386 matches found
KSLDBYOVDARK
KSLDBYOVD Reference: KslKatz and KslDump. KslD.sys, a.k.a. MpKslDrv.sys, used to be one of the anti-rootkit tool drivers of Microsoft Antimaware which includes Microsoft Defender Antivirus, Windows Defender Antivirus in the old Windows versions, Microsoft Security Essentials, System Center Endpoi...
CVE-2022-42045
CVE-2022-42045 Summary We discovered an Arbitrary code injection in Zemana amsdk.sys kernel-mode driver, a part of Zemana Antimalware SDK. The vulnerability allows to inject an arbitrary code into the one of the driver code sections and then to execute it with kernel-mode privileges local...
Amsi-Bypass-Powershell
Sponsored by Amsi-Bypass-Powershell This repo contains some Antimalware Scan Interface AMSI bypass / avoidance methods i found on different Blog Posts. Most of the scripts are detected by AMSI itself. So you have to find the trigger and change the signature at the part via variable/function...
EDR-Freeze
EDR-Freeze هذه أداة تستغل ثغرة برمجية في WerFaultSecure لتعليق عمليات برامج الحماية من البرمجيات الخبيثة EDRs ومضادات البرمجيات الخبيثة دون الحاجة إلى استخدام أسلوب هجوم BYOVD Bring Your Own Vulnerable Driver. يعمل EDR-Freeze في وضع المستخدم، لذلك لا تحتاج إلى تثبيت أي برامج تشغيل إضافية. يمكنه...
macro_pack
macropack Short description Warning: MacroPack is not maintained since 2021, if you are a pro and need Offensive infosec tools for initial access, assume breach, EDR bypass, check https://www.balliskit.com MacroPack Community is a tool used to automatize obfuscation and generation of retro format...
CVE-2019-6440
CVE-2019-6440: परीक्षित उत्पाद: Zemana antimalware v.2.74.2.150 & Zemana antilogger v.2.74.204.150. v.2.74.2.664 से ठीक किया गया भेद्यता के बारे में: यह भेद्यता हमलावरों को लक्ष्य मशीनों पर उपयोगकर्ता के इंटरैक्शन के बिना SYSTEM विशेषाधिकार प्राप्त करने की अनुमति देती है। आवश्यकताएँ: 1. हमलावर को...
Vulnerability-scanner
संगठनों का संचार, डेटा भंडारण और व्यावसायिक संचालन करने के लिए डिजिटल प्रौद्योगिकियों पर बढ़ती निर्भरता के साथ, साइबर सुरक्षा के खतरे काफी बढ़ गए हैं। नेटवर्क और सिस्टम को सुरक्षित करने में एंडपॉइंट सुरक्षा सॉफ़्टवेयर की महत्वपूर्ण भूमिका को देखते हुए, ऐसा सॉफ़्टवेयर दुर्भावनापूर्ण अभिकर्ताओं के...
AntimalwareBlight
Use this PowerShell module to execute PowerShell code at the antimalware-light protection level. This code was highlighted in the Living Off the Walled Garden: Abusing the Features of the Early Launch Antimalware Ecosystem REcon talk as well as Black Hat USA 2022. This module needs to run elevate...
CVE-2026-58644: Microsoft SharePoint Server Unauthenticated Remote Code Execution Vulnerability Exploited in the Wild
Overview On July 14, 2026, Microsoft published a security advisory addressing CVE-2026-58644, a critical remote code execution RCE vulnerability affecting on-premises Microsoft SharePoint Server deployments. The vulnerability, which carries a CVSS v3.1 score of 9.8 Critical, results from the...
The vulnerability of Microsoft Defender Antimalware Platform, related to uncontrolled resource consumption, allows a perpetrator to trigger a service failure.
The vulnerability of Microsoft Defender Antimalware Platform relates to an uncontrolled consumption of resources. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...
Security Updates for Windows Defender (April 2026)
The Antimalware Platform version of Microsoft Windows Defender installed on the remote Windows host is prior to 4.18.26030.3011. It is, therefore, affected by a privilege escalation vulnerability: - Insufficient granularity of access control in Microsoft Defender allows an authorized attacker to...
CVE-2026-20056 Cisco Secure Web Appliance TBD Bypass Vulnerability
A vulnerability in the Dynamic Vectoring and Streaming DVS Engine implementation of Cisco AsyncOS Software for Cisco Secure Web Appliance could allow an unauthenticated, remote attacker to bypass the anti-malware scanner, allowing malicious archive files to be downloaded. This vulnerability is du...
CVE-2021-31727
Incorrect access control in zam64.sys, zam32.sys in MalwareFox AntiMalware 2.74.0.150 where IOCTL's 0x80002014, 0x80002018 expose unrestricted disk read/write capabilities respectively. A non-privileged process can open a handle to \.\ZemanaAntiMalware, register with the driver using IOCTL...
CVE-2021-31728
Incorrect access control in zam64.sys, zam32.sys in MalwareFox AntiMalware 2.74.0.150 allows a non-privileged process to open a handle to \.\ZemanaAntiMalware, register itself with the driver by sending IOCTL 0x80002010, allocate executable memory using a flaw in IOCTL 0x80002040, install a hook...
CVE-2022-42045
Certain Zemana products are vulnerable to Arbitrary code injection. This affects Watchdog Anti-Malware 4.1.422 and Zemana AntiMalware 3.2.28...
Description of the security update for SharePoint Server 2019: October 14, 2025 (KB5002796)
None None...
EUVD-2021-15126
Malware in sbrugna...
EUVD-2013-0121
Malware in sbrugna...