Lucene search
+L

2088 matches found

Kitploit
Kitploit
•added 2026/10/23 7:22 a.m.•30 views

Harden-Windows-Security

Harden Windows Security | A New Threat to Malware Harden Windows Safely, Securely, Only With Official Microsoft Methods How To Use Related Trust Support Security Recommendations Resources License Wiki Basic FAQs Roadmap Donation !IMPORTANT Here are Quick Access Points to Important Sections of thi...

6AI score
SaveExploits0References7
Kitploit
Kitploit
•added 2026/10/22 8:00 a.m.•24 views

CVE-2026-41091

🛡️ CVE-2026-41091 - RedSun Microsoft Defender Elevation of Privilege Vulnerability RedSun is a local privilege escalation LPE technique and associated PoC abusing a link-following vulnerability in Microsoft Defender's Malware Protection Engine. It allows a low-privileged authenticated attacker to...

7.8CVSS7.9AI score0.00443EPSS
SaveExploits8References1
Kitploit
Kitploit
•added 2026/10/22 6:42 a.m.•22 views

CVE-2026-50656

🚨 CVE-2026-50656 — Microsoft Defender "RoguePlanet" Elevation of Privilege Vulnerability in Microsoft Malware Protection Engine ⚠️ Educational and Defensive Security Research Only 📖 Overview CVE-2026-50656 is a high-severity Elevation of Privilege EoP vulnerability affecting the Microsoft Malware...

7.8CVSS7.9AI score0.00368EPSS
SaveExploits5
BDU FSTEC
BDU FSTEC
•added 2026/10/15 12:00 a.m.•7 views

Cisco Secure Email Gateway Advanced Malware Protection Privilege Escalation

The vulnerability of the Advanced Malware Protection module of the Cisco Secure Email Gateway protection tool is related to an incorrect restriction on the path name to the directory. Exploiting this vulnerability could allow a malicious actor to gain write access to arbitrary files and execute...

10CVSS9.3AI score0.01573EPSS
SaveExploits0References8Affected Software2
NCSC
NCSC
•added 2026/10/14 6:46 p.m.•20 views

Vulnerability exposure in Cisco Secure Email Gateway

Cisco has identified a vulnerability in Cisco Secure Email Gateway, specifically in the Advanced Malware Protection feature. The vulnerability lies in the way the Advanced Malware Protection feature processes email attachments when the file reputation service is enabled. An unauthenticated extern...

9.8CVSS8.7AI score0.01573EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/10/14 4:07 p.m.•29 views

EUVD-2026-101420

A vulnerability in the Advanced Malware Protection AMP feature of Cisco Secure Email Gateway could allow an unauthenticated, remote attacker to write arbitrary files on the underlying operating system. This vulnerability is due to improper handling of email attachments when the file reputation...

9.8CVSS8.8AI score0.01573EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/14 4:07 p.m.•76 views

CVE-2026-76519

Cisco Secure Email Gateway is vulnerable to a relative path traversal flaw in its Advanced Malware Protection (AMP) feature. When the file reputation service is enabled, an unauthenticated remote attacker can send an email with a crafted attachment to write arbitrary files on the underlying opera...

9.8CVSS8.8AI score0.01573EPSS
SaveIn wildExploits0References2Affected Software1
Cvelist
Cvelist
•added 2026/10/14 4:07 p.m.•54 views

CVE-2026-76519 Cisco Secure Email Gateway Arbitrary File Write Vulnerability

A vulnerability in the Advanced Malware Protection AMP feature of Cisco Secure Email Gateway could allow an unauthenticated, remote attacker to write arbitrary files on the underlying operating system. This vulnerability is due to improper handling of email attachments when the file reputation...

9.8CVSS0.01573EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/10/14 12:00 a.m.•12 views

PT-2026-113737

Name of the Vulnerable Software and Affected Versions Cisco Secure Email Gateway versions prior to 15.5.5-014 Cisco Secure Email Gateway version 16.0 Cisco Secure Email Gateway versions prior to 16.5.0-780 Description A relative path traversal issue exists in the Advanced Malware Protection AMP...

