winlow

Windows Internals & Exploitation A concise, practical referen...

Exploit for CVE-2024-28397

CVE-2024-28397-command-execution-poc This vulnerability arises...

Malicious code in binance-internals (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-6278 Malicious code in binance-internals (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in slack-internals (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-6310 Malicious code in slack-internals (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in airbnb-internals (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-6274 Malicious code in airbnb-internals (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in vercel-internals (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-6323 Malicious code in vercel-internals (npm)

The package communicates with a domain associated with malicious activity...

Symlink Attack

Overview Affected versions of this package are vulnerable to Symlink Attack though incorrect handling of the OCI hook createContainer during container initialization when update-ldcache is used. An attacker can modify data or disrupt service by supplying a specially crafted container image that...

CVE-2023-2541

The Web Frontend of KNIME Business Hub before 1.4.0 allows an unauthenticated remote attacker to access internals about the application such as versions, host names, or IP addresses. No personal information or application data was exposed...

MAL-2025-2833 Malicious code in @vercel-internals/tsconfig (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-2832 Malicious code in @vercel-internals/constants (npm)

--- -= Per source details. Do not edit below this line.=-...

Linux Distros Unpatched Vulnerability : CVE-2024-54680

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: smb: client: fix TCP timers deadlock after rmmod Commit ef7134c7fc48 smb: client: Fix...

Cryptominers? Anatomy: Cryptomining Internals

...

CVE-2024-31146

When multiple devices share resources and one of them is to be passed through to a guest, security of the entire system and of respective guests individually cannot really be guaranteed without knowing internals of any of the involved guests. Therefore such a configuration cannot really be...

RLSA-2024:1687 Important: nodejs:20 security update

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Security Fixes: nodejs: vulnerable to timing variant of the Bleichenbacher attack against PKCS1 v1.5 padding Marvin CVE-2023-46809 nodejs: reading unprocessed HTT...

PT-2024-40744 · Git +1 · Quickjs

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow read, which was identified through an OSS-Fuzz report. The crash state indicates the involvement of...

NoArgs - Tool Designed To Dynamically Spoof And Conceal Process Arguments While Staying Undetected

NoArgs is a tool designed to dynamically spoof and conceal process arguments while staying undetected. It achieves this by hooking into Windows APIs to dynamically manipulate the Windows internals on the go. This allows NoArgs to alter process arguments discreetly. Default Cmd: Windows Event Logs...