50693 matches found
wp-user-registration-vuln-checker
针对 CVE-2026-1492 的 WordPress 用户注册检查器 用于检查可能受 User Registration & Membership 插件中 CVE-2026-1492 影响的自有 WordPress 站点的只读检查器。 它帮助站点所有者确认插件暴露情况，并寻找失陷指标，例如隐藏的管理员账户、可疑上传、计划任务条目和被篡改的文件。 从这里开始 需求| 链接 ---|--- 浏览工具页面| https://limo57640-crypto.github.io/wp-user-registration-vuln-checker/ 阅读 Ping7 自检指南|...
cpanel-cve-41940-detector
针对 CVE-2026-41940 的 cPanel IOC 检测器 用于可能受 CVE-2026-41940 及相关入侵后活动影响的 cPanel/WHM 服务器的只读 IOC 检测器。 该脚本可帮助操作员审查 .sorry 勒索软件指标、MrRot13 Filemanager 后门痕迹、可疑的 cron 条目、SSH 密钥变更、回调痕迹以及 cPanel 日志异常。 从这里开始 Ping7 资源 所有 GitHub 工具：https://ping7.cc/github-tools/...
CVE-2018-7600
CVE-2018-7600 的 POC Drupal RCE CVE-2018-7600 别忘了在脚本中填入你的地址！ 描述： Drupal 7.x 和 8.x 的多个子系统中存在一个远程代码执行漏洞。这可能允许攻击者利用多个攻击向量对 Drupal 站点发起攻击，从而导致站点被完全入侵。 解决方案： 升级到最新版本的 Drupal 7 或 8 核心。 如果你正在运行 7.x，请升级到 Drupal 7.58。（如果无法立即更新，你可以尝试应用此补丁来修复漏洞，直到你能够完全更新为止。） 如果你正在运行 8.5.x，请升级到 Drupal...
Certighost-CVE-2026-54121
Document Type: Detection Use Case Related CVE: CVE-2026-54121 Certighost Author: Youssef Benchater Detection Use Case: Certighost CVE-2026-54121 This document describes the Splunk detection built for CVE-2026-54121. It follows the standard detection use case format so it can sit in a detection...
Malicious code in opiumbest (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32d3c33077e46f79b1a53edad20c8cb8c7fc67c5cbedd8406257cb5ce9581097 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
Malicious code in quesoeducation (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c428c1658948c78d2e7323de16bf1f37dced0bcd770cd73fd2b3c0855f6aa7b The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
MAL-2026-15576 Malicious code in quesoeducation (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c428c1658948c78d2e7323de16bf1f37dced0bcd770cd73fd2b3c0855f6aa7b The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
MAL-2026-15575 Malicious code in opiumbest (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32d3c33077e46f79b1a53edad20c8cb8c7fc67c5cbedd8406257cb5ce9581097 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
IoCs
失陷指标 IoCs 来自 Sophos 已发布报告中的失陷指标 root@kitploit: /@&&@ . @ @ %@%, ./&@@&@@@@ @@ @%&@@& .@, @. @ @% @ && %@ .@@@@. &@&@//@& @/ @ @@ @ %@. ,%@@@@@@@@@&/ ., @% @@ @@,&@@ ,@ .@. @ , @& ,@@@@& .@ @ .@. @ .@ @& @@. %@@% ./. @,...
MAL-2026-15570 Malicious code in node-net-pool (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9c6bb87249429b2a3f3791589075bf872a433bd47a33b152f6809ccf94b1328 package.json declares a postinstall hook node index.js that runs automatically on npm install. The shipped index.js contains no networking or...
Malicious code in node-net-pool (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9c6bb87249429b2a3f3791589075bf872a433bd47a33b152f6809ccf94b1328 package.json declares a postinstall hook node index.js that runs automatically on npm install. The shipped index.js contains no networking or...
MAL-2026-15568 Malicious code in manager-thedate (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ceffc24ee0bb4a8d23a2d545605b2ed2b686e9934b4f50c9fa24df3c980f04ed The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
MAL-2026-15567 Malicious code in htps-provider (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ed7eca74d8fb188a8618c67facb5015d747e423ccdf4e51caae2e4e63f82ea2 Package is published as htps-provider with a README copy-pasted verbatim from the legitimate Cosmos chain-registry project advertising assets, chains...
Malicious code in manager-thedate (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ceffc24ee0bb4a8d23a2d545605b2ed2b686e9934b4f50c9fa24df3c980f04ed The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
MAL-2026-15569 Malicious code in nuvyra-marketplace-sdk (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5db08e65aec25f1dc4fd0c33173154dbd0e6ef6e79aa2f1b7f8b4f8df0b9a3a8 dist/client.js executes initializeProvider at module top level, so the code runs whenever a consumer requires or imports this SDK. The function...
Malicious code in htps-provider (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ed7eca74d8fb188a8618c67facb5015d747e423ccdf4e51caae2e4e63f82ea2 Package is published as htps-provider with a README copy-pasted verbatim from the legitimate Cosmos chain-registry project advertising assets, chains...
Malicious code in nuvyra-marketplace-sdk (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5db08e65aec25f1dc4fd0c33173154dbd0e6ef6e79aa2f1b7f8b4f8df0b9a3a8 dist/client.js executes initializeProvider at module top level, so the code runs whenever a consumer requires or imports this SDK. The function...
TraditionalJay
TraditionalJay Negozio intenzionalmente vulnerabile classico / tradizionale per workshop di sicurezza — Java su una VM EC2, VM Azure o Compute Engine GCP, non container. Storia principale: Compromissione critica della VM — SQL injection → Log4Shell CVE-2021-44228 → reverse shell verso C2 esterno...
CVE-2024-4879
CVE-2024-4879 ServiceNow, una piattaforma ampiamente utilizzata per la trasformazione aziendale, ha recentemente divulgato tre vulnerabilità critiche di sicurezza che potrebbero avere gravi conseguenze per le organizzazioni in tutto il mondo. Queste vulnerabilità, identificate come CVE-2024–4879,...