8797 matches found
CVE-2024-3094
xz-utils Vulnerability Check and Update Utility This script is designed to check for vulnerabilities in the installed version of xz-utils on your system. If a vulnerable version is detected, the script offers to automatically download and install a stable version to mitigate potential security...
ysoserial.net
A proof-of-concept tool for generating payloads that exploit unsafe .NET object deserialization. Description ysoserial.net is a collection of utilities and property-oriented programming "gadget chains" discovered in common .NET libraries that can, under the right conditions, exploit .NET...
CVE-2024-3094-XZ-Utils-Check
JB-Network - check-xz.sh Utility to check if you have a vulnerable version according to CVE-2024-3094. Installation To use it, open your terminal and run: cd;mkdir git;git clone https://github.com/jbnetwork-git/linux-tools.git chmod +x /git/check-xz.sh How to run? cd /git ./check-xz.sh License. M...
pythem
pythem - Penetration Testing Framework pythem is a multi-purpose pentest framework written in Python. It has been developed to be used by security researchers and security professionals. The tool intended to be used only for acts within the law. I am not liable for any undue and unlawful act...
cs50-cybersecurity-final-project
Technical Analysis of the XZ Utils Backdoor CVE-2024-3094 Video URL: https://www.youtube.com/watch?v=6hpVp7prlO8 Overview This repository contains the final project for CS50's Introduction to Cybersecurity. The project provides a thorough technical analysis of the supply chain attack on XZ Utils...
Detectar-Backdoor-en-liblzma-de-XZ-utils-CVE-2024-3094-
Detect-Backdoor-in-liblzma-of-XZ-utils-CVE-2024-3094- The following YARA rule helps detect the presence of the backdoor in the compromised liblzma library on systems using versions 5.6.0 and 5.6.1 of the XZ compression tool. This provides a mechanism to identify vulnerable systems that could be...
xz-utils-backdoor-case-study
XZ Utils Backdoor Technical Case Study ā How Maintainer Trust Became a Supply-Chain Execution Path When maintainer trust became the attack path. Overview CASE-002 reconstructs the XZ Utils / liblzma backdoor disclosed on 29 March 2024 as CVE-2024-3094. The report follows the operation from...
CVE-2024-3094
CVE-2024-3094 CVE-2024-3094 Lab Environment Setup and Report CVE-2024-3094 Practice Reproduced the backdoor inserted in XZ Utils 5.6.0 and 5.6.1 in a lab environment, analyzing SSH authentication hooking status and risks. Environment Host OS : - Windows 11 Docker : Docker Desktop 28.0.1 Dockerfil...
CVE-2024-3094
Security Review & Threat Model: CVE-2024-3094 xz-utils / OpenSSH This repository contains the results of analyzing the critical vulnerability CVE-2024-3094 backdoor in the liblzma library of the xz-utils package, leading to RCE via the OpenSSH process. As part of the project, an isolated test...
CVE-2026-14802
CVE-2026-14802 Name of the Vulnerable Software and Affected Versions create-react-app versions prior to 5.0.2 Description On macOS, the startBrowserProcess function within the openBrowser.js file of the react-dev-utils component allows for OS command injection. This issue enables remote...
twint-utils
twint-utils These are utilizations of Twint. Please check out our collaboration guidelines to contribute to these. Mutuals Detector Mufos.py uses Twint to detect a given seed accounts mutual followers. It can be incorporated into other more elaborate pipelines for social networks or millieu...
Emerson Dixell XWEB-500 - Arbitrary File Write
Emerson Dixell XWEB-500 contains an arbitrary file write caused by unauthenticated access to /cgi-bin/logoextraupload.cgi, /cgi-bin/calsave.cgi, and /cgi-bin/loutils.cgi, letting attackers write any file on the system, exploit requires no authentication. id: CVE-2021-45420 info: name: Emerson...
CVE-2024-3094-checker
CVE-2024-3094 checker xz Utils versions 5.6.0 and 5.6.1 appear to be compromised. XZ Utils is data compression software and may be present in Linux distributions. The malicious code may allow unauthorized access to affected systems. Sources: https://vulners.com/cve/CVE-2024-3094...
CVE-2024-3094
CVE-2024-3094 ā XZ Utils Backdoor For educational and authorized security research purposes only. Vulnerability Description CVE-2024-3094 is a backdoor introduced in versions 5.6.0 and 5.6.1 of XZ Utils liblzma, discovered on March 29, 2024 by security researcher Andres Freund. It was assigned a...
cs50-cybersecurity-final-project
Technical Analysis of CVE-2024-3094: XZ Utils Supply Chain Backdoor Video Demo: https://youtu.be/3xBtabSkusE?si=ChN3nBgybK4nqNLz Description: An in-depth technical and architectural breakdown of CVE-2024-3094 CVSS 10.0 Critical, the historic open-source supply chain backdoor embedded into xz-util...
ghidra-firmware-utils
Ghidra Firmware Utilities Various modules for Ghidra to assist with PC firmware reverse engineering. This was accepted as a coreboot project for GSoC 2019. Features PCI option ROM loader Implements a FS loader for PCI option ROMs handles hybrid ROMs with multiple images, e.g. legacy x86 + UEFI...
codehaus-plexus__plexus-utils_CVE-2017-1000487_3-0-15
This repository does not have a README...
XZ-Utils_CVE-2024-3094
Vulnerability Overview XZ is a data compression format present in almost every Linux distribution. liblzma is an open-source software library that handles XZ compression format. On March 29, developers discovered a supply chain attack on the XZ package, tracing it to a backdoor trojan implanted i...
threat-intel-cve-2024-3094
Threat Intelligence Report: CVE-2024-3094 ā XZ Utils Backdoor This repository contains a threat intelligence report analyzing CVE-2024-3094 , a high-profile backdoor vulnerability discovered in the xz-utils compression tool in 2024. CVE-2024-3094 is a severe supply chain compromise where a...
CVE-2024-3094-check
CVE-2024-3094 vul check tools This vulnerability allows an attacker to log into the server and execute arbitrary code without passing SSH authentication. For details, please see: https://www.openwall.com/lists/oss-security/2024/03/29/4 use curl -fsSL...