PELoader

PELoader PELoader implementa varias técnicas de inyección de shellcode y utiliza la librería libpeconv para cargar archivos PE cifrados en lugar de inyectar shellcode en un hilo remoto. Se implementaron las siguientes técnicas: Module Stomping LoadLibrary Module Stomping NtMapViewOfSection PoC...

hollows_hunter

hollowshunter...

libpeconv

libPeConv Una libreria per caricare e manipolare file PE. Obiettivi L'obiettivo di libPEConv era quello di creare un "coltellino svizzero" per il caricamento personalizzato di file PE. Raccoglie varie funzioni di supporto che puoi integrare rapidamente nel tuo loader personale. Ad esempio:...

EUVD-2023-27561

Malicious code in bioql PyPI...

EUVD-2023-27562

Malicious code in bioql PyPI...

CVE-2023-23461

Libpeconv – access violation, before commit b076013 30/11/2022...

CVE-2023-23462

Libpeconv – integer overflow, before commit 75b1565 30/11/2022...

CVE-2023-23462

Libpeconv – integer overflow, before commit 75b1565 30/11/2022...

CVE-2023-23461

Libpeconv – access violation, before commit b076013 30/11/2022...

Integer overflow

Libpeconv – integer overflow, before commit 75b1565 30/11/2022...

Code injection

Libpeconv – access violation, before commit b076013 30/11/2022...

CVE-2023-23461 Libpeconv – access violation

Libpeconv – access violation, before commit b076013 30/11/2022...

Libpeconv 输入验证错误漏洞

libPeConv is a library for loading and manipulating PE files by hasherezade individual developers. A security vulnerability exists in versions prior to Libpeconv 75b1565 30/11/2022 that stems from the presence of an integer overflow...

CVE-2023-23461 Libpeconv – access violation

Libpeconv – access violation, before commit b076013 30/11/2022...

CVE-2023-23462 Libpeconv – integer overflow

Libpeconv – integer overflow, before commit 75b1565 30/11/2022...

Libpeconv 安全漏洞

libPeConv is a library for loading and manipulating PE files by hasherezade individual developers. A security vulnerability exists in versions prior to libpeconv b076013 30/11/2022, which stems from an access conflict issue...

CVE-2023-23462 Libpeconv – integer overflow

Libpeconv – integer overflow, before commit 75b1565 30/11/2022...

CVE-2023-23462

CVE-2023-23462 maps to Libpeconv with an integer overflow in versions prior to the fix commit 75b1565 (30/11/2022). Multiple sources (NVD entry, CNNVD, PRION, CVE lists) describe Libpeconv as a library for loading/manipulating PE files and confirm an overflow condition tied to pre-commit code. Th...

CVE-2023-23461

CVE-2023-23461 refers to a Libpeconv vulnerability: an access violation in versions prior to commit b076013 (29/11/2022). The CVSSv3.1 base score is 9.8 (CRITICAL) with NETWORK attack vector, no privileges/user interaction required, and impacts to confidentiality, integrity, and availability repo...