25 matches found
DllShimmer
DllShimmer Facilita el secuestro de DLLs. Inyecta tu código en cualquier función de cualquier DLL sin alterar el funcionamiento normal del proceso. Cómo funciona DllShimmer analiza la DLL original y extrae información sobre las funciones exportadas nombre, número ordinal e información de reenvío...
koppeling-p
koppeling-p 自适应DLL劫持 / 动态导出转发 - EAT保留 概述 本项目是对Nick Landers @monoxgas出色项目的有限、仅Python扩展,可在这里获取。 差异 与原项目唯一的区别是,koppeling-p(p代表保留)旨在克隆过程中保留DLL目标导出地址表。 动机 这个小工具是一个更高级库(Interleaver)的基础,对DriverJack研究和其它进行中的项目起到了重要作用。...
EATGuard
EATGuard Implementación de una mitigación de protección de la tabla de direcciones de exportación, como Export Address Filtering EAF Cómo funciona Este proyecto se compone de tres binarios que, una vez compilados, se pueden encontrar en EATGuard\bin. Son: 1. EATGuardApplication.exe - Aplicación...
PT-2025-52029
Name of the Vulnerable Software and Affected Versions AncoraThemes EasyEat versions through 1.9.0 Description The software contains a flaw related to improper control of filename for include/require statements, specifically a PHP Local File Inclusion issue. This allows for the inclusion of local...
CVE-2020-5799
The Eat Spray Love mobile app for both iOS and Android contains a backdoor account that, when modified, allowed privileged access to restricted functionality and to other users' data...
eat-it.org Cross Site Scripting vulnerability OBB-3061593
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
eat-this.org Improper Access Control vulnerability OBB-2219468
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Friday Squid Blogging: Best Squid-Related Headline
From the New York Times: "When an Eel Climbs a Ramp to Eat Squid From a Clamp, Thats a Moray." The article is about the eel; the squid is just eel food. But still…. As usual, you can also use this squid post to talk about the security stories in the news that I haven’t covered. Read my blog posti...
HookDump - Security Product Hook Detection
EDR function hook dumping Please refer to the Zeroperil blog post for more information https://zeroperil.co.uk/hookdump/ Building source In order to build this you will need Visual Studio 2019 community edition is fine and CMake. The batch file Configure.bat will create two build directories with...
CVE-2020-5800
The Eat Spray Love mobile app for both iOS and Android contains logic that allows users to bypass authentication and retrieve or modify information that they would not normally have access to...
CVE-2020-5800
The Eat Spray Love mobile app for both iOS and Android contains logic that allows users to bypass authentication and retrieve or modify information that they would not normally have access to...
CVE-2020-5799
The Eat Spray Love mobile app for both iOS and Android contains a backdoor account that, when modified, allowed privileged access to restricted functionality and to other users' data...
CVE-2020-5800
The Eat Spray Love mobile app for both iOS and Android contains logic that allows users to bypass authentication and retrieve or modify information that they would not normally have access to...
CVE-2020-5800
Summary: CVE-2020-5800 affects the Eat Spray Love mobile app (iOS and Android) and describes an authentication-bypass flaw that lets an attacker access or modify information beyond normal permissions. The connected records identify the impact as unauthorized data access/modification and classify ...
CVE-2020-5799
The Eat Spray Love mobile app for both iOS and Android contains a backdoor account that, when modified, allowed privileged access to restricted functionality and to other users' data...
CVE-2020-5799
The CVE-2020-5799 entry concerns the Eat Spray Love mobile app for iOS and Android, where a backdoor account could be modified to grant privileged access to restricted functionality and to other users’ data. The issue is described consistently across sources as a backdoor account weakness, not a ...
CVE-2020-5799: Undefined Security Weakness
The Eat Spray Love mobile app for both iOS and Android contains a backdoor account that, when modified, allowed privileged access to restricted functionality and to other users' data...
Mark Goldstein Eat Spray Love Security Breach
Mark Goldstein Eat Spray Love is a mobile app about fitness by Mark Goldstein personal developer. A security vulnerability exists in the Eat Spray Love mobile app, which stems from the inclusion of a backdoor account that, when modified, could allow a user privileged access to restricted features...
CVE-2020-5800: Incorrect Resource Transfer Between Spheres
The Eat Spray Love mobile app for both iOS and Android contains logic that allows users to bypass authentication and retrieve or modify information that they would not normally have access to...
Mark Goldstein Eat Spray Love Authorization Issue Vulnerability
Mark Goldstein Eat Spray Love is a mobile app about fitness by Mark Goldstein personal developer. A security vulnerability exists in the Eat Spray Love mobile app that allows users to bypass authentication, logic to retrieve or modify information they would not normally have access to...