php-malware-finder

PHP Malware Finder | || || || | | | | || || | | || || || | Webshell finder, | || || | kiddies hunter, | | | |||| || | website cleaner. || || |||| Detecta archivos PHP potencialmente maliciosos. ¿Qué detecta? PHP-malware-finder hace todo lo posible para detectar código ofuscado/engañoso, así como...

node-ipc-malware-protestware-CVE-2022-23812

CVE-2022-23812 RIAEvangelist/node-ipc es malware / protestware El módulo RIAEvangelist/node-ipc contiene protestware peacenotwar. Extracto de RIAEvangelist/node-ipc: a partir de v11.0.0 y v9.2.2 este módulo utiliza el módulo peacenotwar. Aún más importante, los commits...

inspec_cve_2019_15224

a malicious rest-client gem On August 19, 2019, it was discovered that the rest-client gem had had several versions published containing malicious code. In discovering the malicious rest-client, several other new gems were determined to be carrying similar code. Coverage:...

CVE-2025-56383-Proof-of-Concept

Notepad++ v8.8.3 tiene una vulnerabilidad de secuestro de DLL DLL hijacking que permite reemplazar el archivo DLL original para ejecutar código malicioso. El método de ejemplo es el siguiente: Tenga en cuenta que la siguiente demostración utiliza npp.8.8.3.Installer.x64.exe para instalar Notepad+...

mal_unpack

malunpack Dynamic unpacker based on PE-sieve 📖 Read more . It deploys a packed malware, waits for it to unpack the payload, dumps the payload, and kills the original process. !CAUTION This unpacker deploys the original malware. Use it only on a VirtualMachine. ⚙ Usage Basic usage: malunpack.exe...

CVE-2024-3094-XZ-Backdoor-Detector

Description Malicious code was discovered in the upstream tarballs of xz, starting with version 5.6.0. Through a series of complex obfuscations, the liblzma build process extracts a prebuilt object file from a disguised test file existing in the source code, which is then used to modify specific...

Joomla! Component Preventive And Reservation 1.0.5 - Local File Inclusion

A directory traversal vulnerability in the Preventive & Reservation compreventive component 1.0.5 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impacts via a .. dot dot in the controller parameter to index.php. id: CVE-2010-1475 info: name: Joomla...

web_exploit_detector

Web Exploit Detector Introduction The Web Exploit Detector is a Node.js application and NPM module used to detect possible infections, malicious code and suspicious files in web hosting environments. This application is intended to be run on web servers hosting one or more websites. Running the...

Malicious code in caoxiltts (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 c0d27d780e356c6ae75dedaa144f2064476e275a02f801a1d56897a3a9d1930f The package imitates real activity and instead deploys a coin miner. --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...

vbSparkle

¿Qué es vbSparkle? vbSparkle es un desofuscador de Visual Basic multiplataforma, de fuente a fuente, basado en evaluación parcial y dedicado principalmente al análisis de código malicioso escrito en VBScript y VBA Macro de Office. Está escrito en C nativo y proporciona una biblioteca .Net Standar...

CVE-2022-45472

CVE-2022-45472 XSS basado en DOM Software: CAE Learning Space Enterprise con licencia Intuity Versión de imagen: 267r Nivel de parche: 639 Vulnerabilidad: XSS basado en DOM Descripción El software de gestión CAE Learning Space Enterprise es vulnerable a un ataque de XSS basado en DOM. Un ataque d...

Microsoft-Office-Word-MSHTML-Remote-Code-Execution-Exploit

Microsoft-Office-Word-MSHTML-Remote-Code-Execution-Exploit CVE-2021-40444 EXPLOIT PARA USAR EN METASPLOIT, PERMITE A LOS ATACANTES OBTENER UNA EJECUCIÓN REMOTA DE CÓDIGO A TRAVÉS DE MICROSOFT OFFICE WORD AL INYECTAR CÓDIGO MALICIOSO EN EL ARCHIVO...

MAL-2026-17457 Malicious code in voxeval (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 4ffc5162b3b77de40988aa702c4493260a4f0b4f09d5f4719feabcd69f33908a The package imitates real activity and instead deploys a coin miner. --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...

CVE-2024-3094-checker

Comprobador de CVE-2024-3094 Las versiones 5.6.0 y 5.6.1 de xz Utils parecen estar comprometidas. XZ Utils es un software de compresión de datos y puede estar presente en distribuciones de Linux. El código malicioso puede permitir el acceso no autorizado a los sistemas afectados. Fuentes:...

Malicious code in dedh-devops-automation (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 e623272b4de65cc8af24a44d5405d9f6baa2c42896b50f9b7e0e5f294bfd2722 During installation, the package deploys a rogue AWS Lambda function to collect credentials from Secret Manager as well as collect other data. Data are then...

Malicious Package

Overview ai-workshop-maa15-radio is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packa...

Malicious Package

Overview brioche-apl-dev-env is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview mikuhostt-baileys is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview wailib is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

Malicious Package

Overview prastzy is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...