ggshield

ggshield：使用 GitGuardian 保护您的代码 ggshield 是一个 CLI 应用程序，可在您的本地环境或 CI 环境中运行，帮助您检测 500 多种类型的密钥。 ggshield 通过 py-gitguardian 使用我们的公共 API 来扫描和检测文件及其他文本内容中的潜在漏洞。 使用 ggshield 扫描时，仅存储调用时间、请求大小和扫描模式等元数据，因此密钥不会显示在您的仪表板上，您的文件和密钥也不会被存储 。 目录 安装 安装脚本（推荐） macOS Homebrew 独立 .pkg 包 Linux Deb 和 RPM 包 Windows Chocolat...

EagleVM

EagleVM 用于生成经虚拟机保护的 x64 汇编代码的游乐场。 项目结构 EagleVM 主保护应用程序，负责执行代码虚拟化。 EagleVM.Core EagleVM 使用的静态库，提供所有虚拟化和分析功能。 EagleVM.Sandbox 用于未来对完整二进制文件进行测试的项目。 EagleVM.Stub 这是一个 DLL，用于需要保护的项目。EagleVM 保护程序会搜索该存根导入的使用位置，以掏空标记的代码段并创建虚拟化代码。 贡献 如有关于贡献的问题，可以通过 Discord @writecr3 联系我。我会尽量保持 issue...

themida-devirt

Themida/CodeVirtualizer 去虚拟化示例 本项目演示了针对 Themida 或 CodeVirtualizer 保护的代码进行去虚拟化的效果。下面，你可以看到一个简单的示例，展示了虚拟化前 的代码和去虚拟化后 的代码并排对比。 虚拟化前| 去虚拟化后 ---|--- | 虚拟化后，代码被转换成复杂、混淆的形式，难以分析。去虚拟化器恢复原始逻辑，使代码再次可读。 详细解释和更多示例，请阅读完整文章：https://back.engineering/blog/09/05/2026/...

JObfuscator

JObfuscator — Java 源代码混淆与保护 JObfuscator 是一款面向 Java 编程语言的源代码混淆器。它可以保护您的 Java 源代码和算法免受黑客攻击、破解、逆向工程、反编译以及技术窃取。 JObfuscator 采用多种混淆技术来保护并隐藏您 Java 源代码的真实功能。 它会重命名所有变量和方法，通过使代码流非线性化来混淆代码执行流程，并使用我们尖端的多态字符串加密引擎对所有字符串进行加密。 更多技术细节、下载及文档，请访问： https://www.pelock.com/products/jobfuscator 支持 Windows 和 Linux（需...

AutoIt-Obfuscator

AutoIt Obfuscator — AutoIt 脚本源代码混淆工具 AutoIt Obfuscator 是一种以这种方式修改 AutoIt 脚本源代码的工具，使得对混淆代码的分析变得非常困难。 更多技术细节、下载和文档，请访问： https://www.pelock.com/products/autoit-obfuscator 在线界面： https://www.pelock.com/autoit-obfuscator/ 什么是源代码混淆？ 混淆是将 AutoIt...

0xGUARD

📄 功能特性 模块重映射 线程过滤 模块隐藏 内存检查 完整性检查 反DLL注入 反调试 进程策略 字面字符串混淆 兼容 Themida/VMProtect ✔️ 依赖项 Windows 711 Visual Studio 2019 🔧 使用方法 1. 在 options.h 中设置选项，并构建 0xGuard。 2. 在你的项目中包含 0xGuardSDK.h 并链接 0xGuard.lib。 3. 构建你的项目。 📝 示例 root@kitploit: include include include "../0xGuard/0xGuardSDK.h" pragma comment...

CVE-2025-14353

The ZIP Code Based Content Protection plugin for WordPress is vulnerable to SQL Injection in all versions up to 1.0.2 via the 'zipcode' parameter. The issue arises from insufficient escaping of the user-supplied parameter and a lack of proper preparation in the existing SQL query, enabling unauth...

WordPress plugin ZIP Code Based Content Protection SQL注入漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. The...

EUVD-2007-0018

Malware in sbrugna...

EUVD-2015-5905

Malware in sbrugna...

EUVD-2007-1218

Malware in sbrugna...

EUVD-2023-25572

Malicious code in bioql PyPI...

EUVD-2025-27433

Malicious code in bioql PyPI...

Obelix: Mitigating Side-Channels through Dynamic Obfuscation

Trusted execution environments TEEs offer hardware-assisted means to protect code and data. However, as shown in numerous results over the years, attackers can use side-channels to leak data access patterns and even single-step the code. While the vendors are slowly introducing hardware-based...

CVE-2025-59008

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in PressTigers ZIP Code Based Content Protection zip-code-based-content-protection allows SQL Injection.This issue affects ZIP Code Based Content Protection: from n/a through = 1.0.0...

PT-2025-36815

Name of the Vulnerable Software and Affected Versions: PressTigers ZIP Code Based Content Protection versions through 1.0.0 Description: The software contains a SQL injection issue due to improper neutralization of special elements used in an SQL command. This allows for SQL injection...

WordPress ZIP Code Based Content Protection plugin <= 1.0.0 - SQL Injection vulnerability

SQL Injection vulnerability discovered by RoyTdd in WordPress Plugin ZIP Code Based Content Protection versions = 1.0.0...

ObfusBFA: a Holistic Approach to Safeguarding DNNs from Different Types of Bit-Flip Attacks

Bit-flip attacks BFAs represent a serious threat to Deep Neural Networks DNNs, where flipping a small number of bits in the model parameters or binary code can significantly degrade the model accuracy or mislead the model prediction in a desired way. Existing defenses exclusively focus on...

Vulnerability of the Monitor component of the IBM Maximo Application Suite, a cloud-based artificial intelligence-driven corporate asset management platform, allowing unauthorized access to protected information

The vulnerability of the Monitor component of the IBM Maximo Application Suite, a platform for managing corporate assets based on artificial intelligence, is related to insufficient protection of sensitive data in the source code. Exploiting this vulnerability could allow an attacker operating...

Mattermost Server 9.5.x < 9.5.11, 9.11.x < 9.11.3, 10.1.0 (MMSA-2024-00370)

The version of Mattermost Server installed on the remote host is prior to 9.5.11, 9.11.3 or 10.1.0. It is, therefore, affected by a vulnerability as referenced in the MMSA-2024-00370 advisory. - Mattermost versions 9.11.x = 9.11.2, and 9.5.x = 9.5.10 fail to protect the mfa code against replay...