malwarescanner

MalwareScanner 基于哈希比对的非常基础的恶意软件扫描器 有时在应急响应中可能需要这个。 如果你在响应中发现新的或可疑的文件，你想检查这些文件在系统中的位置。那么你可能需要这样的工具。这是一个演示版本，不完整。你需要修改代码，使其成为你自己的。 如果有任何变更需求或需要额外功能，请告知。 如果它有帮助，请点"星标"。这样它会继续改进。 功能特性 基于哈希的文件检查（免费恶意软件哈希） 扫描包括子目录 多线程任务 定义要扫描的文件扩展名 定义不扫描的目录 易于将扫描日志附加到 SIEM（例如 Splunk） 易于处理和可修改的代码/函数结构（如果你感兴趣） v1.0.5...

mig

MIG: Mozilla InvestiGator MIG is Mozilla's platform for investigative surgery of remote endpoints. ⚠️ Deprecation Notice ⚠️ Mozilla is no longer maintaining the Mozilla InvestiGator MIG project. Mozilla is also no longer making use of this code internally. You are welcome to use this code as is...

CVE-2025-62000 BullWall Ransomware Containment incomplete file inspection

BullWall Ransomware Containment may not always detect an encrypted file. This issue affects a specific file inspection method that evaluates file content based on header bytes. An authenticated attacker could encrypt files, preserving the first four bytes and preventing this particular method fro...

CVE-2025-62000 BullWall Ransomware Containment incomplete file inspection

BullWall Ransomware Containment may not always detect an encrypted file. This issue affects a specific file inspection method that evaluates file content based on header bytes. An authenticated attacker could encrypt files, preserving the first four bytes and preventing this particular method fro...

CVE-2025-62000

BullWall Ransomware Containment has an incomplete file-inspection mechanism that relies on header-byte evaluation. An authenticated attacker could encrypt a file while leaving the first four bytes unchanged, bypassing this specific detection method. The issue is limited: BullWall also employs add...

PT-2025-52338

Name of the Vulnerable Software and Affected Versions BullWall Ransomware Containment versions 4.6.0.0 through 4.6.1.4 Description BullWall Ransomware Containment does not fully inspect files to identify ransomware. An attacker with valid credentials can bypass detection by encrypting a file whil...

EUVD-2019-4292

Malware in sbrugna...

EUVD-2022-25988

Malicious code in bioql PyPI...

EUVD-2025-6194

Malicious code in bioql PyPI...

CVE-2025-47778

Sulu is an open-source PHP content management system based on the Symfony framework. Starting in versions 2.5.21, 2.6.5, and 3.0.0-alpha1, an admin user can upload SVG which may load external data via XML DOM library. This can be used for insecure XML External Entity References. The problem has...

Design/Logic Flaw

The Image Optimizer by 10web WordPress plugin before 1.0.27 does not sanitize the dir parameter when handling the getsubdirs ajax action, allowing a high privileged users such as admins to inspect names of files and directories outside of the sites root...

Path traversal

Git, a revision control system, is vulnerable to path traversal prior to versions 2.39.2, 2.38.4, 2.37.6, 2.36.5, 2.35.7, 2.34.7, 2.33.7, 2.32.6, 2.31.7, and 2.30.8. By feeding a crafted input to git apply, a path outside the working tree can be overwritten as the user who is running git apply. A...

Cisco Umbrella Information Disclosure Vulnerability

Cisco Umbrella is a cloud security platform from Cisco. Cisco Umbrella Secure Web Gateway has a security vulnerability caused by an insufficient restriction in the file inspection feature, which can be exploited by attackers to bypass the file inspection feature...

CVE-2022-20738

A vulnerability in the Cisco Umbrella Secure Web Gateway service could allow an unauthenticated, remote attacker to bypass the file inspection feature. This vulnerability is due to insufficient restrictions in the file inspection feature. An attacker could exploit this vulnerability by downloadin...

Design/Logic Flaw

A vulnerability in the Cisco Umbrella Secure Web Gateway service could allow an unauthenticated, remote attacker to bypass the file inspection feature. This vulnerability is due to insufficient restrictions in the file inspection feature. An attacker could exploit this vulnerability by downloadin...

CVE-2022-20738 Cisco Umbrella Secure Web Gateway File Inspection Bypass Vulnerability

A vulnerability in the Cisco Umbrella Secure Web Gateway service could allow an unauthenticated, remote attacker to bypass the file inspection feature. This vulnerability is due to insufficient restrictions in the file inspection feature. An attacker could exploit this vulnerability by downloadin...

CVE-2022-20738 Cisco Umbrella Secure Web Gateway File Inspection Bypass Vulnerability

A vulnerability in the Cisco Umbrella Secure Web Gateway service could allow an unauthenticated, remote attacker to bypass the file inspection feature. This vulnerability is due to insufficient restrictions in the file inspection feature. An attacker could exploit this vulnerability by downloadin...

CVE-2022-20738

CVE-2022-20738 affects Cisco Umbrella Secure Web Gateway; vulnerability in the file inspection feature due to insufficient restrictions allows an unauthenticated attacker to bypass file inspection and download a malicious payload. Documented impact ranges from partial to high confidentiality/inte...

Cisco Umbrella 安全漏洞

Cisco Umbrella is a cloud security platform from Cisco. Cisco Umbrella Secure Web Gateway has a security vulnerability caused by an insufficient restriction in the file inspection feature, which can be exploited by attackers to bypass the file inspection feature...

CVE-2022-20738

A vulnerability in the Cisco Umbrella Secure Web Gateway service could allow an unauthenticated, remote attacker to bypass the file inspection feature. This vulnerability is due to insufficient restrictions in the file inspection feature. An attacker could exploit this vulnerability by downloadin...