118 matches found
Noriben
Noriben Malware Analysis Sandbox Contact Information: @bbaskin on Twitter brian at thebaskins dot com Noriben is a Python-based script that works in conjunction with Sysinternals Procmon to automatically collect, analyze, and report on runtime indicators of malware. In a nutshell, it allows you t...
whids
IMPORTANT: this README and other documentation is not updated to reflect the changes made to latest beta releases as a lot of changes happened. All this will be updated in time when a stable version will be released see Roadmap until next release. Feel free to run beta releases on your own and as...
ps-ppl-bypass
Process Explorer vulnerable driver PPL Bypass While it is well known that old versions before 17.x of SysInternals Process Explorer drivers PSEXP152.sys are vulnerable and can be abused to open full access process handles to PPL processes IOCTL: 0x8335003c, newer versions 17.x upward are still...
CVE-2026-105729
Untrusted pointer dereference in SysInternals allows an authorized attacker to elevate privileges locally...
CVE-2026-105732
Stack-based buffer overflow in SysInternals allows an authorized attacker to elevate privileges locally...
CVE-2026-100205
Untrusted pointer dereference in SysInternals allows an authorized attacker to elevate privileges locally...
EUVD-2026-100326
Untrusted pointer dereference in SysInternals allows an authorized attacker to elevate privileges locally...
EUVD-2026-100317
Untrusted pointer dereference in SysInternals allows an authorized attacker to elevate privileges locally...
CVE-2026-105729
An untrusted pointer dereference vulnerability exists in SysInternals , which could allow an authorized attacker to perform a local privilege escalation . The vulnerability is associated with CWE-822 . While the CVSS score indicates a high severity impact on integrity and availability, specific d...
CVE-2026-100205
An untrusted pointer dereference vulnerability in SysInternals allows an authorized attacker to achieve local privilege escalation . This vulnerability is associated with CWE-822 and has been assigned a CVSS 3.1 base score of 7.1 (High) . No specific exploit details or in-the-wild exploitation in...
EUVD-2026-99079
Stack-based buffer overflow in SysInternals allows an authorized attacker to elevate privileges locally...
CVE-2026-105732
A stack-based buffer overflow in SysInternals allows an authorized attacker to achieve local privilege escalation . The vulnerability has a HIGH base severity score of 7.3. No specific affected versions, root cause components, or exploit links are provided in the documents, though an official fix...
SysInternals Elevation of Privilege Vulnerability
Stack-based buffer overflow in SysInternals allows an authorized attacker to elevate privileges locally...
SysInternals Elevation of Privilege Vulnerability
Untrusted pointer dereference in SysInternals allows an authorized attacker to elevate privileges locally...
SysInternals Elevation of Privilege Vulnerability
Untrusted pointer dereference in SysInternals allows an authorized attacker to elevate privileges locally...
PT-2026-112004
Stack-based buffer overflow in SysInternals allows an authorized attacker to elevate privileges locally...
CVE-2026-105729: Untrusted Pointer Dereference
Untrusted pointer dereference in SysInternals allows an authorized attacker to elevate privileges locally...
CVE-2026-100205: Untrusted Pointer Dereference
Untrusted pointer dereference in SysInternals allows an authorized attacker to elevate privileges locally...