box-js

box.js A utility to analyze malicious JavaScript. Installation Simply install box-js from npm: npm install box-js --global box-js is also available: as a Cuckoo module see the integrations directory and Nwinternights/CuckooBoxjs; as a Dockerfile see integrations/README.md; as a package in distros...

CVE-2020-0674-Exploit

CVE-2020-0674 CVE-2020-0674 is a use-after-free vulnerability in the legacy jscript engine. It can be triggered in Internet Explorer. The exploit here is written by maxpl0it but the vulnerability itself was discovered by Qihoo 360 being used in the wild. This exploit simply pops calc. Exploit...

ZipExec

ZipExec ZipExec is a Proof-of-Concept POC tool to wrap binary-based tools into a password-protected zip file. This zip file is then base64 encoded into a string that is rebuilt on disk. This encoded string is then loaded into a JScript file that when executed, would rebuild the password-protected...

AMSI-Bypass

AMSI-Bypass Lists of AMSI triggers VBA, JScript / VBScript Reference : MISC 104 - AMSI: Fonctionnement et Contournements In VBA, JScript and VBScript, AMSI uses a circular buffer to log instructions and a list of believed suspicious functions. The use of one of those blacklisted functions trigger...

CVE-2020-0674

CVE-2020-0674 CVE-2020-0674 is a use-after-free vulnerability in the legacy jscript engine. It can be triggered in Internet Explorer. The exploit here is written by maxpl0it but the vulnerability itself was discovered by Qihoo 360 being used in the wild. This exploit simply pops calc. Exploit...

DotNetToJScript

This file is part of DotNetToJScript - A tool to generate a JScript which bootstraps an arbitrary .NET Assembly and class. Copyright C James Forshaw 2017 DotNetToJScript is free software: you can redistribute it and/or modify it under the terms of the GNU General Public License as published by th...

CVE-2017-8625_Bypass_UMCI

what is ! Windows Defender Device Guard ! Windows Defender Device Guard is a combination of enterprise-related hardware and software security features that, when configured together, will lock a device down so that it can only run trusted applications that you define in your code integrity...

CVE-2026-112985

Integer overflow or wraparound in Microsoft JScript allows an unauthorized attacker to execute code over a network...

CVE-2026-105578

Integer overflow or wraparound in Microsoft JScript allows an unauthorized attacker to execute code over a network...

CVE-2026-105578

A vulnerability exists in Microsoft JScript caused by an integer overflow or wraparound . This flaw allows an unauthorized attacker to execute code over a network. The technical impact is rated as High , potentially affecting confidentiality, integrity, and availability. While the documents confi...

EUVD-2026-122052

Integer overflow or wraparound in Microsoft JScript allows an unauthorized attacker to execute code over a network...

CVE-2026-112985

A vulnerability exists in Microsoft JScript involving an integer overflow or wraparound that could allow an unauthorized attacker to execute code over a network. While the vulnerability is confirmed with a High severity rating (CVSS 3.1 score of 7.5), the provided documents do not specify the exa...

EUVD-2026-121908

Integer overflow or wraparound in Microsoft JScript allows an unauthorized attacker to execute code over a network...

Microsoft JScript Remote Code Execution Vulnerability

Integer overflow or wraparound in Microsoft JScript allows an unauthorized attacker to execute code over a network...

Windows JScript Remote Code Execution Vulnerability

Integer overflow or wraparound in Microsoft JScript allows an unauthorized attacker to execute code over a network...

PT-2026-143573

Integer overflow or wraparound in Microsoft JScript allows an unauthorized attacker to execute code over a network...

CLEANSTART-2024-DU60116 jscript

Security vulnerability affects the ctags package. jscript...

CVE-2026-100741

Eval injection in the JScript event-script dispatcher in Progressive Robot Ltd's hMailServer, versions 6.0.0 through 6.3.3 on Windows, allows a remote, unauthenticated attacker to run arbitrary JScript inside the hMailServer service process, with the privileges of the service account, via a...

CVE-2026-100741 Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') in hMailServer

Eval injection in the JScript event-script dispatcher in Progressive Robot Ltd's hMailServer, versions 6.0.0 through 6.3.3 on Windows, allows a remote, unauthenticated attacker to run arbitrary JScript inside the hMailServer service process, with the privileges of the service account, via a...

CVE-2026-100741 Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') in hMailServer

Eval injection in the JScript event-script dispatcher in Progressive Robot Ltd's hMailServer, versions 6.0.0 through 6.3.3 on Windows, allows a remote, unauthenticated attacker to run arbitrary JScript inside the hMailServer service process, with the privileges of the service account, via a...