Google Android System Information Disclosure Vulnerability (CNVD-2019-31050)

Android is a Linux-based open source operating system from Google and the Open Handset Alliance OHA in the U.S. System is one of the system components. There is an information disclosure vulnerability in System in Android Q. The vulnerability arises from errors in the configuration of a networked...

Malicious Package

rest-client is a malicious package. The package evaluates code stored on a remote server pastebin.com and upon execution of the malicious code on the victim system, sends system information to mironanoru.zzz.com.ua...

ZZCMS system information module multiple parameters SQL injection vulnerability

ZZCMS is a product website that can be built quickly. A SQL injection vulnerability exists in several parameters of the information module of ZZCMS website builder, which can be exploited by attackers to obtain database information...

Nanjing Shentu Computer Technology Co., Ltd. Valley Autumn Excellence Resource Sharing Course Software Has Multiple Vulnerabilities

Guqiu boutique resource sharing class software is a set of software customized according to the Ministry of Education about the national boutique open course construction in the boutique resource sharing class. Nanjing Shentu Computer Technology Co., Ltd. Valley Autumn fine resources sharing clas...

Malicious Package

Several python packages are malicious packages. The malicious libraries attempt to either collect data such as system information of the environment or open a reverse shell on remote workstations...

Malicious Package

alipayjsapi is a malicious package. The package uploads system information to a remote server, downloads a file and executes it...

Malicious Package

alico is a malicious package. The package uploads system information to a remote server, downloads a file and executes it...

Malicious Package

ali-contributors is a malicious package. The package uploads system information to a remote server, downloads a file and executes it...

Malicious Package

antd-cloud is a malicious package. The package uploads system information to a remote server, downloads a file and executes it...

Malicious Package

next-util is a malicious package. The package uploads system information to a remote server, downloads a file and executes it...

Malicious Package

node-buc is a malicious package. The package uploads system information to a remote server, downloads a file and executes it...

Malicious Package

appx-compiler is a malicious package. The package uploads system information to a remote server, downloads a file and executes it...

Malicious Package

hsf-clients is a malicious package. The package uploads system information to a remote server, downloads a file and executes it...

Malicious Package

retcodelog is a malicious package. The package uploads system information to a remote server, downloads a file and executes it...

Malicious Package

hpmm is a malicious package. The package retrieves system information and uploads it to a remote server. It also downloads a file from a malicious server and executes it...

Malicious Package

ali-contributor is a malicious package. The malicious package runs a pre-install script, load.js, that would upload system information to a remote server, and subsequently downloads and executes a file...

Malicious Package

Overview All versions of tiar contain malicious code. The package uploads system information to a remote server, downloads a file and executes it. Recommendation Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that...

Malicious Package

Overview All versions of midway-xtpl contain malicious code. The package uploads system information to a remote server, downloads a file and executes it. Recommendation Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on...

Malicious Package

Overview All versions of alico contain malicious code. The package uploads system information to a remote server, downloads a file and executes it. Recommendation Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that...

RedGhost - Linux Post Exploitation Framework Designed To Gain Persistence And Reconnaissance And Leave No Trace

Linux post exploitation framework designed to assist red teams in gaining persistence, reconnaissance and leaving no trace. Payloads Function to generate various encoded reverse shells in netcat, bash, python, php, ruby, perl Crontab Function to create cron job that downloads and runs payload eve...