zarp

介绍 Zarp 是一个专注于本地网络攻击的网络攻击工具。它不包括系统层面的利用，而是通过滥用网络协议和协议栈来实现接管、渗透和瘫痪。可以管理会话，快速同时毒化和嗅探多个系统，自动或直接向攻击者转储敏感信息。包含多种嗅探器，可自动解析各种协议的用户名和密码，以及查看HTTP流量等。还包括DoS攻击，用于瘫痪各种系统和应用程序。这些工具为在活跃网络上快速、干净、隐蔽地实施非常复杂的攻击场景提供了可能性。 zarp 的长期目标是成为网络的中央指挥中心；提供一个模块化、定义清晰的框架，能够对整个网络进行强大的概览和深入分析。这将通过未来集成的 Web 应用程序前端来实现，它相当于电视屏幕，而 C...

CVE-2026-20841

CVE-2026-20841 PoC “Windows 记事本 RCE”漏洞的 PoC。 免责声明 1. 我不是这个漏洞的发现者。向官方披露页面上列出的原作者致敬。我只是根据描述重新创建了这个 PoC。 2. 我个人认为这个漏洞并没有看起来那么严重。触发它需要 不止 一次点击，除非目标系统满足特定条件。请参阅标准与限制部分。我重新创建这个 PoC 是因为它实在太有梗了。“记事本 RCE”听起来简直离谱。 描述 这个“漏洞”很简单。Windows 记事本的 Markdown 引擎不关心冷门的 URL 协议。作为一名恶意软件分析师，我读过许多关于基于 WebDAV 和 SMB...

LetsDefend-SOC173-Follina-0-Day-Detected

LetsDefend-SOC173-Follina-0-Day-Detected Follina CVE-2022-30190 の脆弱性を検出したことを示すセキュリティアラートが表示されています。悪意のあるWord文書がmsdt.exeの実行を引き起こし、ホストJonasPRDでリモートコード実行が行われた可能性があります。私たちのタスクは、アラートを調査し、悪用を確認し、影響を評価し、是正措置を推奨することです。 ケース詳細 2022年6月2日15時22分、SOC173 - Follina 0-Day Detected SIEMルール...

PT-2026-56358

Name of the Vulnerable Software and Affected Versions Foxit Reader affected versions not specified Description An XML External Entity XXE issue exists where the application processes files that are not strictly in a structurally valid PDF format. By opening a malicious document disguised as a PDF...

CVE-2026-43974

A flaw was found in gun. A malicious HTTP server can exploit this vulnerability by sending an unsolicited '101 Switching Protocols' response to a gun client. This action forces the client into a raw protocol mode, allowing the server to flood the client with arbitrary data. This uncontrolled data...

CVE-2026-49129

Music Player Daemon MPD before version 0.24.11 contains a server-side request forgery vulnerability in CurlInputPlugin where CURLOPTFOLLOWLOCATION is set without CURLOPTREDIRPROTOCOLSSTR, allowing unauthenticated attackers to bypass the http/https scheme restriction by causing a malicious HTTP...

PT-2026-43271

Name of the Vulnerable Software and Affected Versions FastNetMon Community Edition versions prior to 1.2.10 Description An out-of-bounds read exists in the NetFlow v9 options template parser. In the process netflow v9 options template function, the scope parsing loop iterates until scopes offset...

Chamilo 代码问题漏洞

Chamilo is an open-source learning management system developed by Chamilo. Version Chamilo 2.0-RC.2 has code vulnerabilities. These vulnerabilities stem from the fact that the install.ajax.php file can be accessed without authentication. This could allow unauthorized attackers to exploit the SMTP...

The Fake Domain Controller You Didn’t See Coming: Detecting DCShadow Attacks Using Trellix NDR

The Fake Domain Controller You Didn’t See Coming: Detecting DCShadow Attacks Using Trellix NDR By Maulik Maheta and Chao Sun · December 17, 2025 Executive summary DCShadow is a covert post-exploitation technique that enables an attacker to impersonate a domain controller and make unauthorized,...

Malicious code in avminh-afais-fodmfafaghog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 120e792440d245e7d4c5fde052ae49a185fa847bdc26359dfa8b7dc7e33abca3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dual_chicken_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddc3fe3453adf31dffd93596877420acaea268ce6425903a920f108a98109d03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-119919 Malicious code in fadhil-tempe57-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac82538c0bb5a230dbf4d5254d7d0595a86e05ab6910cfaab56113547327ad87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108677 Malicious code in silky_cow-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 564ce291389884b5eae3820e3e1d5f13e088c98e24e798510f513fa749621215 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100921 Malicious code in content_mammal_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87614b396561841eb18e4641238aa8f180c052c249666011ed902fea496f0c29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zul-esdoger21-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac2b2b60c23f64d56f83ebd523ddafaab4b7908fe48e5fa9f97fc71e07572c39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-53463 Malicious code in nana-kupang69-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6038a05f9bdd6ea25e6c3afd30feb62a8cfd3e590e402d694bf6ffd9cda4624 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-28700

Malicious code in bioql PyPI...

CVE-2025-40752

A vulnerability has been identified in POWER METER SICAM Q100 7KG9501-0AA01-0AA1 All versions = V2.60 = V2.60 = V2.60 = V2.60 = V2.70 V2.80. Affected devices store the password for the SMTP account as plain text. This could allow an authenticated local attacker to extract it and use the configure...

golang: net/http/internal: Denial of Service (DoS) via Resource Consumption via HTTP requests

A flaw was found in the Golang net/http/internal package. This issue may allow a malicious user to send an HTTP request and cause the receiver to read more bytes from network than are in the body up to 1GiB, causing the receiver to fail reading the response, possibly leading to a Denial of Servic...

Vulnerability of the Server component: Security: Roles of the Oracle MySQL Server database management system, which allows a hacker to cause a service failure.

The vulnerability of the Server component: Security: Roles of the Oracle MySQL Server database management system is related to insufficient validation of input data. Exploiting this vulnerability may allow an attacker to cause service interruptions using the MySQL protocol...