715 matches found
janus-toolkit
Janus 工具包 这是一套针对 Janus 漏洞 CVE-2017-13156 的工具集合，影响 AOSP 版本 5.1.1、6.0、6.0.1、7.0、7.1.1、7.1.2、8.0，详情请见此处。 您可以在 Guardsquare 的分析文章中了解更多信息。 工具 Janus AndroidManifest 提取器 使用说明 1. 使用 Apktool 从目标 APK 中提取 AndroidManifest.xml。 2. 运行 manifestdummy.py 生成虚拟类以包含到您的 Android Studio 项目中。（仅当在 build.gradle 中设置...
Janus-CVE-2017-13156
Janus-CVE-2017-13156 使用说明： java -jar Janus.jar Janus dexfile apkfile outputfile Janus.jar： source/Janus.jar...
threatDemos
🚨 Android 安全威胁演示仓库 Android 安全漏洞与攻击向量的综合概念验证集合 本仓库作为教育资源，展示真实世界的 Android 安全威胁 及其相应的缓解策略 。每个演示都包含可运行的代码示例、详细的攻击向量和安全控制措施，帮助开发者理解并防止这些漏洞出现在生产应用中。 ⚡ 本仓库持续维护并不断扩展 🎯 仓库目标 🔍 演示真实的 Android 漏洞 ，附带可运行的概念验证代码 🛡️ 提供安全控制措施 以及每种威胁的缓解策略 📚 教育开发者 认识常见的 Android 安全陷阱 🧪 验证安全工具 ，如 MobSF 及其漏洞检测能力 ⚡ 研究前沿的 Android 利用技术 🗂️...
Janus-Vulnerability-CVE-2017-13156-Exploit
此存储库没有 README。...
[SECURITY] Fedora 45 Update: janus-1.4.1-7.fc45
Janus is an open source WebRTC server designed and developed by Meetecho...
MAL-2026-5614 Malicious code in janus-erc20 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 728f3d5af5a999be016a49283fff2c5cedc0c5df445d2f078f1f9817dde22334 On npm install, postinstall.js harvests installer secrets and POSTs them to 193.203.169.109:8443/c/janus-erc20 over HTTPS with TLS verification...
Malicious code in janus-flow (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d33c10c068a69d14d0333b93de7745caffd62013c57de6c55f20a6b53ffdcb1 On npm install, the package's postinstall hook node postinstall.js 2/dev/null || true silently runs a credential harvester against the installer...
PT-2026-44990
Name of the Vulnerable Software and Affected Versions FreeSWITCH versions prior to 1.11.0 Description The bundled XML parser in FreeSWITCH expands nested declarations without a depth or count bound. This allows a small Document Type Definition DTD to describe a body that expands exponentially, a...
CVE-2020-10574
An issue was discovered in Janus through 0.9.1. janus.c tries to use a string that doesn't actually exist during a "querylogger" Admin API request, because of a typo in the JSON validation...
CVE-2020-10575
An issue was discovered in Janus through 0.9.1. plugins/janusvideocall.c in the VideoCall plugin mishandles session management because a race condition causes some references to be freed too early or too many times...
CVE-2020-10573
An issue was discovered in Janus through 0.9.1. janusaudiobridge.c has a double mutex unlock when listing private rooms in AudioBridge...
Malicious Package
Overview usage-tracker-janus is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
EUVD-2025-204508
Malicious code in usage-tracker-janus npm...
Malicious code in usage-tracker-janus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8998ae7ec51b23bfdefe724e7c4bc34ad623362708f171a1c3ffcf4e98be15e0 The package usage-tracker-janus was found to contain malicious code. Source: ghsa-malware...
MAL-2025-192644 Malicious code in usage-tracker-janus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8998ae7ec51b23bfdefe724e7c4bc34ad623362708f171a1c3ffcf4e98be15e0 The package usage-tracker-janus was found to contain malicious code. Source: ghsa-malware...
EUVD-2025-180168
Malicious code in axios-mineralogy-pyxis-janus npm...
EUVD-2025-178310
Malicious code in janus-fomalhaut-rate-limiter-fusion npm...
EUVD-2025-178301
Malicious code in janus-remark-thuban-sails npm...
Malicious code in janus-dagda-query-ceres (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afb85b42a5c537dcd9141514d6280fb515d53ef44c3e7801ea47c15aa7a3fa71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...