InjectProc

InjectProc Injeção de processo é um método muito popular para esconder comportamento malicioso de código e é amplamente utilizado por autores de malware. Existem várias técnicas comumente usadas: Injeção de DLL, substituição de processo também conhecido como process hollowing, injeção de hook e...

CVE-2026-60004

CVE-2026-60004 — Gitea Diffpatch Git हुक RCE बेयर क्लोन हुक इंजेक्शन → post-index-change → मनमाना कमांड निष्पादन अवलोकन CVE-2026-60004 एक गंभीर-स्तर CVSS 9.8 प्री-ऑथेंटिकेशन रिमोट कोड निष्पादन RCE भेद्यता है, जो Gitea और Forgejo सेल्फ-होस्टेड Git प्लेटफ़ॉर्म को प्रभावित करती है, विशेष रूप से...

Critical Gitea RCE Actively Exploited as Reported Attack Drops Miner-Like Payload

The U.S. Cybersecurity and Infrastructure Security Agency CISA on Tuesday warned of active exploitation efforts targeting a recently patched critical security flaw impacting Gitea. The vulnerability in question is CVE-2026-60004 CVSS score: 9.8, a case of remote code execution that allows an...

PRISM-AP

PRISM-AP परिचय: PRISM-AP एक स्वचालित वायरलेस RogueAP MITM हमला फ्रेमवर्क है। विशेषताएँ: स्थापित करने और उपयोग करने में आसान और पूर्ण रूप से स्वचालित MANA वाई-फाई हमले का उपयोग करके क्लाइंट कनेक्शन को लुभाता है bettercap के माध्यम से आंशिक HSTS बायपास सभी HTTP हेडर, कुकीज़ और URL को इंटरसेप्ट और...

agentic-ioc-scanner

agentic-ioc-scanner एजेंटिक AI कोडिंग टूल्स के लिए IOC स्कैनर — Mini Shai-Hulud, Gemini CLI RCE, Cursor CVE-2026-26268 और DPRK PromptMink का पता लगाता है। एक डिटेक्शन किट जो एजेंटिक AI कोडिंग सहायकों Claude Code, Gemini CLI, Cursor और आपके रिपॉजिटरी में वे जो निर्भरताएँ लाते हैं, उनके समझौते का प...

MemITM

O que é a ferramenta MemITM? A ferramenta MemITM Mem In The Middle foi desenvolvida para intercetar facilmente "mensagens" na memória de processos Windows. Desenvolvemos muitas ferramentas de interceção de memória personalizadas para capturar mensagens de rede antes da encriptação, ou mensagens...

EUVD-2026-65222

GitPython before 3.1.59 fails to safely re-serialize multi-line git-config values during write operations, corrupting dormant quoted values into injected directives like core.hooksPath. Attackers can craft config files with embedded newlines that become live git directives after any unrelated...

CVE-2026-60004-POC

CVE-2026-60004 — Gitea प्री-ऑथ रिमोट कोड एक्सीक्यूशन CVSS 9.8 root@kitploit: ┌──────────────────────────────────────────────────────────────┐ │ CVE-2026-60004 │ Gitea Pre-Auth RCE │ CVSS 9.8 CRIT │ │ diffpatch → git hook injection │ v1.17–1.27.0 affected │...

CVE-2026-60004-poc-gitea

CVE-2026-60004 प्रूफ-ऑफ-कॉन्सेप्ट PoC अवलोकन यह रिपॉज़िटरी CVE-2026-60004 के लिए एक प्रूफ-ऑफ-कॉन्सेप्ट टूल रखती है, जो diffpatch हुक इंजेक्शन तकनीक के माध्यम से कुछ Gitea संस्करणों को प्रभावित करने वाला एक प्रमाणित या प्री-ऑथ रिमोट कोड एक्ज़ीक्यूशन RCE वेक्टर है। मुख्य कार्यान्वयन एक एकल Go...

PT-2026-71451

Name of the Vulnerable Software and Affected Versions GitPython versions prior to 3.1.54 Description An incomplete denylist in unsafe git clone options omits the --template option, which allows for arbitrary command execution during clone operations. An attacker can provide a --template value...

Linux Distros Unpatched Vulnerability : CVE-2026-44244

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GitPython is a python library used to interact with Git repositories. Prior to version 3.1.49, GitConfigParser.setvalue passes values to Python's configparser...

CVE-2026-35585

File Browser is a file managing interface for uploading, deleting, previewing, renaming, and editing files within a specified directory. From 2.0.0 through 2.63.1, the hook system in File Browser — which executes administrator-defined shell commands on file events such as upload, rename, and dele...

EUVD-2024-16650

Malicious code in bioql PyPI...

EUVD-2024-16649

Malicious code in bioql PyPI...

CVE-2024-0867

The Email Log plugin for WordPress is vulnerable to Unauthenticated Hook Injection in all versions up to, and including, 2.4.8 via the checknonce function. This makes it possible for unauthenticated attackers to execute actions with hooks in WordPress under certain circumstances. The action the...

CVE-2024-0866

The Check & Log Email plugin for WordPress is vulnerable to Unauthenticated Hook Injection in all versions up to, and including, 1.0.9 via the checknonce function. This makes it possible for unauthenticated attackers to execute actions with hooks in WordPress under certain circumstances. The acti...

WordPress Email Log plugin <= 2.4.8 - Unauthenticated Hook Injection vulnerability

Unauthenticated Hook Injection vulnerability discovered by Sean Murphy in WordPress Plugin Email Log versions = 2.4.8...

CVE-2024-0867

The Email Log plugin for WordPress is vulnerable to Unauthenticated Hook Injection in all versions up to, and including, 2.4.8 via the checknonce function. This makes it possible for unauthenticated attackers to execute actions with hooks in WordPress under certain circumstances. The action the...

CVE-2024-0867 Email Log <= 2.4.8 - Unauthenticated Hook Injection

The Email Log plugin for WordPress is vulnerable to Unauthenticated Hook Injection in all versions up to, and including, 2.4.8 via the checknonce function. This makes it possible for unauthenticated attackers to execute actions with hooks in WordPress under certain circumstances. The action the...

CVE-2024-0867 Email Log <= 2.4.8 - Unauthenticated Hook Injection

The Email Log plugin for WordPress is vulnerable to Unauthenticated Hook Injection in all versions up to, and including, 2.4.8 via the checknonce function. This makes it possible for unauthenticated attackers to execute actions with hooks in WordPress under certain circumstances. The action the...