39 matches found
SUSE CVE-2023-52597
In the Linux kernel, the following vulnerability has been resolved: KVM: s390: fix setting of fpc register kvmarchvcpuioctlsetfpu allows to set the floating point control fpc register of a guest cpu. The new value is tested for validity by temporarily loading it into the fpc register. This may le...
kernel: Spectre v2 SMT mitigations problem
It was found that the Linux Kernel still left the victim process exposed to attacks in some cases even after enabling the spectre-BTI mitigation with prctl. The kernel failed to protect applications that attempted to protect against Spectre v2 leaving them open to attack from other processes...
kernel: Spectre v2 SMT mitigations problem
It was found that the Linux Kernel still left the victim process exposed to attacks in some cases even after enabling the spectre-BTI mitigation with prctl. The kernel failed to protect applications that attempted to protect against Spectre v2 leaving them open to attack from other processes...
Hidden - Windows Driver With Usermode Interface Which Can Hide Processes, File-System And Registry Objects, Protect Processes And Etc
Hidden has been developed like a solution for reverse engineering and researching tasks. This is a windows driver with a usermode interface which is used for hiding specific environment on your windows machine, like installed RCE programs ex. procmon, wireshark, vm infrastructure ex. vmware tools...
Nidhogg - All-In-One Simple To Use Rootkit For Red Teams
Nidhogg is a multi-functional rootkit for red teams. The goal of Nidhogg is to provide an all-in-one and easy-to-use rootkit with multiple helpful functionalities for red team engagements that can be integrated with your C2 framework via a single header file with simple usage, you can see an...
SUSE-SU-2018:2263-1 Security update for the Linux Kernel (Live Patch 2 for SLE 12 SP3)
This update for the Linux Kernel 4.4.82-66 fixes several issues. The following security issue was fixed: - CVE-2018-3665: System software utilizing Lazy FP state restore technique on systems using Intel Core-based microprocessors may potentially have allowed a local process to infer data from...
Microsoft Windows - Token Process Trust SID Access Check Bypass Privilege Escalation Exploit
Exploit for windows platform in category local exploits Windows: Token Trust SID Access Check Bypass EOP Platform: Windows 10 1709 also tested current build of RS4 Class: Elevation of Privilege Summary: A token’s trust SID isn’t reset when setting a token after process creation allowing a user...
CVE-2018-10962
An issue was discovered in Shanghai 2345 Security Guard 3.7.0. 2345MPCSafe.exe, 2345SafeTray.exe, and 2345Speedup.exe allow local users to bypass intended process protections, and consequently terminate processes, because mouseevent is not properly considered...
2345 Security Guard Process Protection Bypass Vulnerability
2345 Security Guard is a set of computer security protection software from China's 2345 Corporation. A process protection bypass vulnerability exists in 2345MPCSafe.exe, 2345SafeTray.exe, and 2345Speedup.exe in 2345 Security Guard 3.7.0, which occurs because mouseevent is not properly considered...
2345 Security Guard Denial of Service Vulnerability (CNVD-2018-10965 )
2345 Security Guard is a set of computer security protection software from China's 2345 Corporation. A security vulnerability exists in the 2345MPCSafe.exe, 2345SafeTray.exe, and 2345Speedup.exe files in 2345 Security Guard version 3.7.0. A local attacker can exploit this vulnerability to bypass...
CVE-2018-10716
The CVE-2018-10716 issue affects Shanghai 2345 Security Guard 3.7.0, specifically the executables 2345MPCSafe.exe, 2345SafeTray.exe, and 2345Speedup.exe. The root cause is improper consideration of WM_CLOSE, which allows local users to bypass intended process protections and terminate processes. ...
CVE-2018-10716
An issue was discovered in Shanghai 2345 Security Guard 3.7.0. 2345MPCSafe.exe, 2345SafeTray.exe, and 2345Speedup.exe allow local users to bypass intended process protections, and consequently terminate processes, because WMCLOSE is not properly considered...
2345 Security Guard Security Bypass Vulnerability
2345 Security Guard is a set of computer security protection software from China's 2345 Corporation. A security vulnerability exists in the 2345MPCSafe.exe, 2345SafeTray.exe, and 2345Speedup.exe files in 2345 Security Guard version 3.7.0. A local attacker can exploit this vulnerability to bypass...
CVE-2018-10425
An issue was discovered in Shanghai 2345 Security Guard 3.7.0. 2345MPCSafe.exe, 2345SafeTray.exe, and 2345Speedup.exe allow local users to bypass intended process protections, and consequently terminate processes, because SetParent is not properly considered...
CVE-2018-10425
An issue was discovered in Shanghai 2345 Security Guard 3.7.0. 2345MPCSafe.exe, 2345SafeTray.exe, and 2345Speedup.exe allow local users to bypass intended process protections, and consequently terminate processes, because SetParent is not properly considered...
Breakthrough IceSword process itself protection method-vulnerability warning-the black bar safety net
IceSword drive on its own process to do the protection, so that the malicious program is terminated not him. IceSword did not use HOOK the SSDT method, but is also useless what is too perverted method, but the Inline Hook the NtOpenProcess And NtTerminateProcess several functions, namely to modif...
Breakthrough IceSword own process protection-vulnerability warning-the black bar safety net
IceSword drive on its own process to do the protection, so that the malicious program is terminated not him. IceSword did not use HOOK the SSDT method, but is also useless what too BT method, but the Inline Hook the NtOpenProcess And NtTerminateProcess several functions, namely to modify the...
[NT] DiamondCS Process Guard Can Be Disabled by Direct Service Table Restoration
The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...