kratosminifilter

🛡️ Kratos Minifilter — Controlador Antiransomware del Núcleo de Windows Proyecto de Investigación de Seguridad Defensiva — Controlador minifilter de Windows desarrollado en C++ para la detección y neutralización en tiempo real de ransomware a nivel de núcleo Ring 0. 📋 Tabla de Contenidos Resumen...

detect-ransomware-filenames

Detect Ransomware Filenames This package/script watches SMB transactions to look for known bad filenames that ransomware is known to use. It rides on top of the Anti-Ransomware File System Resource Manager Lists maintained here. How to use A Python script download-list.py is included to be able t...

RvbbitSafe

RvbbitSafe: La Pesadilla del Hacker – Una Arquitectura Anti-Ransomware de Seis Fortalezas para Windows 🛡️ Descripción general RvbbitSafe es un prototipo de investigación que demuestra un cambio de paradigma en la defensa contra ransomware. Es una fortaleza activa y multicapa que combina...

RansomLord

RansomLord NG v1.0 Anti-Ransomware exploit tool. Proof-of-concept tool that automates the creation of PE files, used to exploit ransomware pre-encryption. Updated version NG: https://github.com/malvuln/RansomLord/releases/tag/v1.0 Lang: C SHA256:...

CVE-2026-5966

ThreatSonar Anti-Ransomware developed by TeamT5 has an Arbitrary File Deletion vulnerability. Authenticated remote attackers with web access can exploit Path Traversal to delete arbitrary files on the system...

CVE-2026-5967

ThreatSonar Anti-Ransomware (TeamT5) is affected by a Privilege Escalation vulnerability. The description states that authenticated remote attackers with shell access can inject OS commands and execute them with root privileges, indicating a post-authentication, command-injection path that could ...

CVE-2026-5966

ThreatSonar Anti-Ransomware developed by TeamT5 has an Arbitrary File Deletion vulnerability. Authenticated remote attackers with web access can exploit Path Traversal to delete arbitrary files on the system...

CVE-2026-5966 TeamT5｜ThreatSonar Anti-Ransomware - Arbitrary File Deletion

ThreatSonar Anti-Ransomware developed by TeamT5 has an Arbitrary File Deletion vulnerability. Authenticated remote attackers with web access can exploit Path Traversal to delete arbitrary files on the system...

PT-2026-33732

Name of the Vulnerable Software and Affected Versions ThreatSonar Anti-Ransomware versions prior to 4.0.0 Description Authenticated remote attackers with shell access can inject and execute OS commands with root privileges. This issue involves an OS command injection in an unknown function...

CISA Flags Four Security Flaws Under Active Exploitation in Latest KEV Update

The U.S. Cybersecurity and Infrastructure Security Agency CISA on Tuesday added four security flaws to its Known Exploited Vulnerabilities KEV catalog, citing evidence of active exploitation in the wild. The list of vulnerabilities is as follows - CVE-2026-2441 CVSS score: 8.8 - A use-after-free...

Hackers Dox ICE, DHS, DOJ, and FBI Officials

Plus: A secret FBI anti-ransomware task force gets exposed, the mystery of the CIA’s Kryptos sculpture is finally solved, North Koreans busted hiding malware in the Ethereum blockchain, and more...

EUVD-2020-27176

Malware in sbrugna...

EUVD-2020-21336

Malware in sbrugna...

EUVD-2020-30270

Malware in sbrugna...

EUVD-2020-27177

Malware in sbrugna...

EUVD-2025-15660

Malicious code in bioql PyPI...

EUVD-2024-48579

Malicious code in bioql PyPI...

CVE-2025-7145

ThreatSonar Anti-Ransomware developed by TeamT5 has an OS Command Injection vulnerability, allowing remote attackers with product platform intermediate privileges to inject arbitrary OS commands and execute them on the server, thereby gaining administrative access to the remote host...

CVE-2025-7145 TeamT5｜ThreatSonar Anti-Ransomware - OS Command Injection

ThreatSonar Anti-Ransomware developed by TeamT5 has an OS Command Injection vulnerability, allowing remote attackers with product platform intermediate privileges to inject arbitrary OS commands and execute them on the server, thereby gaining administrative access to the remote host...

CVE-2025-7145

CVE-2025-7145 concerns ThreatSonar Anti-Ransomware from TeamT5. The vulnerability is described as an OS Command Injection that allows remote attackers with intermediate privileges on the affected product to inject and execute arbitrary OS commands on the server, potentially gaining administrative...