Lucene search
+L

10 matches found

Kitploit
Kitploit
added 2026/09/17 1:52 a.m.9 views

sorry-ransomware-analysis

Sorry 勒索软件分析(CVE-2026-41940 cPanel 攻击活动) 公开 IOC 包、YARA 规则、取证脚本及分析方法论,针对 2026 年 4 月下旬出现的 “Sorry”勒索软件 (.sorry 扩展名)家族,该家族通过 cPanel/WHM 身份验证绕过漏洞 CVE-2026-41940 传播。 ⚠️ 该勒索软件加密的文件在未获得攻击者 RSA-2048 私钥的情况下无法解密 。切勿支付赎金。请修补 cPanel、轮换所有凭据,并保留加密文件,以防日后有免费解密工具发布。 📝 完整技术文章(土耳其语): 发布后将添加链接 本仓库内容 路径| 用途 ---|---...

9.8CVSS8.6AI score0.98527EPSS
SaveExploits76References4
Kitploit
Kitploit
added 2026/09/16 8:56 p.m.10 views

java-remote-class-loader

此工具允许您以类文件的形式将 Java 字节码发送给客户端(或潜在目标),通过 Java ClassLoader 和 Reflect API 加载并执行。客户端接收来自服务器的类文件,并返回相应的执行输出。载荷必须用 Java 编写,并在启动服务器前编译完成。 功能特性 客户端-服务器架构 Java 类文件的远程加载 传输中加密(使用 ChaCha20 密码) 通过参数进行设置 保活机制:服务器重启后重新建立通信 安装 该工具已在 Windows 和 Linux(zip 便携版)上使用 OpenJDK 11 及 JRE Java 包进行了测试。 由于依赖关系,Java 版本应为 11...

6AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/12 4:26 p.m.7 views

Tourmaline

Tourmaline Recientemente me topé con una pieza de malware ingeniosamente diseñada que se hace llamar "Torumaline". Este README fue escrito muy amablemente por Claude, ya que estaba súper ocupado con exámenes en el momento del inicio de este repositorio. ¡Explotar y descifrar este malware me quitó...

6.2AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/12 9:35 a.m.5 views

pingtunnel master-d7cd0d6ab5f18e7d8d050385e8d240b3b2f41e6c

Pingtunnel Pingtunnel is a tool that sends TCP/UDP traffic over ICMP. Note: This tool is only to be used for study and research, do not use it for illegal purposes Usage & Detailed Documentation 📖 For detailed documentation, seeUSAGE.md: includes complete command-line parameters, configuration fi...

6.1AI score
SaveExploits0References7
EUVD
EUVD
added 2025/10/03 8:07 p.m.14 views

EUVD-2022-0545

Malicious code in bioql PyPI...

9.8CVSS9.2AI score0.00753EPSS
SaveExploits0References5
OSV
OSV
added 2022/06/16 11:51 p.m.12 views

GHSA-PMCV-MGCF-RVXG Non-aligned u32 read in Chacha20 encryption and decryption

The implementation does not enforce alignment requirements on input slices while incorrectly assuming 4-byte alignment through an unsafe call to std::slice::fromrawpartsmut, which breaks the contract and introduces undefined behavior. This affects Chacha20 encryption and decryption in crypto2...

9.8CVSS7.2AI score0.00753EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
added 2022/01/06 10:04 p.m.36 views

Use of a Broken or Risky Cryptographic Algorithm in crypto2

The implementation does not enforce alignment requirements on input slices while incorrectly assuming 4-byte alignment through an unsafe call to std::slice::fromrawpartsmut, which breaks the contract and introduces undefined behavior. This affects Chacha20 encryption and decryption in crypto2...

9.8CVSS8.9AI score0.00753EPSS
SaveExploits0References5Affected Software1
CNVD
CNVD
added 2021/12/28 12:00 a.m.81 views

Mozilla Rust has an unspecified vulnerability (CNVD-2022-03129)

Rust is a general-purpose, compiled programming language from the Mozilla Foundation.A security vulnerability exists in versions of Rust crypto2 crate prior to 2021-10-08, which stems from a possible unaligned read of u32 during Chacha20 encryption and decryption. No details of the vulnerability...

9.8CVSS4AI score0.00753EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2021/12/27 12:15 a.m.7 views

CVE-2021-45709

An issue was discovered in the crypto2 crate through 2021-10-08 for Rust. During Chacha20 encryption and decryption, an unaligned read of a u32 may occur...

9.8CVSS5.8AI score0.00753EPSS
SaveExploits0References3
Prion
Prion
added 2021/12/27 12:15 a.m.27 views

Design/Logic Flaw

An issue was discovered in the crypto2 crate through 2021-10-08 for Rust. During Chacha20 encryption and decryption, an unaligned read of a u32 may occur...

7.5CVSS9.3AI score0.00753EPSS
SaveExploits0References2
Rows per page
Query Builder