CVE-2024-3094_xz_check

CVE-2024-3094 xz Check Script This repository contains a Bash script and a one-liner command to verify if a system is running a vulnerable version of the "xz" utility, as specified by CVE-2024-3094. See the description and impact statement below from information available via RedHat...

xzutils_backdoor_obfuscation

xzutilsbackdoorobfuscation This script recreates the obfuscation technique used for the XZ utils attack CVE-2024-3094. It has been tested for xzutils v5.6.0 only. ⚠️ This code is provided for educational purposes only and should not be used for malicious activities. Use at your own risks. ⚠️...

Symlink Attack

Overview flash-attention is a Flash Attention2 operator on Huawei Ascend 910A. Affected versions of this package are vulnerable to Symlink Attack via the downloadandcopy function in hopper/setup.py when extracting archives without validating symlinks or filtering tar members. An attacker can...

PT-2026-43231

Name of the Vulnerable Software and Affected Versions Collectric CMU version 1.0 Description An issue exists where unauthenticated attackers can manipulate database queries during authentication. This is achieved by injecting SQL code through the lang parameter in login requests, allowing the...

Web Intellectual Property at Risk: Preventing Unauthorized Real-Time Retrieval by Large Language Models

The protection of cyber Intellectual Property IP such as web content is an increasingly critical concern. The rise of large language models LLMs with online retrieval capabilities enables convenient access to information but often undermines the rights of original content creators. As users...

C2-Hunter - Extract C2 Traffic

C2-Hunter C2-Hunter is a program designed for malware analysts to extract Command and Control C2 traffic from malwares in real-time. The program uses a unique approach by hooking into win32 connections APIs. With C2-Hunter, malware analysts can now intercept and analyze communication in real-time...

Commit Stream - OSINT Tool For Finding Github Repositories By Extracting Commit Logs In Real Time From The Github Event API

commit-stream drinks commit logs from the Github event firehose exposing the author details name and email address associated with Github repositories in real time. OSINT / Recon uses for Redteamers / Bug bounty hunters: Uncover repositories which employees of a target company is commiting code...

Universal Man in the Browser Attacks

Researchers have discovered a new type of Man-in-the-Browser MItB attack that is Website independent, and does not target specific Websites, but instead collects data submitted to all sites. Trusteer have discovered a new Man in the Browser MitB scam that can collects data submitted to all websit...