Joomla! Component Preventive And Reservation 1.0.5 - Local File Inclusion

A directory traversal vulnerability in the Preventive & Reservation compreventive component 1.0.5 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impacts via a .. dot dot in the controller parameter to index.php. id: CVE-2010-1475 info: name: Joomla...

web_exploit_detector

Web Exploit Detector Introduction The Web Exploit Detector is a Node.js application and NPM module used to detect possible infections, malicious code and suspicious files in web hosting environments. This application is intended to be run on web servers hosting one or more websites. Running the...

modelaudit

ModelAudit Asegura tus modelos de IA antes del despliegue. Escáner estático que detecta código malicioso, posibles indicadores de puerta trasera y vulnerabilidades de seguridad en archivos de modelos de ML — sin cargarlos ni ejecutarlos nunca. Documentación completa | Ejemplos de uso | Formatos...

mal_unpack

malunpack Dynamic unpacker based on PE-sieve 📖 Read more . It deploys a packed malware, waits for it to unpack the payload, dumps the payload, and kills the original process. !CAUTION This unpacker deploys the original malware. Use it only on a VirtualMachine. ⚙ Usage Basic usage: malunpack.exe...

node-ipc-malware-protestware-CVE-2022-23812

CVE-2022-23812 RIAEvangelist/node-ipc는 멀웨어 / 프로테스트웨어입니다 RIAEvangelist/node-ipc 모듈에는 프로테스트웨어 peacenotwar가 포함되어 있습니다. RIAEvangelist/node-ipc 발췌문: v11.0.0 및 v9.2.2부터 이 모듈은 peacenotwar 모듈을 사용합니다. 더 중요한 것은 RIAEvangelist/node-ipc의 커밋 847047cf7f81ab08352038b2204f0e7633449580 -...

Malicious code in caoxiltts (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 c0d27d780e356c6ae75dedaa144f2064476e275a02f801a1d56897a3a9d1930f The package imitates real activity and instead deploys a coin miner. --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...

inspec_cve_2019_15224

악성 rest-client gem 2019년 8월 19일, rest-client gem에 악성 코드를 포함한 여러 버전이 게시된 것이 발견되었습니다. 악성 rest-client를 발견하는 과정에서, 몇몇 다른 새로운 gem들도 유사한 코드를 포함하고 있는 것으로 확인되었습니다. 관련 보도: https://www.securityweek.com/backdoor-found-rest-client-ruby-gem https://www.theregister.co.uk/2019/08/20/rubygemhacked/...

php-malware-finder

PHP Malware Finder | || || || | | | | || || | | || || || | Webshell finder, | || || | kiddies hunter, | | | |||| || | website cleaner. || || |||| Detect potentially malicious PHP files. 何を検出しますか？ PHP-malware-finder は、難読化された/怪しいコードや、マルウェア/ウェブシェルでよく使われる PHP 関数を使用しているファイルを検出するために最善を尽くします。...

CVE-2025-56383-Proof-of-Concept

Notepad++ v8.8.3にはDLLハイジャックの脆弱性があり、元のDLLファイルを置き換えて悪意のあるコードを実行できる可能性があります。 以下にその例を示します。 （以下のデモでは、テスト用にnpp.8.8.3.Installer.x64.exeを使用してNotepad++をインストールしていますが、実際にはインストールされているすべてのNotepad++がこの脆弱性の影響を受けます）...

CVE-2024-3094-XZ-Backdoor-Detector

설명 xz의 업스트림 tarball에서 버전 5.6.0부터 악성 코드가 발견되었습니다. 일련의 복잡한 난독화를 통해 liblzma 빌드 프로세스는 소스 코드에 존재하는 위장된 테스트 파일에서 미리 빌드된 오브젝트 파일을 추출하여 liblzma 코드의 특정 함수를 수정하는 데 사용합니다. 그 결과 수정된 liblzma 라이브러리가 생성되며, 이 라이브러리에 링크된 모든 소프트웨어에서 사용될 수 있으며, 이 라이브러리와의 데이터 상호 작용을 가로채고 수정합니다. 영향을 받는 버전 XZ Utils 5.6.0 XZ Utils 5.6....

vbSparkle

vbSparkle とは？ vbSparkle は、部分評価に基づくソースコード間のマルチプラットフォーム Visual Basic 難読化解除ツール であり、主に VBScript と VBA（Office マクロ）で書かれた悪意のあるコードの解析を目的としています。 ネイティブ C で書かれており、.Net Standard ライブラリ を提供します。Windows、Linux、MacOS などで動作します。 Visual Basic Script と VBA のパースは、ANTLR の文法＆レクサーパーサーを使用して処理されます。 セットアップ パッケージマネージャー...

CVE-2022-45472

CVE-2022-45472 DOMベースXSS ソフトウェア: CAE Learning Space Enterprise with Intuity License イメージバージョン: 267r パッチレベル: 639 脆弱性: DOMベースXSS 説明 CAE Learning Space Enterprise 管理ソフトウェアは、DOMベースXSS攻撃に対して脆弱です。DOMベースXSS攻撃とは、ユーザーが実行可能なペイロードをホストに送信し、その結果として、元のクライアントサイドスクリプトから被害者のブラウザ内のDOM環境を変更する攻撃です。この攻撃は、Burp...

Microsoft-Office-Word-MSHTML-Remote-Code-Execution-Exploit

Microsoft-Office-Word-MSHTML-Remote-Code-Execution-Exploit CVE-2021-40444 메타스플로잇에서 사용할 익스플로잇입니다. 공격자가 파일에 악성 코드를 주입하여 Microsoft Office Word를 통해 원격 코드 실행을 얻을 수 있습니다...

MAL-2026-17457 Malicious code in voxeval (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 4ffc5162b3b77de40988aa702c4493260a4f0b4f09d5f4719feabcd69f33908a The package imitates real activity and instead deploys a coin miner. --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...

CVE-2024-3094-checker

CVE-2024-3094 チェッカー xz Utils バージョン 5.6.0 および 5.6.1 は侵害されているようです。 XZ Utils はデータ圧縮ソフトウェアであり、Linux ディストリビューションに含まれている可能性があります。悪意のあるコードにより、影響を受けるシステムへの不正アクセスが可能になる可能性があります。 ソース: https://vulners.com/cve/CVE-2024-3094 https://access.redhat.com/security/cve/CVE-2024-3094...

Malicious code in dedh-devops-automation (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 e623272b4de65cc8af24a44d5405d9f6baa2c42896b50f9b7e0e5f294bfd2722 During installation, the package deploys a rogue AWS Lambda function to collect credentials from Secret Manager as well as collect other data. Data are then...

Malicious Package

Overview ichigo-baileys is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview brioche-apl-dev-env is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview @smart-dev-wa/baileys is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview ai-workshop-maa15-radio is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packa...