PPEnum

PPEnum プロセスの保護レベルを読み取るシンプルなBOF。...

BlockOpenHandle

BlockOpenHandle 任意のプロセスがあなたのプロセスへのHANDLEを開くのをブロックします。あなたのプロセスへのハンドルを開くことができるのはSYTEMのみです。これにより、リモートメモリスキャナーを回避できます POC...

aegis

Aegis 커널 모드 프로세스 보호 드라이버로, ObRegisterCallbacks를 사용하여 핸들에서 메모리 접근 권한을 제거합니다. 핸들 생성에 후킹하여 PROCESSVMREAD/WRITE/OPERATION을 무단 접근 시도에서 제거하는 기본적인 구현입니다. 참고: GIF가 애니메이션되지 않으면 Imgur에서 직접 보기 개요 드라이버는 고도 321123에서 OB 콜백을 등록하고 OBOPERATIONHANDLECREATE 및 OBOPERATIONHANDLEDUPLICATE 작업을 가로챕니다. 프로세스가 보호 대상에 대한 핸들...

criPPLe

criPPLe プロセス保護（PP）およびプロセス保護ライト（PPL）を削除するWindowsカーネルドライバ。 これはZero-Point Securityの"Offensive Driver Developmentコース"の助けを借りて作成されました このカーネルドライバは、指定されたpidからプロセス保護を削除します。プロセスのPSPROTECTION構造体へのポインタを取得し、これらの値を0に設定します。 root@kitploit: PSPROTECTION +0x000 Level : UChar +0x000 Type : Pos 0, 3 Bits +0x000 Audi...

EUVD-2026-60270

A vulnerability exists in the interaction between a Endpoint Privilege Management Windows Deployment support utility and the agent's tamper protection controls. Under certain conditions, the protections applied to the utility process may not be enforced as intended...

CVE-2026-40145

A vulnerability exists in the interaction between a Endpoint Privilege Management Windows Deployment support utility and the agent's tamper protection controls. Under certain conditions, the protections applied to the utility process may not be enforced as intended...

CVE-2026-45206

An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations. This is similar to CVE-2026-45207 but exists in a different process protection communication mechanism. Please note: an attacker must first obtain the abilit...

EUVD-2026-31279

An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations. This is similar to CVE-2026-45206 but exists in a different process protection communication mechanism. Please note: an attacker must first obtain the abilit...

CVE-2026-45207

An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations. This is similar to CVE-2026-45206 but exists in a different process protection communication mechanism. Please note: an attacker must first obtain the abilit...

CVE-2026-45206

An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations. This is similar to CVE-2026-45207 but exists in a different process protection communication mechanism. Please note: an attacker must first obtain the abilit...

CVE-2026-34930

An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations. This is similar to CVE-2026-34927 but exists in a different process protection mechanism. Please note: an attacker must first obtain the ability to execute...

CVE-2026-34930

An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations. This is similar to CVE-2026-34927 but exists in a different process protection mechanism. Please note: an attacker must first obtain the ability to execute...

CVE-2026-45206: Origin Validation Error

An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations. This is similar to CVE-2026-45207 but exists in a different process protection communication mechanism. Please note: an attacker must first obtain the abilit...

CVE-2026-45207: Origin Validation Error

An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations. This is similar to CVE-2026-45206 but exists in a different process protection communication mechanism. Please note: an attacker must first obtain the abilit...

throttlestop-poc

throttlestop-poc This is a simple Proof-of-Concept that abuses...

PT-2026-42469

Name of the Vulnerable Software and Affected Versions Apex One/SEP agent affected versions not specified Description An origin validation error in the process protection mechanism allows a local attacker to escalate privileges. To exploit this issue, the attacker must first have the ability to...

EUVD-2018-2497

Malware in sbrugna...

EUVD-2018-2786

Malware in sbrugna...

EUVD-2018-2809

Malware in sbrugna...

SUSE-SU-2025:03235-1 Security update for the Linux Kernel (Live Patch 9 for SLE 15 SP6)

This update for the Linux Kernel 6.4.0-1506002342 fixes several issues. The following security issues were fixed: - CVE-2025-38087: net/sched: fix use-after-free in tapriodevnotifier bsc1245504. - CVE-2025-21999: proc: fix UAF in procgetinode bsc1242579. - CVE-2025-38001: netsched: hfsc: Address...