143 matches found
CertVerify
CertVerify CertVerify 是一款旨在检测使用不受信任或已泄露的代码签名证书签名的可执行文件（exe、dll、sys）的工具。该工具的目的是识别那些使用已被泄露、被盗或来自不可信来源的证书签名的潜在恶意文件。 为什么需要这个工具？ 使用已被泄露或不受信任的代码签名证书签名的可执行文件可用于分发恶意软件和其他恶意程序。攻击者可以利用这些文件绕过安全控制，使其恶意软件对受害者看似合法。此工具有助于识别这些文件，以便进一步移除或调查。 作为之前恶意软件扫描器项目的延续，我创建了这样一个工具。在安全事件应急响应中，此类工具也至关重要。 使用范围与限制 1. CertVerify...
malwarescanner
MalwareScanner Very basic malware Scanner by hash comparison Sometimes this can be needed when an incident response. If you found new or suspicious files when you do response, you want to check out where these files exist in systems. so then you may need like this tool. this is a demo version. no...
browser-xpi-malware-scanner
XPI Analyzer — Firefox扩展安全扫描器 一款命令行工具，用于分析Firefox扩展文件（.xpi），检测恶意软件、混淆、隐藏载荷、隐写术以及其他用于绕过扩展审查团队的恶意代码技术。 功能概述 extension-scanner.py 会解压Firefox扩展，并对其内部每个文件执行一系列安全检查，最终生成一份按严重性分级、带有颜色编码的报告。 如何使用本扫描器在Firefox/Mozilla扩展商店中实时发现恶意软件并进行深入分析 – 指南/教程 恶意软件分析：使用browser-xpi-malware-scanner.py在野捕获恶意软件...
masc
masc A malware web scanner developed during CyperCamp Hackathon 2017 About homepage PyPI Features At the moment, there are some features avaiable for any type of website custom or CMS and some of them only available for specific platforms: Scan any website for malware using OWASP WebMalwareScanne...
masc
masc 一款在 CyperCamp 2017 黑客松期间开发的恶意软件（网络）扫描器 关于 主页 PyPI 功能 目前，某些功能适用于任何类型的网站（自定义或CMS），而某些功能仅适用于特定平台： 使用 OWASP WebMalwareScanner 校验和、YARA 规则数据库以及 ClamAV 引擎（如果可用）扫描任何网站的恶意软件 执行一些清理操作以增强网站防护 监控网站的变更。详细信息会记录在日志文件中 扫描您的网站以了解是否感染了恶意软件 列出本地备份 日志支持 备份网站 恢复网站 扫描可疑文件并与干净安装版本进行比较（适用于 Wordpress 和 Drupal）...
linux-malware-detect
Linux Malware Detect LMD Malware scanner for Linux — multi-stage threat detection MD5, SHA-256, HEX, YARA, statistical analysis, ClamAV integration, real-time inotify monitoring, quarantine/clean/restore operations, and multi-channel alerting email, Slack, Telegram, Discord. C 2002-2026, R-fx...
Fedora 44 : clamav (2026-ecf6fe868f)
The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-ecf6fe868f advisory. 1.4.6 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for these...
CVE-2026-53655 node-tar applies PAX size override to intermediary GNU long-name/long-link headers, causing tar parser interpretation differential (file smuggling)
node-tar is a full-featured Tar for Node.js. Prior to 7.5.16, tar node-tar applies a PAX extended header's size= record and other PAX overrides to the next header entry of any type, including intermediary metadata headers such as a GNU long-name L or long-link K entry. Per POSIX pax, a PAX extend...
Exploit for Race Condition in Canonical Ubuntu_Linux
Dillu-Analyzer 🛡️ Dillu Analyzer — A web-based universal malwa...
CVE-2026-20056 Cisco Secure Web Appliance TBD Bypass Vulnerability
A vulnerability in the Dynamic Vectoring and Streaming DVS Engine implementation of Cisco AsyncOS Software for Cisco Secure Web Appliance could allow an unauthenticated, remote attacker to bypass the anti-malware scanner, allowing malicious archive files to be downloaded. This vulnerability is du...
CVE-2026-20056
Cisco AsyncOS for Cisco Secure Web Appliance is affected by a DVS Engine vulnerability (CVE-2026-20056) that can allow an unauthenticated remote attacker to bypass the anti‑malware scanner and cause download of malicious archive files. The issue stems from improper handling of certain archives, e...
CVE-2024-39599
Due to a Protection Mechanism Failure in SAP NetWeaver Application Server for ABAP and ABAP Platform, a developer can bypass the configured malware scanner API because of a programming error. This leads to a low impact on the application's confidentiality, integrity, and availability...
The vulnerability of the Malcure Malware Scanner plugin in the WordPress content management system allows a hacker to execute arbitrary code.
The vulnerability of the Malcure Malware Scanner plugin in the WordPress content management system is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
EUVD-2018-3283
Malware in sbrugna...
EUVD-2024-23204
Malicious code in bioql PyPI...
EUVD-2022-25258
Malicious code in bioql PyPI...
EUVD-2023-56849
Malicious code in bioql PyPI...
EUVD-2024-38119
Malicious code in bioql PyPI...