49 matches found
ps-ppl-bypass
تجاوز PPL عبر برنامج التشغيل المعرّض للثغرات في Process Explorer في حين أنه من المعروف جيدًا أن الإصدارات القديمة قبل 17.x من برامج تشغيل SysInternals Process Explorer PSEXP152.sys معرّضة للثغرات ويمكن استغلالها لفتح مقابض عمليات بوصول كامل إلى عمليات PPL IOCTL: 0x8335003c، فإن الإصدارات الأحدث...
breakcyserver
breakcyserver المقال كامل في: https://waawaa.github.io/ 1. قم بإنهاء خدمات EDR عن طريق إغلاق جميع المقابض المفتوحة لعملية EDR. 2. تجاوز PPL عن طريق إساءة استخدام بعض وظائف برامج تشغيل Process Explorer. 3. تجاوز تطبيق ObRegisterCallbacks عن طريق إساءة استخدام وظائف برنامج تشغيل Process Explorer...
EUVD-2019-20058
Remote Process Explorer 1.0.0.16 contains a local buffer overflow vulnerability that allows attackers to cause a denial of service by sending a crafted payload to the Add Computer dialog. Attackers can paste a malicious string into the computer name textbox and trigger a crash by connecting to th...
CVE-2019-25661
Remote Process Explorer 1.0.0.16 contains a local buffer overflow vulnerability that allows attackers to cause a denial of service by sending a crafted payload to the Add Computer dialog. Attackers can paste a malicious string into the computer name textbox and trigger a crash by connecting to th...
CVE-2019-25661
Remote Process Explorer 1.0.0.16 contains a local buffer overflow vulnerability that allows attackers to cause a denial of service by sending a crafted payload to the Add Computer dialog. Attackers can paste a malicious string into the computer name textbox and trigger a crash by connecting to th...
CVE-2019-25661 Remote Process Explorer 1.0.0.16 Local Buffer Overflow DoS
Remote Process Explorer 1.0.0.16 contains a local buffer overflow vulnerability that allows attackers to cause a denial of service by sending a crafted payload to the Add Computer dialog. Attackers can paste a malicious string into the computer name textbox and trigger a crash by connecting to th...
CVE-2019-25661
Remote Process Explorer 1.0.0.16 is affected by a local buffer overflow in the Add Computer dialog. A crafted string pasted into the computer name textbox can crash the added computer by overwriting the SEH chain, causing denial of service. The issue is local, with low attack complexity and no pr...
CVE-2019-25661 Remote Process Explorer 1.0.0.16 Local Buffer Overflow DoS
Remote Process Explorer 1.0.0.16 contains a local buffer overflow vulnerability that allows attackers to cause a denial of service by sending a crafted payload to the Add Computer dialog. Attackers can paste a malicious string into the computer name textbox and trigger a crash by connecting to th...
CVE-2019-25661: Out-of-bounds Write
Remote Process Explorer 1.0.0.16 contains a local buffer overflow vulnerability that allows attackers to cause a denial of service by sending a crafted payload to the Add Computer dialog. Attackers can paste a malicious string into the computer name textbox and trigger a crash by connecting to th...
PT-2026-30470
Remote Process Explorer 1.0.0.16 contains a local buffer overflow vulnerability that allows attackers to cause a denial of service by sending a crafted payload to the Add Computer dialog. Attackers can paste a malicious string into the computer name textbox and trigger a crash by connecting to th...
LizardSystems Remote Process Explorer 缓冲区错误漏洞
LizardSystems Remote Process Explorer is a remote process management tool developed by LizardSystems. Version 1.0.0.16 of Remote Process Explorer contains a buffer overflow vulnerability. This vulnerability stems from a local buffer overflow in the “Add Computer” dialog box, which could allow...
EUVD-2005-2680
Malware in sbrugna...
EUVD-2023-47189
Malicious code in bioql PyPI...
CVE-2023-42757
Process Explorer before 17.04 allows attackers to make it functionally unavailable a denial of service for analysis by renaming an executable file to a new extensionless 255-character name and launching it with NtCreateUserProcess. This can occur through an issue in wcscats error handling...
CVE-2005-2679
Buffer overflow in Sysinternals Process Explorer 9.23, and other versions before 9.25, allows local users to execute arbitrary code via a long CompanyName field in the VersionInfo information in a running process...
CVE-2023-42757
Process Explorer before 17.04 allows attackers to make it functionally unavailable a denial of service for analysis by renaming an executable file to a new extensionless 255-character name and launching it with NtCreateUserProcess. This can occur through an issue in wcscats error handling...
PT-2024-13055 · Microsoft · Process Explorer
Name of the Vulnerable Software and Affected Versions: Process Explorer versions prior to 17.04 Description: The issue allows attackers to make Process Explorer functionally unavailable, resulting in a denial of service for analysis. This can be achieved by renaming an executable file to a new...
Microsoft Process Explorer 安全漏洞
Microsoft Process Explorer is a process explorer from Microsoft Corporation USA. A security vulnerability exists in Microsoft Process Explorer versions prior to 17.04, which stems from a wcscats error handling issue, that allows an attacker to render its functionality unavailable by renaming an...
CVE-2023-42757
Process Explorer before 17.04 allows attackers to make it functionally unavailable a denial of service for analysis by renaming an executable file to a new extensionless 255-character name and launching it with NtCreateUserProcess. This can occur through an issue in wcscats error handling...
CVE-2023-42757
Process Explorer before 17.04 allows attackers to make it functionally unavailable a denial of service for analysis by renaming an executable file to a new extensionless 255-character name and launching it with NtCreateUserProcess. This can occur through an issue in wcscats error handling...