RATDecoders

RATDecoders Malconf는 특정 악성코드 패밀리를 정적으로 분석하고 사고 대응 담당자Incident Responder가 사고 발생 시 활용할 수 있는 구성Configuration 데이터를 추출하는 데 사용할 수 있는 python3 라이브러리입니다. 라이브러리로서 자동화된 악성코드 분석 파이프라인에 설치할 수도 있습니다. 설치 요구 사항 pip 설정과 requirements.txt에 포함된 몇 가지 선행 요구 사항이 있습니다. pefile pbkdf2 javaobj-py3 pycrypto androguard 모든 디코...

IOCs

////////////////////// // //////////////////////// // /// /////// ///// /////// /////// /////// /////// //////// //////// //////// //////// //////// //////// //////// //////// //////// //////// /////// /////// /////// /////// ///// // ////// // // ///////////////////////// ///////////////////////...

malpedia-flossed

Malpedia FLOSSed 이 저장소는 Malpedia에 있는 모든 압축 해제 및 덤프된 샘플에 FLARE FLOSS 도구를 적용한 결과를 포함하며, 추가 사용을 위해 전처리된 상태로 제공됩니다. 이 컬렉션은 정기적으로 업데이트될 예정입니다. 2026년 1월의 마지막 실행에서 2,136개의 악성코드 패밀리와 연관된 9,202개의 파일이 처리되었습니다. FLOSSing 결과 61,135,522개의 원시 문자열이 생성되었고, 이는 정제 및 중복 제거 과정을 거쳐 5,666,515개의 고유 문자열로 축소되었습니다. 압축을 풀면...

DGA

DGA PassiveDNS.cn 및 360+VT 샌드박스에서 수집된 의심스러운 DGA 목차 NCR: 확인 및 역분석 필요 Link| Status ---|--- 50| TeleRU의 정상 DGA, Android APK 관련 DGA 49| MyDoom의 DGA 48| 예측 불가능한 DGA 39| 완료 Banjori의 새로운 시드 38| 완료 새로운 DGA: XshellGhost 37| DGA 아님 36| DGA 아님 35| DGA 아님 34| 완료 Padcrypt의 새로운 시드 33| 정상 TcpRoute2 32| 정상 Chrom...

pafish

Pafish Pafish is a testing tool that uses different techniques to detect virtual machines and malware analysis environments in the same way that malware families do. The project is free and open source; the code of all the anti-analysis techniques is publicly available. Pafish executables for...

PT-2026-90722

A flaw has been found in IOBit Uninstaller 15.5.0.11. Affected by this issue is the function sub 11838 of the file IURegistryFilter.sys of the component IOCTL Dispatch Handler. This manipulation causes null pointer dereference. The attack requires local access. The exploit has been published and...

PyJWT: Public-key JWK accepted as HMAC secret enables forged HS256 tokens when mixed families are allowed

...

EUVD-2024-55694

A missing authentication check in Bosch IP cameras of families CPP13 and CPP14 allows an unauthenticated attacker to retrieve video analytics event data...

CVE-2024-58330

CVE-2024-58330 affects Bosch IP cameras families CPP13 and CPP14 due to a missing authentication check in the access path that guards video analytics event data. The vulnerability enables an unauthenticated attacker to retrieve video analytics event data remotely over the network, with a CVSS v3....

CVE-2026-53517: Concurrent Execution using Shared Resource with Improper Synchronization

Better Auth is an authentication and authorization library for TypeScript. From 1.4.8-beta.7 until 1.6.11, the @better-auth/oauth-provider POST /oauth2/token endpoint on the refreshtoken grant performs a non-atomic read, validate, revoke, and mint sequence on the oauthRefreshToken row, allowing...

CVE-2026-60086

PraisonAI before 4.6.78 contains a prompt injection defense bypass vulnerability where the injection defense only blocks threats classified as CRITICAL, requiring three or more detector families to match simultaneously. Attackers can craft single or double-vector prompt injections that are...

CVE-2026-60086 PraisonAI before 4.6.78 Prompt Injection Defense Bypass

PraisonAI before 4.6.78 contains a prompt injection defense bypass vulnerability where the injection defense only blocks threats classified as CRITICAL, requiring three or more detector families to match simultaneously. Attackers can craft single or double-vector prompt injections that are...

CVE-2026-60086 PraisonAI before 4.6.78 Prompt Injection Defense Bypass

PraisonAI before 4.6.78 contains a prompt injection defense bypass vulnerability where the injection defense only blocks threats classified as CRITICAL, requiring three or more detector families to match simultaneously. Attackers can craft single or double-vector prompt injections that are...

CVE-2026-60086 PraisonAI before 4.6.78 Prompt Injection Defense Bypass

PraisonAI before 4.6.78 contains a prompt injection defense bypass vulnerability where the injection defense only blocks threats classified as CRITICAL, requiring three or more detector families to match simultaneously. Attackers can craft single or double-vector prompt injections that are...

CVE-2026-60086

PraisonAI before 4.6.78 contains a prompt injection defense bypass vulnerability where the injection defense only blocks threats classified as CRITICAL, requiring three or more detector families to match simultaneously. Attackers can craft single or double-vector prompt injections that are...

EUVD-2026-42894

PraisonAI before 4.6.78 contains a prompt injection defense bypass vulnerability where the injection defense only blocks threats classified as CRITICAL, requiring three or more detector families to match simultaneously. Attackers can craft single or double-vector prompt injections that are...

PT-2026-57188

PraisonAI before 4.6.78 contains a prompt injection defense bypass vulnerability where the injection defense only blocks threats classified as CRITICAL, requiring three or more detector families to match simultaneously. Attackers can craft single or double-vector prompt injections that are...

ClickFix Scams Abuse Google, Cloudflare Checks to Deliver 7 Malware Families

Malwarebytes links fake Google and Cloudflare verification pages to shared ClickFix infrastructure delivering StealC, NetSupport and other malware...

TencentOS Server 2: microcode_ctl (TSSA-2025:1023)

The version of Tencent Linux installed on the remote TencentOS Server 2 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2025:1023 advisory. Package updates are available for TencentOS Server 2 that fix the following vulnerabilities...

NewStart CGSL MAIN 6.06 : python3 Vulnerability (NS-SA-2025-0243)

The remote NewStart CGSL host, running version MAIN 6.06, has python3 packages installed that are affected by a vulnerability: - The ipaddress module contained incorrect information about whether certain IPv4 and IPv6 addresses were designated as globally reachable or private. This affected the...