Joomla! Component Preventive And Reservation 1.0.5 - Local File Inclusion

A directory traversal vulnerability in the Preventive & Reservation compreventive component 1.0.5 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impacts via a .. dot dot in the controller parameter to index.php. id: CVE-2010-1475 info: name: Joomla...

CVE-2025-56383-Proof-of-Concept

Notepad++ v8.8.3 存在 DLL 劫持漏洞，可以通过替换原始 DLL 文件来执行恶意代码。 示例方法如下： （请注意，以下演示使用 npp.8.8.3.Installer.x64.exe 安装 Notepad++ 进行测试，但实际上，任何已安装的 Notepad++ 都会受到此漏洞的影响） 将原始 DLL（例如 Notepad++\plugins\NppExport\NppExport.dll）替换为包含恶意代码的同名 DLL 文件（原始导出函数被转发到原始 DLL），这样在执行 Notepad++.exe 时，就可以执行恶意代码。...

mal_unpack

malunpack Dynamic unpacker based on PE-sieve 📖 Read more . It deploys a packed malware, waits for it to unpack the payload, dumps the payload, and kills the original process. !CAUTION This unpacker deploys the original malware. Use it only on a VirtualMachine. ⚙ Usage Basic usage: root@kitploit:...

modelaudit

ModelAudit Asegura tus modelos de IA antes del despliegue. Escáner estático que detecta código malicioso, posibles indicadores de puerta trasera y vulnerabilidades de seguridad en archivos de modelos de ML — sin cargarlos ni ejecutarlos nunca. Documentación completa | Ejemplos de uso |...

CVE-2023-35674

Description CVE-2023-35674 is a high-severity zero-day security vulnerability in the Android Framework. This vulnerability allows an attacker to escalate their privileges without requiring user interaction or additional execution permissions. The vulnerability occurs in how the Android Framework...

inspec_cve_2019_15224

一个恶意的 rest-client gem 2019年8月19日，发现rest-client gem有多个版本发布了包含恶意代码。在发现恶意的rest-client的同时，还确定了其他几个新的 gem 也携带了类似的代码。 相关报道： https://www.securityweek.com/backdoor-found-rest-client-ruby-gem https://www.theregister.co.uk/2019/08/20/rubygemhacked/ https://www.macobserver.com/news/ruby-11-backdoors/...

web_exploit_detector

Web Exploit Detector Introduction The Web Exploit Detector is a Node.js application and NPM module used to detect possible infections, malicious code and suspicious files in web hosting environments. This application is intended to be run on web servers hosting one or more websites. Running the...

php-malware-finder

PHP Malware Finder root@kitploit: | || || || | | | | || || | | || || || | Webshell finder, | || || | kiddies hunter, | | | |||| || | website cleaner. || || |||| Detect potentially malicious PHP files. What does it detect? PHP-malware-finder does its very best to detect obfuscated/dodgy code as we...

node-ipc-malware-protestware-CVE-2022-23812

CVE-2022-23812 RIAEvangelist/node-ipc 是恶意软件/抗议软件 RIAEvangelist/node-ipc 模块包含抗议软件 peacenotwar。 来自 RIAEvangelist/node-ipc 的摘录： 自 v11.0.0 和 v9.2.2 起 ，此模块使用了 peacenotwar 模块。 更重要的是，RIAEvangelist/node-ipc 的提交 847047cf7f81ab08352038b2204f0e7633449580 - 6e344066a0464814a27fbd7ca8422f473956a803 包含恶意软件。 ⚠️|...

CVE-2024-3094-XZ-Backdoor-Detector

Descripción Se descubrió código malicioso en los tarballs originales de xz, comenzando con la versión 5.6.0. A través de una serie de ofuscaciones complejas, el proceso de compilación de liblzma extrae un archivo objeto precompilado de un archivo de prueba disfrazado existente en el código fuente...

vbSparkle

¿Qué es vbSparkle? vbSparkle es un desofuscador de Visual Basic multiplataforma, de fuente a fuente, basado en evaluación parcial y dedicado principalmente al análisis de código malicioso escrito en VBScript y VBA Macro de Office. Está escrito en C nativo y proporciona una biblioteca .Net Standar...

CVE-2022-45472

CVE-2022-45472 基于DOM的XSS 软件：CAE Learning Space Enterprise（含Intuity许可证） 镜像版本：267r 补丁级别：639 漏洞：基于DOM的XSS 描述 CAE Learning Space Enterprise 管理软件容易受到基于DOM的XSS攻击。基于DOM的XSS攻击是指用户向主机发送一个可执行的载荷，从而在受害者的浏览器中从原始客户端脚本修改DOM环境。该攻击是通过手动搜索Burp请求，使用名为Dalfox https://github.com/hahwul/dalfox...

Microsoft-Office-Word-MSHTML-Remote-Code-Execution-Exploit

Microsoft-Office-Word-MSHTML-Remote-Code-Execution-Exploit CVE-2021-40444 EXPLOIT TO USE IN METASPLOIT, ALLOWS ATTACKERS TO GET AN REMOTE CODE EXECUTION THROUGH MICROSOFT OFFICE WORD BY INJECTING MALICIOUS CODE IN THE FILE...

CVE-2024-3094-checker

CVE-2024-3094 检查器 xz Utils 5.6.0 和 5.6.1 版本似乎已被植入后门。 XZ Utils 是一款数据压缩软件，可能存在于 Linux 发行版中。 该恶意代码可能允许对受影响系统进行未授权访问。 来源： https://vulners.com/cve/CVE-2024-3094 https://access.redhat.com/security/cve/CVE-2024-3094 https://www.redhat.com/en/blog/urgent-security-alert-fedora-41-and-rawhide-users...

MAL-2026-16131 Malicious code in aitextutils-py (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 59b5d893cd227654dae3bd7964e54ba20c99963660993e4239f34bba0d50b772 This package executes code from malicious dependency, which hides code downloading script, which then downloads and executes a heavily obfuscated final stage...

Malicious code in aitextkit-py (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 73303124008a821f9096bc4899d8df4302abc2e0f86822660422f855a1bc65cb The package hides code downloading script, which then downloads and executes a heavily obfuscated final stage. The remote stages are hosted on a domain...

MAL-2026-16128 Malicious code in pymem-win (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c611131ac135f4608698ce56eebd7dc89623b591510a050f2059369c9d51bbf Pymem-win is a near-verbatim copy of the legitimate upstream Pymem package reusing its description, repository URL github.com/srounet/Pymem, and auth...

MAL-2026-16129 Malicious code in web3-eth-account (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19e3eadaccc63a1e12d0e3cfe153cbf78e114f30285d4da3694990827e5f5c5a The package web3-eth-account typosquats the legitimate eth-account library and copies its metadata ApeWorX/ethereum.org author addresses, README...

Malicious code in strapi-plugin-vinsoc-1109 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4dbb0aa83cfffbdd408abb8f73299d5a47a0e9855c65b5940bb22112e0928d41 The package's postinstall lifecycle script node postinstall.js || true fires automatically on npm install. postinstall.js reads os.hostname, embeds t...

Debinject

Debinject 将恶意代码注入 .deb 包中 维护者 Alisson Moretto | Twitter: @UndeadSec Github: @UndeadSec 视频演示 克隆 root@kitploit: git clone https://github.com/UndeadSec/Debinject.git 运行 root@kitploit: cd Debinject root@kitploit: python debinject.py 先决条件 python 2.x dpkg dpkg-deb metasploit 免责声明 仅供教育目的使用 使用 Debinject...