DotNET_XorCryptor

DotNET XorCryptor Você também pode prestar atenção a um projeto mais antigo - NET-MalwareCryptor Este é um empacotador de executáveis .NET com criptografia de payload. Use apenas para fins educacionais. Como usar? --file path - especifique o nome do arquivo --flood - adicione classes lixo ao...

HvLoader

Panoramica di HvLoader HvLoader.efi è un'applicazione EFI per caricare un loader di hypervisor esterno. HvLoader.efi carica un binario del loader di hypervisor fornito DLL, EFI, ecc. e chiama il suo punto d'ingresso passando ImageHandle di HvLoader.efi. In questo modo, il binario del loader di...

patchkit

patchkit Patcht eine ELF-Binärdatei mit einem oder mehreren einfachen Python-Skripten. Verwendung: root@kitploit: patch patchdir|file... patchdir Enthält ein oder mehrere Python-Patch-Dateien, die in alphabetischer Reihenfolge gegen eine Binärdatei ausgeführt werden. Patch-Beispiele Noppen einer...

firstexecution

firstexecution Coleção de diferentes maneiras de executar código fora dos pontos de entrada esperados...

drow

drow Descrição TL;DR drow é um utilitário de linha de comando usado para injetar código e interceptar o ponto de entrada de executáveis ELF pós-compilação. Ele recebe executáveis ELF não modificados como entrada e exporta um ELF modificado contendo um payload fornecido pelo usuário que é executad...

CVE-2026-46588

camel-couchdb CouchDb Reproducteur d'injection d'en-tête CVE-2026-46588 Ce projet démontre une injection d'en-tête de message dans le composant camel-couchdb d'Apache Camel, suivie sous CVE-2026-46588. Le composant lit plusieurs en-têtes Exchange pour contrôler son comportement — CouchDbDatabase,...

scenester

Scenester Scenester - uno strumento per acquisire uno snapshot visivo di un sito web fornendo più user-agent. Progettato per aiutare nella scoperta di diversi punti di ingresso in un'applicazione. Rilasciato come open source da NCC Group Plc - http://www.nccgroup.com/ Sviluppato da Sharique Shaik...

Linux Distros Unpatched Vulnerability : CVE-2026-72215

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - MIPS: DEC: Ensure 32-bit stack location for o32 promprintf In 64-bit configurations calling any firmware entry points from a kernel thread other than the initia...

PT-2026-71136

In Eclipse RDF4J, several XML parser entry points do not fully restrict XML External Entity XXE processing when parsing untrusted XML-based RDF data or query results, permitting DOCTYPE declarations, external entity references, and external DTD loading. This is due to an incomplete fix for...

CVE-2026-47425

Rattler is a library that provides common functionality used within the conda ecosystem. Prior to version 0.43.2, EntryPoint::FromStr in rattlercondatypes performs only .trim on the command field before the linker joins it onto the install prefix and writes an executable Python script. A maliciou...

CVE-2026-47425

Summary: CVE-2026-47425 affects rattler before 0.43.2, enabling a noarch:python entry-point path traversal that can write files outside the intended install prefix. The issue arises in EntryPoint::FromStr within rattler_conda_types, where only .trim() is applied to the command and a malicious noa...

CVE-2026-47425 Rattler vulnerable to entry-point path traversal in noarch:python install (arbitrary file write)

Rattler is a library that provides common functionality used within the conda ecosystem. Prior to version 0.43.2, EntryPoint::FromStr in rattlercondatypes performs only .trim on the command field before the linker joins it onto the install prefix and writes an executable Python script. A maliciou...

CVE-2026-47425 Rattler vulnerable to entry-point path traversal in noarch:python install (arbitrary file write)

Rattler is a library that provides common functionality used within the conda ecosystem. Prior to version 0.43.2, EntryPoint::FromStr in rattlercondatypes performs only .trim on the command field before the linker joins it onto the install prefix and writes an executable Python script. A maliciou...

python-pip: Path traversal via malicious entry point name in pip wheel installation allows arbitrary file overwrite

A flaw was found in pip, the package installer for Python. A remote attacker can exploit this vulnerability by tricking a victim into installing a malicious Python wheel. This wheel contains specially crafted entry-point names that use directory traversal or absolute paths. This allows pip to wri...

python-pip: Path traversal via malicious entry point name in pip wheel installation allows arbitrary file overwrite

A flaw was found in pip, the package installer for Python. A remote attacker can exploit this vulnerability by tricking a victim into installing a malicious Python wheel. This wheel contains specially crafted entry-point names that use directory traversal or absolute paths. This allows pip to wri...

PYSEC-2026-2971 rattler has an entry-point path traversal in noarch:python install (arbitrary file write)

Summary EntryPoint::FromStr in rattlercondatypes performs only .trim on the command field before the linker joins it onto the install prefix and writes an executable Python script. A malicious noarch:python package can ship an info/link.json with an entry-point name containing .., /, , or an...

python-pip: Path traversal via malicious entry point name in pip wheel installation allows arbitrary file overwrite

A flaw was found in pip, the package installer for Python. A remote attacker can exploit this vulnerability by tricking a victim into installing a malicious Python wheel. This wheel contains specially crafted entry-point names that use directory traversal or absolute paths. This allows pip to wri...

python-pip: Path traversal via malicious entry point name in pip wheel installation allows arbitrary file overwrite

A flaw was found in pip, the package installer for Python. A remote attacker can exploit this vulnerability by tricking a victim into installing a malicious Python wheel. This wheel contains specially crafted entry-point names that use directory traversal or absolute paths. This allows pip to wri...

EUVD-2026-41827

Improper Input Validation, Authorization Bypass Through User-Controlled Key vulnerability in Apache Camel ElasticSearch Rest Client. The camel-elasticsearch-rest-client component reads several Exchange headers to control its behaviour - SEARCHQUERY an advanced query body, OPERATION which...

CVE-2026-53622

Traefik is an HTTP reverse proxy and load balancer. Prior to 3.7.3, there is a critical vulnerability in Traefik's HTTP/3 QUIC TLS configuration selection that allows unauthenticated clients to bypass router-specific mTLS enforcement. When HTTP/3 is enabled on an entrypoint, the TLS handshake...