process_overwriting

Process Overwriting Process Overwriting is a PE injection technique, closely related to Process Hollowing and Module Overloading. With its help, you can replace the main executable not a DLL of the target process. It works only for a newly created process - injection to existing processes is not...

LdrShuffle

LdrShuffle Esecuzione furtiva del codice tramite modifica del EntryPoint dei moduli caricati in fase di runtime. Riepilogo I processi Windows hanno vari moduli caricati in fase di runtime. Ognuno di questi moduli ha una funzione DllMain definita, che verrà invocata alla creazione/distruzione del...

GHSA-H3X4-HC5V-V2GM OpenClaw: Windows media loaders accepted remote-host file URLs before local path validation

Summary Windows local-media handling accepted remote-host file URLs and UNC-style paths before local-path validation, so network-hosted file targets could be treated as local content. Affected Packages / Versions - Package: openclaw npm - Affected: = 2026.3.22 - Latest released tag checked:...

The vulnerability of the New Horizon Data Systems loader for Windows operating systems allows a hacker to circumvent existing security restrictions.

The vulnerability of the New Horizon Data Systems driver for Windows operating systems is related to security configuration errors. Exploiting this vulnerability could allow a hacker to circumvent existing security restrictions...

CallObfuscator - Obfuscate Specific Windows Apis With Different APIs

Obfuscate hide the PE imports from static/dynamic analysis tools. Theory This's pretty forward, let's say I've used VirtualProtect and I want to obfuscate it with Sleep, the tool will manipulate the IAT so that the thunk that points to VirtualProtect will point instead to Sleep, now at executing...