Malicious code in 0xfighter3 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 5a97978609c71d681a69a2da613c5e52b257a2062d7805b8db25243db50ff36f Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

MAL-2026-14525 Malicious code in 0xfighter3 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 5a97978609c71d681a69a2da613c5e52b257a2062d7805b8db25243db50ff36f Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

New SLEEPWALKER Backdoor Waits for One Crafted Packet, Then Runs Its Own Bytecode

An independent malware researcher has documented a previously unreported Windows backdoor, dubbed SLEEPWALKER , that stays inert in memory until a specifically crafted network packet reaches the machine and then runs commands written in a 23-instruction language of its own design. The sample is a...

cybernexus

CyberNexus Master Cybersecurity. From Zero to Advanced...

Security Bulletin:Vulnerabilities exists in IBM Netezza Appliance

Summary Vulnerabilities identified in IBM Netezza Software have been addressed in version 1.0.2.0. Vulnerability Details CVEID:CVE-2024-28835 DESCRIPTION: A flaw has been discovered in GnuTLS where an application crash can be induced when attempting to verify a specially crafted .pem bundle using...

MAL-2026-14524 Malicious code in bigquery-agent-analytics-tracing (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 08fbff35384a45aedc39545dd2a174889a1c35f3e6c9d044c2c201905402ad99 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

Malicious code in bigquery-agent-analytics-tracing (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 08fbff35384a45aedc39545dd2a174889a1c35f3e6c9d044c2c201905402ad99 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

CVE-2026-58097

mpSetEnddisc copied a user-supplied PSN endpoint value without length validation, allowing a buffer overflow via the ppp8 command interface. A local user with access to the ppp8 command interface can crash ppp8 or potentially execute arbitrary code as root...

PIL-CVE-2017-8291

Python PIL दूरस्थ कमांड निष्पादन भेद्यता GhostButt Python में छवियों को संसाधित करने के लिए PIL Pillow मॉड्यूल GhostButt भेद्यता CVE-2017-8291 से प्रभावित है, क्योंकि यह आंतरिक रूप से GhostScript को कॉल करता है, जिसके परिणामस्वरूप दूरस्थ कमांड निष्पादन भेद्यता उत्पन्न होती है। भेद्यता सारांश PIL...

CVE-2018-5767-AC9

CVE-2018-5767-AC9 CVE-2018-5767 के लिए एक proof-of-concept का कार्यान्वयन https://vulners.com/cve/CVE-2018-5767 root@kitploit: निम्नलिखित CVE-2018-5767 का एक कार्यान्वयन है, एक भेद्यता जो पासवर्ड के लिए 'Cookie' हेडर को पार्स करते समय होने वाली असुरक्षित sscanf कॉल का शोषण करती है। यह भेद्यता मूल...

PoC-CVE-2019-1003030

जेन्किन्स 2.63 स्क्रिप्ट सुरक्षा सैंडबॉक्स बायपास PoC यह प्रोजेक्ट जेन्किन्स 2.63 द्वारा उपयोग किए जाने वाले Jenkins SecureGroovyScript सत्यापन एंडपॉइंट पर Groovy पेलोड बनाने और वितरित करने को स्वचालित करता है। उपकरण इंटरैक्टिव और एक-शॉट निष्पादन दोनों का समर्थन करता है। एक्सप्लॉइट कोई आउटपुट नही...

kernel: i2c: stub: Reject I2C block transfers with invalid length

A flaw was found in the Linux kernel's i2c-stub driver. A local user with access to the /dev/i2c- device can exploit this vulnerability by issuing an I2C System Management Bus SMBus input/output control ioctl command with a specially crafted block transfer length. This invalid length can cause th...

kernel: netfilter: conntrack_irc: fix possible out-of-bounds read

A flaw was found in the Linux kernel's netfilter conntrackirc module. This vulnerability allows for a possible out-of-bounds read. When parsing network traffic, if a command string is matched but subsequent parsing fails, the system does not properly exit, leading to the flaw. This could...

kernel: i2c: stub: Reject I2C block transfers with invalid length

A flaw was found in the Linux kernel's i2c-stub driver. A local user with access to the /dev/i2c- device can exploit this vulnerability by issuing an I2C System Management Bus SMBus input/output control ioctl command with a specially crafted block transfer length. This invalid length can cause th...

CVE-2024-3273

D-Link NAS कमांड निष्पादन शोषण यह Python स्क्रिप्ट D-Link NAS उपकरणों में एक कमजोरी CVE-2024-3273 का शोषण करती है, जो मनमाने कमांड निष्पादन की अनुमति देती है। यह कमजोरी का लाभ उठाकर प्रभावित उपकरणों पर दूरस्थ रूप से कमांड निष्पादित करती है। विशेषताएँ D-Link NAS उपकरणों पर मनमाने कमांड निष्पादित...

CVE-2023-36123

CVE-2023-36123 केवल प्रदर्शन उद्देश्यों के लिए। यह शोषण Plain Craft Launcher 2 के सभी संस्करणों पर काम करता है। Custom.xaml डाउनलोड करें और Plain Craft Launcher 2 में आयात करें, फिर "Run Command" पर क्लिक करें। https://github.com/Hex-Dragon/PCL2/assets/140469824/636d1436-a26d-4f54-ad4f-a7b1bb1237...

anubis

Anubis root@kitploit: d8888 888 d8b d88888 888 Y8P d88P888 888 d88P 888 88888b. 888 888 88888b. 888 .d8888b d88P 888 888 "88b 888 888 888 "88b 888 88K d88P 888 888 888 888 888 888 888 888 "Y8888b. d8888888888 888 888 Y88b 888 888 d88P 888 X88 d88P 888 888 888 "Y88888 88888P" 888 88888P' Anubis is...

filtron

Filtron Reverse HTTP proxy to filter requests by different rules. Can be used between production webserver and the application server to prevent abuse of the application backend. The original purpose of this program was to defend searx, but it can be used to guard any web application. Installatio...

nishang

Nishang Nishang is a framework and collection of scripts and payloads which enables usage of PowerShell for offensive security, penetration testing and red teaming. Nishang is useful during all phases of penetration testing. By Nikhil Mittal Founder of Altered Security - Hands-on red team and...

CVE-2026-58097 ppp(8): missing length validation in mp_SetEnddisc()

mpSetEnddisc copied a user-supplied PSN endpoint value without length validation, allowing a buffer overflow via the ppp8 command interface. A local user with access to the ppp8 command interface can crash ppp8 or potentially execute arbitrary code as root...