14 matches found
CVE-2025-61303
CVE-2025-61303 - RecordedFuture Triage：通过递归进程分叉实现拒绝分析 描述 RecordedFuture Triage 沙箱 Windows 10 build 2004 和 Windows 10 LTSC 2021 的 Windows 行为分析引擎中存在一个严重 漏洞，允许提交的恶意软件样本规避检测并导致拒绝分析 。当样本递归生成大量子进程时，会触发该漏洞，产生高日志量并耗尽系统资源。因此，关键恶意行为（包括 PowerShell 执行和反弹 Shell 活动）可能不会被记录或报告，从而误导分析人员，并损害沙箱分析结果的完整性和可用性。 CVSS 评...
CVE-2025-61301
CVE-2025-61301 - CAPEv2: Denegación de Análisis mediante bifurcación recursiva de procesos Descripción Una vulnerabilidad de Alta Gravedad de denegación de análisis afecta a reporting/mongodb.py y reporting/jsondump.py en CAPEv2 commit 52e4b43, del 2025-05-17 que permite a atacantes que pueden...
CVE-2025-61303
Hatching Triage Sandbox Windows 10 build 2004 2025-08-14 and Windows 10 LTSC 20212025-08-14 contains a vulnerability in its Windows behavioral analysis engine that allows a submitted malware sample to evade detection and cause denial-of-analysis. The vulnerability is triggered when a sample...
EUVD-2025-35102
Hatching Triage Sandbox Windows 10 build 2004 2025-08-14 and Windows 10 LTSC 20212025-08-14 contains a vulnerability in its Windows behavioral analysis engine that allows a submitted malware sample to evade detection and cause denial-of-analysis. The vulnerability is triggered when a sample...
CVE-2025-61303
Hatching Triage Sandbox Windows 10 build 2004 2025-08-14 and Windows 10 LTSC 20212025-08-14 contains a vulnerability in its Windows behavioral analysis engine that allows a submitted malware sample to evade detection and cause denial-of-analysis. The vulnerability is triggered when a sample...
CVE-2025-61301
Denial-of-analysis in reporting/mongodb.py and reporting/jsondump.py in CAPEv2 commit 52e4b43, on 2025-05-17 allows attackers who can submit samples to cause incomplete or missing behavioral analysis reports by generating deeply nested or oversized behavior data that trigger MongoDB BSON limits o...
Recorded Future Triage 安全漏洞
Recorded Future Triage is a cloud sandboxing service from US-based Recorded Future. A security vulnerability exists in Recorded Future Triage that stems from a Windows behavioral analysis engine that allows malicious samples to evade detection by recursively spawning a large number of child...
CVE-2025-61303
Hatching Triage Sandbox Windows 10 build 2004 2025-08-14 and Windows 10 LTSC 20212025-08-14 contains a vulnerability in its Windows behavioral analysis engine that allows a submitted malware sample to evade detection and cause denial-of-analysis. The vulnerability is triggered when a sample...
CVE-2025-61303
Hatching Triage Sandbox Windows 10 build 2004 2025-08-14 and Windows 10 LTSC 20212025-08-14 contains a vulnerability in its Windows behavioral analysis engine that allows a submitted malware sample to evade detection and cause denial-of-analysis. The vulnerability is triggered when a sample...
CVE-2025-61301
CVE-2025-61301 affects CAPEv2; the denial-of-analysis occurs in reporting/mongodb.py and reporting/jsondump.py (commit 52e4b43, 2025-05-17). Deeply nested or oversized behavior data can cause MongoDB BSON limits or orjson recursion errors when a sample runs in the sandbox, leading to incomplete o...
CVE-2025-61303
CVE-2025-61303 concerns a vulnerability in the Windows behavioral analysis engine used by Hatching Triage Sandbox (Windows 10 build 2004 and Windows 10 LTSC 2021). The issue arises when a sample recursively spawns a very large number of child processes, producing an extreme log volume and exhaust...
CVE-2025-61301
Denial-of-analysis in reporting/mongodb.py and reporting/jsondump.py in CAPEv2 commit 52e4b43, on 2025-05-17 allows attackers who can submit samples to cause incomplete or missing behavioral analysis reports by generating deeply nested or oversized behavior data that trigger MongoDB BSON limits o...
