Microsoft Windows Silent Process Exit Persistence

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core/post/file' require 'msf/core/exploit/exe' class MetasploitModule 'Windows Silent Process Exit Persistence', 'Description' = %q Windows allows you to se...

Windows Silent Process Exit Persistence

Windows allows you to set up a debug process when a process exits. This module uploads a payload and declares that it is the debug process to launch when a specified process exits. This module requires Metasploit: https://metasploit.com/download Current source:...

Bitdefender Total Security DLL Loading Local Code Injection Vulnerability

Bitdefender Total Security is prone to local code injection vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2017-5565: Uncontrolled Search Path Element

Code injection vulnerability in Trend Micro Maximum Security 11.0 and earlier, Internet Security 11.0 and earlier, and Antivirus+ Security 11.0 and earlier allows a local attacker to bypass a self-protection mechanism, inject arbitrary code, and take full control of any Trend Micro process via a...

CVE-2017-5567: Uncontrolled Search Path Element

Code injection vulnerability in Avast Premier 12.3 and earlier, Internet Security 12.3 and earlier, Pro Antivirus 12.3 and earlier, and Free Antivirus 12.3 and earlier allows a local attacker to bypass a self-protection mechanism, inject arbitrary code, and take full control of any Avast process...

CVE-2017-5566: Uncontrolled Search Path Element

Code injection vulnerability in AVG Ultimate 17.1 and earlier, AVG Internet Security 17.1 and earlier, and AVG AntiVirus FREE 17.1 and earlier allows a local attacker to bypass a self-protection mechanism, inject arbitrary code, and take full control of any AVG process via a "DoubleAgent" attack...

PT-2017-16934

Name of the Vulnerable Software and Affected Versions Bitdefender Total Security versions prior to 12.0 Bitdefender Internet Security versions prior to 12.0 Bitdefender Antivirus Plus versions prior to 12.0 Description A code injection issue allows a local attacker to bypass a self-protection...

PT-2017-16578

Name of the Vulnerable Software and Affected Versions AVG Ultimate versions 17.1 and earlier AVG Internet Security versions 17.1 and earlier AVG AntiVirus FREE versions 17.1 and earlier Description A code injection issue allows a local attacker to bypass a self-protection mechanism, inject...

CVE-2017-6417: Uncontrolled Search Path Element

Code injection vulnerability in Avira Total Security Suite 15.0 and earlier, Optimization Suite 15.0 and earlier, Internet Security Suite 15.0 and earlier, and Free Security Suite 15.0 and earlier allows a local attacker to bypass a self-protection mechanism, inject arbitrary code, and take full...