EDRception

참조: https://malwaretech.com/2023/12/silly-edr-bypasses-and-where-to-find-them.html...

AMSI-patches-learned-till-now

Изученные AMSI-патчи на данный момент Я задокументировал все AMSI-патчи, которые изучил до сих пор ❗ Моё изучение AMSI-патчей на данный момент. Не относится к активам моей компании! ОТКАЗ ОТ ОТВЕТСТВЕННОСТИ: Этот код пока не предназначен для обхода защиты! Только концептуальный подход! Ссылки: 1...

CVE-2019-16759-bypass

CVE-2019-16759-bypass...

EAC-Kernel-Packet-Fucker

EAC-Kernel-Packet-Fucker 내 코드가 아님. 저장용일 뿐임 https://www.unknowncheats.me/forum/anti-cheat-bypass/503052-easy-anti-cheat-kernel-packet-fucker.html 이것은 Easy Anti-Cheat Kernel Packet Fucker 줄여서 EACKPFucker이다. 이게 뭐냐고? 기본적으로, 커널 모드 드라이버를 통한 패킷들이 그들에게 전송되지 않게 된다는 뜻이며, 이는 곧 너의 pasta pasta 2023 kdmapper F...

Malicious code in @ibrahim1337/baksen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea195bd44e54cd1051fc279a0e871b02c15eea04f65c80979d756fa767f541b4 Package @ibrahim1337/baksen ships a Windows x64 infostealer toolkit that targets Chromium-family browsers Chrome, Brave, Edge, Opera, Opera GX on the...

GHSA-67CG-CPJ7-QGC9 File Browser discloses text file content via /api/resources endpoint bypassing Perm.Download check

Summary The resourceGetHandler in http/resource.go returns full text file content without checking the Perm.Download permission flag. All three other content-serving endpoints /api/raw, /api/preview, /api/subtitle correctly verify this permission before serving content. A user with download: fals...

Picklescan Bypasses Unsafe Globals Check using pty.spawn

Summary The vulnerability allows malicious actors to bypass PickleScan's unsafe globals check, leading to potential arbitrary code execution. The issue stems from the absence of the pty library more specifically, of the pty.spawn function from PickleScan's list of unsafe globals. This vulnerabili...

EUVD-2025-202176

mad-proxy is a Python-based HTTP/HTTPS proxy server for detection and blocking of malicious web activity using custom security policies. Versions 0.3 and below allow attackers to bypass HTTP/HTTPS traffic interception rules, potentially exposing sensitive traffic. This issue does not have a fix a...

EUVD-2025-36882

Cryptographic validation of upgrade images could be circumventing by dropping a specifically crafted file into the upgrade ISO...

Exploit for CVE-2021-1675

It Was All A Dream A CVE-2021-34527 a.k.a PrintNightmare Python Scanner. Allows you to scan entire subnets for the PrintNightmare RCE not the LPE and generates a CSV report with the results. Tests exploitability over MS-PAR and MS-RPRN. This tool has "de-fanged" versions of the Python exploits, i...

Domain Name Validation Bypass with Apple Native Certificate Validation

...

Apache InLong 代码问题漏洞

Apache InLong is the U.S. Apache Apache Foundation's one-stop massive data integration framework. Provides automated, secure and reliable data transfer capabilities. Apache InLong versions 1.13.0 to 2.1.0 has a deserialization vulnerability , the vulnerability stems from the application in the...

Bypassing mountable secrets policy imposed by the ServiceAccount admission plugin

...

UBUNTU-CVE-2020-22669

Modsecurity owasp-modsecurity-crs 3.2.0 Paranoia level at PL1 has a SQL injection bypass vulnerability. Attackers can use the comment characters and variable assignments in the SQL syntax to bypass Modsecurity WAF protection and implement SQL injection attacks on Web applications...

Mozilla: Iframe sandbox bypass with XSLT

The Mozilla Foundation Security Advisory describes this flaw as: It was possible to construct specific XSLT markups that would enable someone to bypass an iframe sandbox...

Google Chrome is Abused to Deliver Malware as Legit Windows 10 App

Crooks behind a newly identified malware campaign are targeting Windows 10 with malware that can infect systems via a technique that cleverly bypasses Windows cybersecurity protections called User Account Control UAC. Researchers from Rapid7 recently identified the campaign and warn the goal of t...

Online-Food-Ordering-Web-App SQL Injection

CVE-2021-41647 SQL Injection in Online-Food-Ordering-Web-App The Online-Food-Ordering-Web-App is vulnerable to un-authenticated error and time-based blind SQL Injection attacks. The username parameter on the /login.php page does not sanitize the user input, an attacker is able to bypass the login...

Online-Food-Ordering-Web-App SQL Injection Vulnerability

CVE-2021-41647 SQL Injection in Online-Food-Ordering-Web-App The Online-Food-Ordering-Web-App is vulnerable to un-authenticated error and time-based blind SQL Injection attacks. The username parameter on the /login.php page does not sanitize the user input, an attacker is able to bypass the login...

School ERP Pro 1.0 - Remote Code Execution Vulnerability

Exploit for php platform in category web applications Exploit Title: School ERP Pro 1.0 - Remote Code Execution Author: Besim ALTINOK Vendor Homepage: http://arox.in Software Link: https://sourceforge.net/projects/school-erp-ultimate/ Version: latest version Tested on: Xampp Credit: İsmail BOZKUR...

Shopify: Open Redirect in www.shopify.dev Environment

Summary Reported vulnerability allows attacker for open/unknown redirect for victim user Steps to reproduce 1 Go to https://shopify.dev/concepts/shopify-introduction 2 Click on search 3 Type POC in search box and hit enter 4 Right click on first result displayed as POS and click on copy link...