132 matches found
-EXPLOIT-CVE-2023-36025
EXPLOIT CVE-2023-36025 - Descripción Vulnerabilidad de omisión de la característica de seguridad de Windows SmartScreen Uso NOTA: el handler esperando petición TCP para el objetivo P.D.: configure el archivo CVE-2023-36025.vbs para cambiar la ip y el puerto a la ip y puerto de la máquina que se...
-SCTT-2026-33-0002-DWM-Visual-Field-Singularity
SCTT-2026-33-0002：DWM 视觉场奇点 📡 理论分类 ID： SCTT-2026-33-0002 研究员： Americo Simoes SimoesCTT 物理学依据： 定理 4.2 - 湍流相变 TPT 常数： α = 0.0302011 目标： 桌面窗口管理器 dwm.exe / Windows 图形组件 取代： CVE-2026-20805 与 CVE-2026-20871（视觉闩锁补丁） 🚀 概述 SCTT-2026-33-0002 将视觉场奇点 武器化。虽然微软最新的补丁侧重于防止 ALPC 端口泄漏和对象生命周期悬垂，但它们对时间性视觉叠加 仍然视而不见。...
DroppedConnection
DroppedConnection Cisco ASA Anyconnect VPN サービスをエミュレートし、あらゆる認証情報を受け入れて（そしてログに記録して）から、ユーザーのコンテキストで実行される VBS をクライアントに配信します。 ブログ記事: https://research.nccgroup.com/2023/03/01/making-new-connections-leveraging-cisco-anyconnect-client-to-drop-and-run-payloads/ 使用方法 1. ファイルをサーバーにコピーします。 2...
macro_pack
macropack संक्षिप्त विवरण चेतावनी: मैक्रोपैक 2021 से अनुरक्षित नहीं है, यदि आप एक प्रो हैं और आरंभिक पहुंच, ब्रीच मानने, ईडीआर बाईपास के लिए आक्रामक सुरक्षा उपकरणों की आवश्यकता है, तो https://www.balliskit.com देखें मैक्रोपैक कम्युनिटी एक उपकरण है जिसका उपयोग एमएस ऑफिस दस्तावेज़ या वीबीएस जैसे...
macro_pack
macropack Short description Warning: MacroPack is not maintained since 2021, if you are a pro and need Offensive infosec tools for initial access, assume breach, EDR bypass, check https://www.balliskit.com MacroPack Community is a tool used to automatize obfuscation and generation of retro format...
MAL-2026-11149 Malicious code in streak-core-math (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 073175f6a0065dc5cc00d30357053432c69fbc7aab8b92bbe4217ad3d54c5d3a index.mjs executes a top-level async IIFE on import that fetches https://f004.backblazeb2.com/file/dp8hbvocjd2fpza/helper.zip, unzips it into...
Malicious code in node-fetch-utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78aef0d64a7d761d2987d27aea462083425e5692475cd81332b7a3152c754308 On Windows, scripts/postinstall.js XOR-decodes a hardcoded C2 host node22.lunes.host:3258, authenticates with a 5-minute rolling HMAC-SHA256 token,...
Microsoft Warns of WhatsApp Attachments Spreading Backdoor on Windows PCs
Microsoft warns of a WhatsApp attachments spreading VBS malware that installs backdoors on Windows PCs, giving hackers remote access and control systems...
Microsoft Warns of WhatsApp-Delivered VBS Malware Hijacking Windows via UAC Bypass
Microsoft is calling attention to a new campaign that has leveraged WhatsApp messages to distribute malicious Visual Basic Script VBS files. The activity, beginning in late February 2026, leverages these scripts to initiate a multi-stage infection chain for establishing persistence and enabling...
WhatsApp malware campaign delivers VBScript and MSI backdoors
In this article 1. Attack chain overview 2. Mitigation and protection guidance 3. Hunting queries 4. Indicators of compromise Microsoft Defender Experts observed a campaign beginning in late February 2026 that uses WhatsApp messages to deliver malicious Visual Basic Script VBS files. Once execute...
CVE-2026-20819 Windows Virtualization-Based Security (VBS) Information Disclosure Vulnerability
...
New Malware Campaign Delivers Remcos RAT Through Multi-Stage Windows Attack
Cybersecurity researchers have disclosed details of a new campaign dubbed SHADOWREACTOR that employs an evasive multi-stage attack chain to deliver a commercially available remote administration tool called Remcos RAT and establish persistent, covert remote access. "The infection chain follows a...
Microsoft Windows Virtualization-Based Security Enclave 安全漏洞
Microsoft Windows Virtualization-Based Security Enclave Microsoft Windows VBS Enclave is a software-based trusted execution environment in the address space of host applications from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows Virtualization-Based Security...
Malicious code in vbs-common (npm)
The package vbs-common was found to contain malicious code...
Malicious code in vbs-theme (npm)
The package vbs-theme was found to contain malicious code...
MAL-2025-38161 Malicious code in vbs-ng2-shared (npm)
The package vbs-ng2-shared was found to contain malicious code...
Malicious code in vbs-ng2-shared (npm)
The package vbs-ng2-shared was found to contain malicious code...
MAL-2025-38160 Malicious code in vbs-common (npm)
The package vbs-common was found to contain malicious code...
Microsoft Windows Virtualization-Based Security Enclave 数据伪造问题漏洞
Microsoft Windows Virtualization-Based Security Enclave Microsoft Windows VBS Enclave is a software-based trusted execution environment in the host application address space from Microsoft Corporation USA. Microsoft Windows Virtualization-Based Security Enclave Microsoft Windows VBS Enclave is...
