potentially containing malicious...
