CVE-2025-60349

CVE-2025-60349: Pxscan 임의 프로세스 종료 Prevx v3.0.5.220에서 발견된 문제로, 공격자가 pxscan.sys 드라이버에 IOCTL 코드 0x22E044를 전송하여 서비스 거부DoS를 유발할 수 있습니다. 레지스트리 키 HKEYLOCALMACHINE\System\CurrentControlSet\Services\pxscan\Files 아래에 나열된 모든 프로세스가 종료됩니다. 2025년 8월, Dylan Reuter가 발견했습니다. 참고 자료:...

CVE-2026-36425

CVE-2026-36425 : OPSWAT AppRemover 임의 프로세스 종료 요청 시 모든 프로세스를 종료할 수 있는 서명된 OPSWAT 커널 드라이버입니다. 관리자 권한이 필요 없고, 권한 검사도 없으며, 어떤 질문도 하지 않습니다. EDR, 안티바이러스, PPL로 보호된 프로세스를 지정하면 해당 프로세스가 종료됩니다. 세 가지 종료 방법이 모두 커널 모드에서 실행되며, 모든 로컬 사용자의 단일 IOCTL로 트리거됩니다. 16개의 취약한 드라이버 변종이 확인되었으며, 모두 유효하게 서명되었습니다. ⚠️ 이 저장소는 교육 ...

CVE-2025-66676

CVE-2025-66676 IOBit Unlocker 1.3.0.11 및 이전 버전에서, 애플리케이션이 파일 잠금 해제를 시도함으로써 임의의 프로세스를 종료할 수 있습니다. 배경 이 애플리케이션은 잠금 해제된 파일의 잠금을 해제하는 데 사용됩니다. 실행 중인 프로세스의 프로세스 이미지 파일을 잠긴 파일로 지정하면, IOBit Unlocker는 커널 모드에서 해당 실행 중인 프로세스프로세스 이미지 파일을 '잠근' 프로세스를 종료하려고 시도합니다. 체크섬을 사용하여 임의의 프로세스가 드라이버와 상호작용하는 것을 방지하는 간단한 제...

CVE-2026-15599 Arbitrary Process Termination in TÜBİTAK BİLGEM's pardus-domain-joiner

Unverified ownership vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute pardus-domain-joiner allows Privilege Abuse. This issue affects pardus-domain-joiner: before 0.5.5...

CVE-2026-15599

The CVE-2026-15599 entry concerns TÜBİTAK BİLGEM Software Technologies Research Institute’s pardus-domain-joiner (affected: before 0.5.5). The issue is described as an unverified ownership vulnerability that enables Privilege Abuse. CVSS 3.1 base score is 3.3 (LOW), with LOCAL attack vector, low ...

CVE-2026-35081 Arbitrary process termination vulnerability in method ugw-logstop

The ugw-logstop method allows a remote attacker with user privileges to terminate arbitrary processes due to insufficient validation of user-supplied input...

CVE-2026-35081

CVE-2026-35081 documents an Arbitrary process termination vulnerability in the ugw-logstop method. A remote attacker with user privileges can terminate arbitrary processes due to insufficient input validation. The Connected documents provide the description and CVSS metrics (CVSSv4.0 base 7.2 HIG...

EUVD-2011-1782

Malware in sbrugna...

EUVD-2024-17578

Malicious code in bioql PyPI...

CVE-2025-37128 Authenticated Arbitrary Process Termination allows potential System Disruption in ECOS

A vulnerability in the web API of HPE Aruba Networking EdgeConnect SD-WAN Gateways could allow an authenticated remote attacker to terminate arbitrary running processes. Successful exploitation could allow an attacker to disrupt system operations, potentially resulting in an unstable system state...

CVE-2019-10724

There is a vulnerability with the Dolby DAX2 API system services in which a low-privileged user can terminate arbitrary processes that are running at a higher privilege. The following are affected products and versions: Legion Y520TZ370 6.0.1.8642, AIO310-20IAP 6.0.1.8642, AIO510-22ISH 6.0.1.8642...

CVE-2024-51324

An issue in the BdApiUtil driver of Baidu Antivirus v5.2.3.116083 allows attackers to terminate arbitrary process via executing a BYOVD Bring Your Own Vulnerable Driver attack...

CVE-2024-51324

An issue in the BdApiUtil driver of Baidu Antivirus v5.2.3.116083 allows attackers to terminate arbitrary process via executing a BYOVD Bring Your Own Vulnerable Driver attack...

CVE-2024-51324

CVE-2024-51324 exists in Baidu Antivirus driver BdApiUtil64.sys (v5.2.3.116083). The vulnerability arises from an IOCTL handler (0x800024B4) that terminates a target process without privilege validation, enabling a BYOVD attack to kill arbitrary processes from user mode. Exploitation chain demons...

PT-2025-6398

Name of the Vulnerable Software and Affected Versions Baidu Antivirus version 5.2.3.116083 Description An issue in the BdApiUtil driver of Baidu Antivirus allows attackers to terminate arbitrary processes by executing a Bring Your Own Vulnerable Driver BYOVD attack. The DeadLock ransomware has be...

VulnCheck KEV: CVE-2024-1853

Zemana AntiLogger v2.74.204.664 is vulnerable to an Arbitrary Process Termination vulnerability by triggering the 0x80002048 IOCTL code of the zam64.sys and zamguard64.sys drivers...

CVE-2024-1853

Zemana AntiLogger v2.74.204.664 is vulnerable to an Arbitrary Process Termination vulnerability by triggering the 0x80002048 IOCTL code of the zam64.sys and zamguard64.sys drivers...

CVE-2024-1853 Zemana AntiLogger v2.74.204.664 - Arbitrary Process Termination

Zemana AntiLogger v2.74.204.664 is vulnerable to an Arbitrary Process Termination vulnerability by triggering the 0x80002048 IOCTL code of the zam64.sys and zamguard64.sys drivers...

CVE-2024-1853

CVE-2024-1853 affects Zemana AntiLogger v2.74.204.664. It exposes an Arbitrary Process Termination vulnerability by triggering IOCTL code 0x80002048 in the vulnerable drivers zam64.sys and zamguard64.sys , enabling an attacker to terminate processes. Public materials describe BYOVD-style driver a...

CVE-2024-1853 Zemana AntiLogger v2.74.204.664 - Arbitrary Process Termination

Zemana AntiLogger v2.74.204.664 is vulnerable to an Arbitrary Process Termination vulnerability by triggering the 0x80002048 IOCTL code of the zam64.sys and zamguard64.sys drivers...