Lucene search
+L

12 matches found

Kitploit
Kitploit
added 2026/09/14 9:38 p.m.9 views

charlotte

charlotte c++ 完全免杀的 shellcode 加载器 ; 发布此工具以庆祝我的新生儿诞生 描述 13/05/2021: 1. c++ shellcode 加载器,截至 2021 年 5 月 13 日完全免杀 0/26。 2. 动态调用 win32 API 函数 3. shellcode 和函数名的 XOR 加密 4. 每次运行随机化 XOR 密钥和变量 5. 在 Kali Linux 上,只需 'apt-get install mingw-w64' 即可! 17/05/2021: 6. 随机字符串长度和 XOR 密钥长度 antiscan.me 使用方法 git clone...

5.9AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/11 10:20 p.m.7 views

DInvoke

DInvoke Windows 上 PInvoke 的动态替代方案。DInvoke 包含强大的原语,可以智能地组合,以高精度地从磁盘或内存动态调用非托管代码。它可用于多种目的,例如 PE 解析、智能动态 API 解析、在运行时动态加载 PE 插件、进程注入以及规避 API 钩子。 功能特性: 无需 PInvoke 即可动态调用非托管 API 提供能够进行战略性 API 钩子规避的原语 从托管代码手动映射非托管 PE 模块 将 PE 模块映射到由磁盘上任意模块支持的内存区域 模块化的进程注入 API 不断增长的数据结构、委托和函数包装库(欢迎分享 :-) 支持 .NET v3.5+ 会议演...

6.1AI score
SaveExploits0References2
Cvelist
Cvelist
added 2026/09/07 11:47 a.m.36 views

CVE-2026-78325 XSS in Standard Notes on Android via Malicious Google Keep and Evernote HTML Import

Cross-site scripting in the Evernote and Google Keep note importers in Standard Notes for Android through 3.201.24 allows an attacker to execute arbitrary JavaScript in the application context when a victim imports a crafted .enex or Google Keep HTML file, leading to theft of encryption keys and...

8.3CVSS0.00088EPSS
SaveExploits0References2
NVD
NVD
added 2026/07/16 12:17 p.m.27 views

CVE-2026-35148

HCL DFXServer is affected by a Missing Access Control vulnerability. This vulnerability states that certain endpoints are accessible without any form of authentication in another browser. This allows any network user to invoke these APIs and interact with the application without verification of...

6.3CVSS0.00297EPSS
SaveExploits0References1
Prion
Prion
added 2023/10/31 10:15 a.m.25 views

Code injection

LINE for Android version 5.0.2 and earlier and LINE for iOS version 5.0.0 and earlier are vulnerable to MITM man-in-the-middle attack since the application allows non-SSL/TLS communications. As a result, any API may be invoked from a script injected by a MITM man-in-the-middle attacker...

2.6CVSS6.7AI score0.0018EPSS
SaveExploits0References2Affected Software1
NVD
NVD
added 2019/11/21 3:15 p.m.37 views

CVE-2019-2315

While invoking the API to copy from fd or local buffer to the secure buffer, Parameters being populated are from non secure environment. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music...

7.8CVSS7.8AI score0.00202EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2019/11/21 2:38 p.m.41 views

CVE-2019-2315

While invoking the API to copy from fd or local buffer to the secure buffer, Parameters being populated are from non secure environment. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music...

7.8AI score0.00202EPSS
SaveExploits0References1
Prion
Prion
added 2019/04/04 4:29 p.m.27 views

Information disclosure

An incorrect permissions check was discovered in libvirt 4.8.0 and above. The readonly permission was allowed to invoke APIs depending on the guest agent, which could lead to potentially disclosing unintended information or denial of service by causing libvirt to block...

4.8CVSS6.2AI score0.01108EPSS
SaveExploits1References7Affected Software3
Tenable Nessus
Tenable Nessus
added 2016/06/17 12:00 a.m.36 views

Palo Alto Networks User-ID Agent < 7.0.4 TLS-Secured API Invocation Credential Disclosure (PAN-SA-2016-0007)

The version of Palo Alto Networks User-ID agent installed on the remote Windows host is prior to 7.0.4. It is, therefore, affected by a flaw that allows a TLS-secured API call to return encrypted credentials to the domain account configured on the User-ID agent, which has read-only rights for...

5.6AI score
SaveExploits0References1
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2015/07/10 5:50 a.m.16 views

LINE@ vulnerable to script injection

Overview LINE@ provided by LINE Corporation is an application used to communicate with others. LINE@ is vulnerable to MITM man-in-the-middle attacks since the application allows non-SSL/TLS communications. As a result, any API may be invoked from a script injected by a MITM man-in-the-middle...

5.9CVSS6.5AI score0.0018EPSS
SaveExploits0References5
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2015/07/10 12:00 a.m.46 views

JVN#22546110: LINE@ vulnerable to script injection

LINE@ provided by LINE Corporation is an application used to communicate with others. LINE@ is vulnerable to MITM man-in-the-middle attacks since the application allows non-SSL/TLS communications. As a result, any API may be invoked from a script injected by a MITM man-in-the-middle attacker...

5.9CVSS5.3AI score0.0018EPSS
SaveExploits0
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2015/03/20 12:00 a.m.39 views

JVN#41281927: LINE vulnerable to script injection

LINE provided by LINE Corporation is an application used to communicate with others. LINE is vulnerable to MITM man-in-the-middle attacks since the application allows non-SSL/TLS communications. As a result, any API may be invoked from a script injected by a MITM man-in-the-middle attacker. Impac...

5.9CVSS5.3AI score0.0018EPSS
SaveExploits0
Rows per page
Query Builder