CVE-2022-27963

Xftp 7.0.0088p and below contains a binary hijack vulnerability which allows attackers to execute arbitrary code via a crafted .exe file...

New PlugX variant “Talisman” used by famous Chinese APT

THREAT LEVEL: Red. For a detailed advisory, download the pdf file here PlugX is a well-known malware family with samples dating back to as early as 2008. A Chinese state-backed threat actor, RedFoxtrot group, is discovered to use a new variant of the PlugX malware, Talisman. The threat actor grou...

CVE-2022-27965: Unquoted Search Path or Element

Xlpd v7.0.0094 and below contains a binary hijack vulnerability which allows attackers to execute arbitrary code via a crafted .exe file...

CVE-2022-27963: Unquoted Search Path or Element

Xftp 7.0.0088p and below contains a binary hijack vulnerability which allows attackers to execute arbitrary code via a crafted .exe file...

CVE-2022-27964: Unquoted Search Path or Element

Xmanager v7.0.0096 and below contains a binary hijack vulnerability which allows attackers to execute arbitrary code via a crafted .exe file...

CVE-2022-27966: Unquoted Search Path or Element

Xshell v7.0.0099 and below contains a binary hijack vulnerability which allows attackers to execute arbitrary code via a crafted .exe file...

Spring Cloud Function SPEL Expression Injection (direct check)

Binary data springcloudCVE-2022-22963.nbin...

Citrix Gateway HTTP Detection

Binary data citrixgatewayhttpdetect.nbin...

Apache Shiro Default Cipher Key (CVE-2016-4437)

Binary data apacheshirocve-2016-4437.nbin...

Hacking Ham Radio: WinAPRS – Part 1

Hackers have been breaching computer system defenses for more than half a century, and the networks they use to exploit those weaknesses have been around for far longer than that. With the internet replacing most wirelines and wavelengths, and with the rise of cybercrime sophistication from petty...

SolarWinds Web Help Desk Installed (Windows)

Binary data solarwindswebhelpdeskinstalled.nbin...

Do not scan localhost for Tenable.OT scans.

Binary data otdontscanlocalhost.nbin...

Dockerfile Detection for Windows

Binary data dockerfiledetectwin.nbin...

Dockerfile Detection for Linux/UNIX

Binary data dockerfiledetectnix.nbin...

Google Chrome < 100.0.4896.60 Multiple Vulnerabilities

Binary data 701397.pasl...

Fennec - Artifact Collection Tool For *Nix Systems

fennec is an artifact collection tool written in Rust to be used during incident response on nix based systems. fennec allows you to write a configuration file that contains how to collect artifacts. Features A single statically compiled binary Execute any osquery SQL query Execute system command...

SonicWall NSv Next-Gen Virtual Firewall SSL VPN

Binary data sonicwallnsvsslvpnwebdetect.nbin...

Shemes Grabit 安全漏洞

Shemes Grabit is a popular freeware client for binary Usenet interaction from Shemes. A security vulnerability exists in Shemes Grabit version 1.7.2 Beta 4 and prior versions of the NZB Date Parser component, which originates from a denial of service caused by entering 1000000000000000 as part of...

CVE-2021-44127

In DLink DAP-1360 F1 firmware version =v6.10 in the "webupg" binary, an attacker can use the "file" parameter to execute arbitrary system commands when the parameter is "name=deleteFile" after being authorized...

CVE-2021-44127

In DLink DAP-1360 F1 firmware version =v6.10 in the "webupg" binary, an attacker can use the "file" parameter to execute arbitrary system commands when the parameter is "name=deleteFile" after being authorized...