83 matches found
pe_to_shellcode
petoshellcode يقوم بتحويل PE بحيث يمكن حقنه مثل shellcode عادي. في نفس الوقت، يظل الملف الناتج PE صالحًا. يدعم كلاً من PEs 32 بت و 64 بت المؤلفون:@hasherezade و @hh86 الهدف الهدف من هذا المشروع هو توفير إمكانية إنشاء ملفات PE يمكن حقنها بأقل جهد. هو مستوحى من ReflectiveDLLInjection الخاص بـ Steph...
CVE-2025-29927-Sigma-Rule
Rapport CVE-2025-29927 Présentation CVE-2025-29927 est une vulnérabilité de sécurité dans le middleware Next.js, permettant à des attaquants de contourner l'authentification en modifiant des en-têtes HTTP spécifiques. Exploitation Les attaquants peuvent envoyer une requête avec l'en-tête...
CVE-2023-35813
CVE-2023-35813 CVE-2023-35813 est une preuve de concept utilisée pour déterminer si une instance de Sitecore est vulnérable en analysant un en-tête de réponse serveur pour une modification. Fabriqué avec amour par heretic 3...
PYSEC-2026-3957
opensslencrypt versions before 1.4.9 fail to authenticate recovery-slot presence in envelope-format encrypted files, allowing attackers to remove recovery slots without re-encrypting the payload. Attackers can modify the file header to delete recovery-slot fields and bypass authentication, silent...
CVE-2026-81680
opensslencrypt versions before 1.4.9 fail to authenticate recovery-slot presence in envelope-format encrypted files, allowing attackers to remove recovery slots without re-encrypting the payload. Attackers can modify the file header to delete recovery-slot fields and bypass authentication, silent...
CVE-2026-81680 openssl_encrypt before 1.4.9 Authentication Bypass via Recovery Slot Removal
opensslencrypt versions before 1.4.9 fail to authenticate recovery-slot presence in envelope-format encrypted files, allowing attackers to remove recovery slots without re-encrypting the payload. Attackers can modify the file header to delete recovery-slot fields and bypass authentication, silent...
CVE-2026-81680 openssl_encrypt before 1.4.9 Authentication Bypass via Recovery Slot Removal
opensslencrypt versions before 1.4.9 fail to authenticate recovery-slot presence in envelope-format encrypted files, allowing attackers to remove recovery slots without re-encrypting the payload. Attackers can modify the file header to delete recovery-slot fields and bypass authentication, silent...
EUVD-2026-67036
opensslencrypt versions before 1.4.9 fail to authenticate recovery-slot presence in envelope-format encrypted files, allowing attackers to remove recovery slots without re-encrypting the payload. Attackers can modify the file header to delete recovery-slot fields and bypass authentication, silent...
CVE-2026-81680
openssl_encrypt versions before 1.4.9 fail to authenticate recovery-slot presence in envelope-format encrypted files. An attacker with write access to the file header can delete recovery-slot fields and bypass authentication without re-encrypting the payload, silently removing recovery paths the ...
Security Bulletin: IBM Event Streams is vulnerable to unintended response header modification
Summary IBM Event Streams is vulnerable to unintended response header modification due to a flaw in the on-headers module CVE-2025-7339 Vulnerability Details CVEID:CVE-2025-7339 DESCRIPTION: on-headers is a node.js middleware for listening to when a response writes headers. A bug in on-headers...
CVE-2026-22779
BlackSheep is an asynchronous web framework to build event based web applications with Python. Prior to 2.4.6, the HTTP Client implementation in BlackSheep is vulnerable to CRLF injection. Missing headers validation makes it possible for an attacker to modify the HTTP requests e.g. insert a new...
CVE-2025-23191
Cached values belonging to the SAP OData endpoint in SAP Fiori for SAP ERP could be poisoned by modifying the Host header value in an HTTP GET request. An attacker could alter the atom:link values in the returned metadata redirecting them from the SAP server to a malicious link set by the attacke...
Security Bulletin: IBM DataPower Gateway vulnerable to Denial of Service.
Summary The CVE may result in headers being modified in internal NodeJS traffic which could lead to a denial of service. Vulnerability Details CVEID:CVE-2025-7339 DESCRIPTION: on-headers is a node.js middleware for listening to when a response writes headers. A bug in on-headers versions 1.1.0 ma...
EUVD-2006-0638
Malware in sbrugna...
EUVD-2021-15624
Malware in sbrugna...
EUVD-2021-10786
Malware in sbrugna...
EUVD-2018-3184
Malware in sbrugna...
EUVD-2013-1916
Malware in sbrugna...