CVE-2018-6476

Affected software: SUPERAntiSpyware Professional Trial 6.0.1254. The vulnerability is in the SASKUTIL.SYS driver, where input values for IOCTLs 0x9C402114, 0x9C402124, or 0x9C40207c are not validated, allowing a local attacker to escalate to NT AUTHORITY\SYSTEM. The issue is a privilege-escalatio...

Injecting Fake Updates: Evilgrade

Evilgrade is a modular framework that allows the user to take advantage of poor upgrade implementations by injecting fake updates. It comes with pre-made binaries agents, a working default configuration for fast pentests, and has it’s own WebServer and DNSServer modules. Easy to set up new...

Multiple vulnerabilities in SUPERAntiSpyware and Super Ad Blocker

Title: Multiple vulnerabilities in SUPERAntiSpyware and Super Ad Blocker Date of Discovery: 2 Feb 2010 Contact Date: 4 Feb.2010 Release Date: 10 Mar 2010 Author: Luka Milkovic Mail: milkovic.luka at gmail.com Software Link: SUPERAntiSpyware - http://www.superantispyware.com/index.html Super Ad...

KLA10315 Multiple vulnerabilities in SUPERAntiSpyware

Multiple serious vulnerabilities have been found in SUPERAntiSpyware. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code and gain privileges. Below is a complete list of vulnerabilities 1. Unsafe buffers, function parameter handling, unsafe pointe...