artifacts-kit

. . / || |/ / | | | ||/ | \ \ \ \ \ / \ | |/ / \ / | | /| | | || | / \ | | | | | | ||| / / / / Malicious Memory Artifact Generator Kit v1.0 | Forrest Orr | 2020 REQUIRED --alloc-type dll-map-hollow|dll-load-hollow|txf-dll-map-hollow|private|mapped OPTIONAL --payload-file --payload-type...

IoT-Implant-Toolkit

IoT-Implant-Toolkit IoT-Implant-Toolkit es un framework de herramientas útiles para la investigación de implantación de malware en dispositivos IoT. Es un conjunto de herramientas compuesto por software esencial para la modificación de firmware, depuración de puertos serie, análisis de software y...

Amaranth-Project

Amaranth Project Implementa una cadena de ataque de múltiples etapas para la implantación de una puerta trasera mediante CVE-2025-8088 vulnerabilidad de path traversal en WinRAR, ≤ 7.11. 诱饵文档 → 恶意RAR → CVE触发 → ADS写入 → Stager执行 → 文件加载 → C2上线 Estructura del proyecto Directorio| Contenido ---|---...

woocommerce-plugin-supply-chain-security-assessment

CVE-2026-49777 - Implantación de Software Malicioso y RCE en WooCommerce Product Slider Pro Informe de Ciberseguridad Estilo Consultoría Informe profesional de evaluación de vulnerabilidades sobre el riesgo en la cadena de suministro del plugin de WooCommerce, que incluye el impacto empresarial, ...

CVE-2026-81779

CVE-2026-81779 is a backdoor vulnerability in the Silk Themes Newspapers X WordPress theme, discovered by ashv4ni and reported via Patchstack . It affects versions 1.0.46 through 1.0.48 and is classified as Improper Validation of Specified Quantity in Input , allowing malicious software to be imp...

VulnCheck KEV: CVE-2026-49777

Improper Validation of Specified Quantity in Input vulnerability in ShapedPlugin, LLC Product Slider Pro for WooCommerce allows Malicious Software Implanted. This issue affects Product Slider Pro for WooCommerce: from n/a before 3.5.4...

altera Quartus Prime Standard Edition Design Software 安全漏洞

The altera Quartus Prime Standard Edition Design Software is an FPGA design and development software suite from the US-based altera Corporation. A security vulnerability exists in altera Quartus Prime Standard Edition Design Software, which stems from vulnerability to DLL implantation attacks...

LeechHijack: Covert Computational Resource Exploitation in Intelligent Agent Systems

Large Language Model LLM-based agents have demonstrated remarkable capabilities in reasoning, planning, and tool usage. The recently proposed Model Context Protocol MCP has emerged as a unifying framework for integrating external tools into agent systems, enabling a thriving open ecosystem of...

TOTOLINK A7000R Certification Bypass Vulnerability

TOTOLINK A7000R is a wireless router from China's Gion Electronics TOTOLINK. The TOTOLINK A7000R suffers from an authentication bypass vulnerability that stems from formLoginAuth.htm not properly validating a login request, which can be exploited by an attacker to bypass authentication, tamper wi...

The vulnerability of the JTAG microprogramming software components in Ethernet modules WISE-4010LAN, WISE-4050LAN, and WISE-4060LAN allows intruders to implant or modify the firmware.

The vulnerability of the JTAG microprogramming software components in Ethernet modules WISE-4010LAN, WISE-4050LAN, and WISE-4060LAN is related to access control deficiencies. Exploiting this vulnerability can allow attackers to implant or modify the firmware...

CVE-2019-6695

Lack of root file system integrity checking in Fortinet FortiManager VM application images of 6.2.0, 6.0.6 and below may allow an attacker to implant third-party programs by recreating the image through specific methods...

Exploit for Unprotected Alternate Channel in Rockwellautomation Allen-Bradley_Stratix_5200_Firmware

CVE-2023-20198 Exploit PoC for CVE-2023-20198 Description...

CISA Releases Update to Threat Actors Exploiting Citrix CVE-2023-3519 to Implant Webshells

The Cybersecurity and Infrastructure Security Agency CISA has released an update to a previously published Cybersecurity Advisory CSA, Threat Actors Exploiting Citrix CVE-2023-3519 to Implant Webshells. The CSA—originally released to warn network defenders of critical infrastructure organizations...

Delta Electronics DIAEnergie 安全漏洞

Delta Electronics DIAEnergie is an industrial energy management system used to monitor and analyze energy consumption in real time, calculate energy consumption and load characteristics, optimize equipment performance, improve production processes, and maximize energy efficiency.An authorization...

Dell SupportAssist Client code issue vulnerability

Dell SupportAssist Client is a client application from Dell DELL, USA. The program provides automated, proactive and predictive techniques for troubleshooting, etc. Dell SupportAssist Client has a code issue vulnerability that can be exploited by attackers to load arbitrary .dll files using .dll...

DLL Hijacking Vulnerability in 115chrome.exe Module in 115 Computer Edition by Guangdong One One Five Technology Co.

115 PC version is a collection of 115, 115 organization, browser PC client, and 115 service perfect integration. Ltd. 115 computer version of the dll hijacking vulnerability, the attacker can be exploited to cause the user's computer to be remote control or implanted Trojan horse...

Ueeshop comment section has XSS vulnerability

Ueeshop provides e-commerce website building cross-border independent station building platform. Ueeshop comment area there is an XSS vulnerability, attackers can use the vulnerability to implant malicious js code, such as stealing cookies hanging horse and other operations...

A Bug in Facebook Messenger for Windows Could've Helped Malware Gain Persistence

Cybersecurity researchers at Reason Labs, the threat research arm of security solutions provider Reason Labs, today disclosed details of a vulnerability they recently discovered in the Facebook Messenger application for Windows. The vulnerability, which resides in Messenger version 460.16, could...

Joomla! 3.4.6 - Remote Code Execution

Exploit Title: Joomla! 3.4.6 - Remote Code Execution Google Dork: N/A Date: 2019-10-02 Exploit Author: Alessandro Groppo Vendor Homepage: https//www.joomla.it/ Software Link: https://downloads.joomla.org/it/cms/joomla3/3-4-6 Version: 3.0.0 -- 3.4.6 Tested on: Linux CVE : N/A Technical details:...

CVE-2019-6695

Lack of root file system integrity checking in Fortinet FortiManager VM application images of 6.2.0, 6.0.6 and below may allow an attacker to implant third-party programs by recreating the image through specific methods...