EUVD-2018-15757

Malware in sbrugna...

EUVD-2018-15756

Malware in sbrugna...

EUVD-2021-12181

Malware in sbrugna...

CVE-2021-25270

A local attacker could execute arbitrary code with administrator privileges in HitmanPro.Alert before version Build 901...

CVE-2020-9540

Sophos HitmanPro.Alert before build 861 allows local elevation of privilege...

Sophos HitmanPro has an unspecified vulnerability (CNVD-2021-103402)

Sophos HitmanPro is an excellent multi-engine cloud anti-virus scanner from Sophos UK.A security vulnerability exists in Sophos HitmanPro, which stems from a lack of authentication, access control, privilege management and other security measures in the network system or product. A local attacker...

CVE-2021-25270

A local attacker could execute arbitrary code with administrator privileges in HitmanPro.Alert before version Build 901...

CVE-2021-25270

A local attacker could execute arbitrary code with administrator privileges in HitmanPro.Alert before version Build 901...

Design/Logic Flaw

A local attacker could execute arbitrary code with administrator privileges in HitmanPro.Alert before version Build 901...

CVE-2021-25270

A local attacker could execute arbitrary code with administrator privileges in HitmanPro.Alert before version Build 901...

CVE-2020-9540

Sophos HitmanPro.Alert before build 861 allows local elevation of privilege...

CVE-2020-9540

Sophos HitmanPro.Alert before build 861 allows local elevation of privilege...

Privilege escalation

Sophos HitmanPro.Alert before build 861 allows local elevation of privilege...

CVE-2020-9540

Sophos HitmanPro.Alert before build 861 allows local elevation of privilege...

Talos Vulnerability Deep Dive - TALOS-2018-0636 / CVE-2018-3971 Sophos HitmanPro.Alert vulnerability

Marcin Noga of Cisco Talos discovered this vulnerability. Introduction Sophos patched two vulnerabilities in Sophos HitmanPro.Alert in version 3.7.9.759. We publicly disclosed these issues last week here, Cisco Talos will show you the process of developing an exploit for one of these bugs. We wil...

Sophos HitmanPro.Alert Multiple Vulnerabilities - Windows

Sophos HitmanPro.Alert version 3.7.6.744 is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Sophos HitmanPro.Alert x86 Detection (Windows SMB Login)

SMB login-based detection of Sophos HitmanPro.Alert. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Design/Logic Flaw

An exploitable memory disclosure vulnerability exists in the 0x222000 IOCTL handler functionality of Sophos HitmanPro.Alert 3.7.6.744. A specially crafted IRP request can cause the driver to return uninitialized memory, resulting in kernel memory disclosure. An attacker can send an IRP request to...

CVE-2018-3971

An exploitable arbitrary write vulnerability exists in the 0x2222CC IOCTL handler functionality of Sophos HitmanPro.Alert 3.7.6.744. A specially crafted IRP request can cause the driver to write data under controlled by an attacker address, resulting in memory corruption. An attacker can send IRP...

Design/Logic Flaw

An exploitable arbitrary write vulnerability exists in the 0x2222CC IOCTL handler functionality of Sophos HitmanPro.Alert 3.7.6.744. A specially crafted IRP request can cause the driver to write data under controlled by an attacker address, resulting in memory corruption. An attacker can send IRP...