Trojan-Spy.Win32.Small
Remote Command Execution
MD5: 8c15ec5f0137d097a345b693f0bffedb
MVID-2025-0705
malvuln.com/advisory/8c15ec5…
Backdoor.Win32.Poison.jh
Insecure Permissions
MD5: 3d9821cbe836572410b3c5485a7f76ca
MVID-2025-0704
malvuln.com/advisory/3d9821c…
Backdoor.Win32.Netbus.170
Insecure Credential Storage
MD5: 086f0693f81f6d40460c215717349a1f
MVID-2025-0703
malvuln.com/advisory/086f069…
Backdoor.Win32.ControlTotal.t
Insecure Credential Storage
MD5: 6c0eda1210da81b191bd970cb0f8660a
MVID-2025-0702
malvuln.com/advisory/6c0eda1…
HEUR.Backdoor.Win32.Poison.gen
Arbitrary Code Execution
MD5: b2e50fa38510a5ea8e11f614b1c1d0d5
MVID-2025-0701
malvuln.com/advisory/b2e50fa…
New: MISP-compatible feed for Malvuln malware vulnerability intel is live →
intel.malvuln.com
Track vulnerable malware, for researchers or anyone building CTI pipelines
Existing data live now — new entries soon
Feedback welcome
@MISPProject @CIRCL_lu #Malware #CTI
Queens University Belfast is leveraging the malvuln vulnerability database.
pure.qub.ac.uk/en/publicatio…
RansomLord NG v1.0 new release
Significant updates, fixes and new de-weaponize feature. Now exploits sixty-one ransomware family's
Adding Fog, Vanhelsing, Lynx, Makop, Pe32, Mamona
github.com/malvuln/RansomLor…
Malvuln (aka hyp3rlinx) retweeted
Microsoft Windows .XRM-MS File Type NTLM Hash Information Disclosure PoC
hyp3rlinx.altervista.org/adv…
Malvuln (aka hyp3rlinx) retweeted
Credits for CVE-2025-24054 have now been corrected thank you @msftsecresponse
#CVE-2025-24054
Malvuln (aka hyp3rlinx) retweeted
Reported to MSRC on June 29, 2018, Case CRM: 0461055432 and was told "the risk was not severe enough" @msftsecresponse will I get credit for CVE-2025-24071 for my original discovery report?
hyp3rlinx.altervista.org/adv…
packetstorm.news/files/id/14…
@0x6rss
#CVE-2025-24071
Malvuln (aka hyp3rlinx) retweeted
IBMi Navigator HTTP Security Token Bypass CVE-2024-51464
hyp3rlinx.altervista.org/adv…
Malvuln (aka hyp3rlinx) retweeted
IBMi Navigator Server Side Request Forgery (SSRF) CVE-2024-51463
hyp3rlinx.altervista.org/adv…
RansomLord (NG) version now dumps process memory (MalDump) of the exploited Malware for rapid analysis. Adds five more ransomware families for total of 54.
github.com/malvuln/RansomLor…
Malvuln (aka hyp3rlinx) retweeted
Another trivial Windows Defender "TrojanWin32Powessere.G" Mitigation Bypass
C:\Users\gg>rundll32.exe javascript:"\\..\\mshtml\\..\\PWN\\..\\mshtml,RunHTMLApplication ";alert(13)
Adversary3 updated with 700 malware and C2 panel vulnerabilities for third-party attackers LOM.
github.com/malvuln/Adversary…
Backdoor.Win32.Benju.a
Unauthenticated Remote Command Execution
MD5: 88922242e8805bfbc5981e55fdfadd71
MVID-2024-0700
malvuln.com/advisory/8892224…
Backdoor.Win32.Prorat.jz
Remote Stack Buffer Overflow (SEH)
MD5: 277f9a4db328476300c4da5f680902ea
MVID-2024-0699
malvuln.com/advisory/277f9a4…
Backdoor.Win32.Amatu.a
Remote Arbitrary File Write (RCE)
MD5: 1e2d0b90ffc23e00b743c41064bdcc6b
MVID-2024-0698
malvuln.com/advisory/1e2d0b9…