10CVSS8.5AI score0.01573EPSS
SaveExploits0References120
NVD
NVD
•added 2026/10/13 8:17 a.m.•10 views

CVE-2026-14308

Zohocorp ManageEngine Malware Protection Plus versions before 1.0.64.12 are affected by insufficient driver signature validation in MEARWService...

4.9CVSS0.00408EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/10/13 7:51 a.m.•41 views

CVE-2026-14308 Insufficient Signature Validation

Zohocorp ManageEngine Malware Protection Plus versions before 1.0.64.12 are affected by insufficient driver signature validation in MEARWService...

4.9CVSS0.00408EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/13 7:51 a.m.•15 views

CVE-2026-14308

Zohocorp ManageEngine Malware Protection Plus versions prior to 1.0.64.12 are susceptible to a vulnerability caused by insufficient driver signature validation within the MEARWService component. This flaw may allow for unauthorized driver execution. The impact is categorized as having high availa...

4.9CVSS5.7AI score0.00408EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•6 views

CVE-2026-14308: Improper Input Validation

Zohocorp ManageEngine Malware Protection Plus versions before 1.0.64.12 are affected by insufficient driver signature validation in MEARWService...

4.9CVSS5.7AI score0.00408EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•7 views

PT-2026-111305

Name of the Vulnerable Software and Affected Versions ManageEngine Malware Protection Plus versions prior to 1.0.64.12 Description Insufficient driver signature validation occurs within the MEARWService component. This issue allows for the potential loading of unsigned or improperly signed driver...

4.9CVSS5.7AI score0.00408EPSS
SaveExploits0References5
GithubExploit
GithubExploit
•added 2026/10/10 3:53 p.m.•30 views

Exploit for Improper Privilege Management in Microsoft

CVE-2026-69414 — Microsoft Malware Protection Engine EoP Explo...

7.8CVSS7.5AI score0.01319EPSS
SaveExploits5
Tenable Nessus
Tenable Nessus
•added 2026/10/09 12:00 a.m.•17 views

Windows Defender <= 1.1.26070.7 Elevation of Privilege (ShieldBreak) (CVE-2026-69414)

The Malware Protection Engine version of Microsoft Windows Defender installed on the remote Windows host is prior to or equal to 1.1.26070.7. It is, therefore, affected by an elevation of privilege vulnerability: - Microsoft is aware of an elevation of privilege in the Microsoft Malware Protectio...

7.8CVSS7.5AI score0.01319EPSS
SaveExploits2References3
Malwarebytes
Malwarebytes
•added 2026/09/24 12:45 p.m.•41 views

New Browser Guard features add protection before and after you click

Most of us click on search results without knowing much about the website we’re about to visit. And once we’re there, it’s not always obvious when something isn’t quite right. Now, we’ve added two new features to Malwarebytes Browser Guard that will do even more to keep you safe online. Search...

5.7AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/09/12 4:48 a.m.•27 views

Harden-Windows-Security HardenSystemSecurity-v1.0.88.0

Harden Windows Security | A New Threat to Malware Harden Windows Safely, Securely, Only With Official Microsoft Methods How To Use Related Trust Support Security Recommendations Resources License Wiki Basic FAQs Roadmap Donation !IMPORTANT Here are Quick Access Points to Important Sections of thi...

5.9AI score
SaveExploits0References7
BDU FSTEC
BDU FSTEC
•added 2026/09/10 12:00 a.m.•14 views

Microsoft Malware Protection Engine Unauthorized Access

The vulnerability of the Microsoft Malware Protection Engine, a component of the Microsoft Defender antivirus protection tool, relates to an improper definition of symbolic links before accessing a file. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protecte...

5.5CVSS6.5AI score
SaveExploits0References2
The Hacker News
The Hacker News
•added 2026/09/09 6:47 a.m.•23 views

Researcher Drops New Microsoft Defender PoC Showing ShieldBreak Patch Can Be Bypassed

The security researcher known as Chaotic Eclipse has dropped a proof-of-concept PoC for yet another zero-day in Microsoft Defender. The vulnerability, codenamed ShieldCrash , is assessed to be a patch bypass for CVE-2026-69414 CVSS score: 7.8, also called ShieldBreak, which the researcher reporte...

7.8CVSS7.1AI score0.01319EPSS
SaveExploits2
Rows per page
Query Builder