11335 matches found
cve-2024-3094
How to detect the CVE-2024-3094 I'll walk through the step-by-step process of detecting CVE-2024-3094, commonly known as the XZ Backdoor, in containers using Trend Micro's Vision One TMAS CLI. This vulnerability presents significant risks to containerized environments, and with the right tools an...
gate0
gate0 A small, auditable, terminating, deterministic micro-policy engine. Why Gate0? I built Gate0 because I was tired of debugging RegEx-based policies in production. I wanted something that was boring, bounded, and impossible to crash. If you want a flexible, general-purpose policy engine, you...
Hx0-HawkEye
🦅 Hx0 HawkEye: Full-stack lightweight capture & AI security auditing extension 【中文 / English】 1. What it is...
vibebox
an ultrafast, open-source sandbox for running coding agents safely. English | 简体中文 VibeBox is a per-project micro-VM sandbox for running coding agents on macOS Apple Virtualization Framework. It’s optimized for a daily-driver workflow: fast warm re-entry, explicit mounts, and reusable sessions. W...
perwendel__spark_CVE-2016-9177_2-5-1
Spark - a tiny web framework for Java 8 Spark 2.9.4 is out!! root@kitploit: com.sparkjava spark-core 2.9.4 Sponsor the project here https://github.com/sponsors/perwendel For documentation please go to: http://sparkjava.com/documentation For usage questions, please use stack overflow with the...
hijackthis
下载 最新构建版本 v3.x - 发布版 稳定版构建 v2 已过时 - 不再更新 （此为测试版 - 主要变更正在进行中；不过完全可安全使用） HiJackThis+ HiJackThis+ Plus （之前称为：HiJackThis Fork v3）是原始 Trend Micro HiJackThis by Merijn Bellekom 开发的一个分支和延续，后者曾是众所周知的一款工具。 目前，它是对原始引擎进行逐步100%重写的代码，旨在提供与最新 Windows 操作系统的完全兼容性，并在快速生成日志文件结果与对抗最流行恶意软件（包括其他杀毒软件未知的恶意软件）之间取得平衡。 它由...
super
📡 SPR: Open Source, secure, user friendly and fast wifi routers for your home. Overview Create an adaptive, micro-segmented network for managing WiFi devices, remote VPN access, and wired systems. One Password Per WiFi Device Policy Based / Zero Trust Network Access Per-Device DNS Rules & Ad Bloc...
CVE-2021-25253
root@kitploit: Exploit Title: Trend Micro OfficeScan Client 10.0 - ACL Service LPE Date: 2023/05/04 Exploit Author: msd0pe Vendor Homepage: https://www.trendmicro.com My Github: https://github.com/msd0pe-1 Trend Micro OfficeScan Client: Versions = icacls "C:\Program Files x86\Trend Micro\OfficeSc...
telfhash
Trend Micro ELF Hash telfhash telfhash is symbol hash for ELF files, just like imphash is imports hash for PE files. With telfhash, you can cluster ELF files by similarity based on symbols. This is particularly useful for clustering malicious samples. If a sample has no symbols, telfhash uses its...
CVE-2022-22639
Detalles Ver blog: https://www.trendmicro.com/enus/research/22/d/macos-suhelper-root-privilege-escalation-vulnerability-a-deep-di.html Explotación de CVE-2022-22639 1. Compilar con el comando: clang exploit.m -o /tmp/exploit -framework Foundation -fobjc-arc -fobjc-link-runtime...
Trend_Micro_POC
TrendMicroPOC CVE-2018-3608...
Characterization-and-Detection-of-Cross-Router-Covert-Channels
Characterization and Detection of Cross-Router Covert Channels This repository contains the source code used in the paper "Characterization and Detection of Cross-Router Covert Channels". To access the paper, go to Dr. Oren's laboratory website: orenlab. The full data used in the paper is...
CVE-2021-41381
CVE-2021-41381 I have come-up with a POC for Payara Micro Community 5.2021.6 - Directory Traversal, Please refer above reference field...
Micro Focus Operations Bridge Manager <=2020.05 - Remote Code Execution
Micro Focus Operations Bridge Manager in versions 2020.05 and below is vulnerable to remote code execution via UCMDB. The vulnerability allows remote attackers to execute arbitrary code on affected installations of Data Center Automation. An attack requires network access and authentication as a...
WSO2 - Cross-Site Scripting
WSO2 contains a reflected cross-site scripting vulnerability in the Management Console of API Manager 2.2.0, 2.5.0, 2.6.0, 3.0.0, 3.1.0, 3.2.0, and 4.0.0; API Manager Analytics 2.2.0, 2.5.0, and 2.6.0; API Microgateway 2.2.0; Data Analytics Server 3.2.0; Enterprise Integrator 6.2.0, 6.3.0, 6.4.0,...
adversary_emulation_library
Libreria di Emulazione degli Avversari In collaborazione con i partecipanti del Centro, il MITRE Center for Threat-Informed Defense Centro mantiene una libreria di piani di emulazione degli avversari per consentire alle organizzazioni di valutare le proprie capacità difensive contro le minacce...
CVE-2016-7255
CVE-2016-7255 Proof Of Concept dell'exploit per l'elevazione dei privilegi che utilizza CVE-2016-7255, mira a replicare la funzionalità dell'exploit trovato in natura come descritto da Trend Micro. Potresti voler correggere il recovery prima di usarlo in un contesto importante. Parte del codice è...
perwendel__spark_CVE-2018-9159_2_7_2_fixed
Spark - ein winziges Web-Framework für Java 8 NEUIGKEITEN : Spark 2.7.1 ist veröffentlicht. Bitte probieren Sie es aus und melden Sie Fehler. root@kitploit: com.sparkjava spark-core 2.7.1 Wichtig - Es gibt eine Sicherheitslücke in älteren Versionen von Spark Versionen vor 2.5.2. Bitte aktualisier...
