567 matches found
Evasor
개요 Evasor는 Windows 운영 체제에서 애플리케이션 제어 규칙을 우회하는 데 사용할 수 있는 기존 실행 파일을 찾는 자동화된 보안 평가 도구입니다. 사용하기 매우 쉽고, 빠르며, 시간을 절약하고 완전 자동화되어 설명, 스크린샷 및 완화 제안을 포함한 보고서를 생성하며, 사후 침투 단계 평가에서 블루 팀과 레드 팀 모두에 적합합니다. 요구 사항 Windows OS. Visual Studio 2017 설치. 사용 방법 Evasor 프로젝트를 다운로드하고 컴파일합니다. 참조 트리에서 App.config 파일을 프로젝트에서...
UltimateWDACBypassList
究極のWDACバイパスリスト これまでに文書化されたWDAC/Device Guard/UMCIバイパス手法、およびWDACポリシーの構築/管理/テストのための集中リソース 注: WDAC Windows Defender Application Control はMicrosoftによって「Application Control」または「Application Control for Business」に改名されました 多くのLOLBINは、以前は「Microsoft推奨ブロックルールリスト」と呼ばれていたWDACをバイパスできるアプリケーションリストに含まれています Pro Tip:...
The vulnerability of the Runtime Tools component of the Oracle WebCenter Portal web platform allows a perpetrator to gain full control over the application.
The vulnerability of the Runtime Tools component of the Oracle WebCenter Portal is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to gain full control over the application using the HTTP network protocol...
Harden-Windows-Security HardenSystemSecurity-v1.0.88.0
Harden Windows Security | A New Threat to Malware Harden Windows Safely, Securely, Only With Official Microsoft Methods How To Use Related Trust Support Security Recommendations Resources License Wiki Basic FAQs Roadmap Donation !IMPORTANT Here are Quick Access Points to Important Sections of thi...
UltimateWDACBypassList — Updated!
Ultimate WDAC Bypass List A centralized resource for previously documented WDAC/Device Guard/UMCI bypass techniques as well for building/managing/testing WDAC policies Note: WDAC Windows Defender Application Control has been rebranded by Microsoft as "Application Control" or "Application Control...
The vulnerability of the installation service of the Oracle Application Testing Suite allows a perpetrator to gain full control over the application.
The vulnerability of the installation service Install of the Oracle Application Testing Suite relates to insecure management of privileges. Exploiting this vulnerability could allow a malicious actor to gain full control over the application using the Oracle Net protocol...
The vulnerability of the Self Update Framework component of the Oracle Enterprise Manager Base Platform allows a perpetrator to gain full control over the application.
The vulnerability of the Self Update Framework component of the Oracle Enterprise Manager Base Platform software is related to insecure management of privileges. Exploiting this vulnerability could allow an attacker, operating remotely, to gain full control over the application using the HTTPS...
The vulnerability of the Internal Operations component of the Oracle Process Manufacturing (OPM) application development system allows a perpetrator to gain full control over the application. This vulnerability exists in the Oracle E-Business Suite, a software suite for enterprise automation.
The vulnerability of the Internal Operations component of the Oracle Process Manufacturing Application for process development involves deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to gain full control over the application...
CVE-2026-44997
OpenClaw before 2026.4.22 is affected by a security envelope constraint bypass in ACP child sessions. The vulnerability allows restricted subagents to spawn ACP child sessions that do not inherit depth, child-count limits, control scope, or target-agent restrictions, potentially enabling privileg...
March 10, 2026—KB5079466 (OS Build 28000.1719)
None None...
GHSA-474H-PRJG-MMW3 OpenClaw: Sandboxed sessions_spawn(runtime="acp") bypassed sandbox inheritance and allowed host ACP initialization
Summary Sandboxed sessionsspawnruntime="acp" could bypass sandbox inheritance and initialize host-side ACP runtime. The fix now fail-closes ACP spawn from sandboxed requester sessions and rejects sandbox="require" for runtime="acp". Affected Packages / Versions - Package: openclaw npm - Latest...
📄 Microsoft Windows 11 build 10.0.22631.6199 Privilege Escalation
Microsoft Windows 11 build 10.0.22631.6199 proof of concept tool that implements a notorious local privilege escalation technique on Windows. The code implements a task scheduler/DLL sideloading attack to achieve UAC bypass / privilege escalation by forcing the trusted SilentCleanup task to load...
Application Containment: How to Use Ringfencing to Prevent the Weaponization of Trusted Software
The challenge facing security leaders is monumental: Securing environments where failure is not an option. Reliance on traditional security postures, such as Endpoint Detection and Response EDR to chase threats after they have already entered the network, is fundamentally risky and contributes...
编号撤回
WatchGuard Firebox is a WatchGuard company that provides comprehensive network security services, from traditional IPS and GAV to web site/application control and malicious software prevention. This CVE number has been withdrawn...
EUVD-2010-2633
Malware in sbrugna...
EUVD-2010-1603
Malware in sbrugna...
EUVD-2020-28387
Malware in sbrugna...
EUVD-2012-4518
Malware in sbrugna...