289 matches found
yamaha-smaf-player
Yamaha SMAF 播放器 C++ 作者：Akustikrausch Andreas Wendorf 一个小型、无依赖的 Yamaha SMAF 铃声播放器 .mmf，使用 C++ 编写。你只需给它一个那些曾在 2004 年让你的三星、夏普或松下手机发出“滴滴滴滴”声的文件，它就能为你输出清晰的立体声音频。无需手机、无需固件、无需采样 ROM。只有 FM 芯片，在软件中重建。 这是一个几乎没人愿意用开放代码保存的整整十年的声音。数以百万计的这种文件仍在流传，而 从来没人完成过一个开源的播放器 ：尝试在 2004 年就停滞了，或者绕过了合成器本身。所以，这里有一个 C++...
Exploit-PoC-CVE-2021-40444-inject-ma-doc-vao-docx
CVE-2021-40444 PoC Generador de documentos docx maliciosos para explotar CVE-2021-40444 Ejecución remota de código en Microsoft Office Word La creación de este script se basa en la ingeniería inversa de la muestra utilizada en entornos reales:...
CVE-2023-49899 Origin Validation Error in X-Rite MA-T6
An unauthenticated remote attacker can execute any command on the affected device due to not correctly verifying the origin of a communication channel...
CVE-2023-49899
Summary: CVE-2023-49899 affects X-Rite MAT 6 Kohinoor embedded spectrometer software. The root cause is insufficient origin validation/input validation in the communication channel, enabling a remote, unauthenticated attacker to execute commands on the device. Vulnerability details: Affected prod...
CVE-2023-49900 Origin Validation Error in X-Rite MA-T6
An unauthenticated remote attacker is able to perform remote code execution due to incorrectly sanitized user input in the SetParameter command...
CVE-2023-49900
CVE-2023-49900 affects X-Rite MAT 6 Kohinoor embedded spectrophotometer software. The issue is an origin validation error caused by incorrectly sanitized input in the SetParameter command, enabling an unauthenticated remote attacker to achieve remote code execution. The CVSS 3.1 vector is Network...
Malicious code in amplitude-ma-ts (npm)
npm stealer. Hardcoded Discord webhook id 1497047226428690432 in postinstall Folder/bin/S.js. Exfils hostname, whoami, pwd, publicip api.ipify.org, /etc/hosts via Discord embed. v1.0.21 empty placeholder, v1.0.22 shipped payload — name-squat-then-poison. Typosquats @amplitude/ analytics scope...
MAL-2026-3028 Malicious code in amplitude-ma-ts (npm)
npm stealer. Hardcoded Discord webhook id 1497047226428690432 in postinstall Folder/bin/S.js. Exfils hostname, whoami, pwd, publicip api.ipify.org, /etc/hosts via Discord embed. v1.0.21 empty placeholder, v1.0.22 shipped payload — name-squat-then-poison. Typosquats @amplitude/ analytics scope...
EUVD-2025-143022
Malicious code in buis-suninna-ma npm...
EUVD-2025-140276
Malicious code in miands-ma-nuru npm...
EUVD-2025-143146
Malicious code in buis-manis-ma npm...
EUVD-2025-143256
Malicious code in anita-manahuddat-ma npm...
EUVD-2025-143254
Malicious code in anita-manuat-ma npm...
EUVD-2025-143259
Malicious code in anita-manahudat-ma npm...
EUVD-2025-143255
Malicious code in anita-manhuat-ma npm...
Malicious code in anita-manahuddat-ma (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b3de13d54ba9842e6d52f3da49c6c944ccad04b31de8f5a2ad44f9ae82e6955 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-144454
Malicious code in hereis-ma-ta npm...
EUVD-2025-147281
Malicious code in uaragifa-ma-safu npm...