341 matches found
CVE-2022-42045
CVE-2022-42045 Riepilogo Abbiamo scoperto un'iniezione di codice arbitrario nel driver in modalità kernel amsdk.sys di Zemana, parte di Zemana Antimalware SDK. La vulnerabilità consente di iniettare codice arbitrario in una delle sezioni del codice del driver e quindi di eseguirlo con privilegi d...
Amsi-Bypass-Powershell
Sponsorizzato da Amsi-Bypass-Powershell Questo repository contiene alcuni metodi di bypass / elusione dell'Antimalware Scan Interface AMSI che ho trovato in diversi post di blog. La maggior parte degli script vengono rilevati da AMSI stesso. Quindi devi trovare il trigger e cambiare la firma nell...
macro_pack
macropack Short description Warning: MacroPack is not maintained since 2021, if you are a pro and need Offensive infosec tools for initial access, assume breach, EDR bypass, check https://www.balliskit.com MacroPack Community is a tool used to automatize obfuscation and generation of retro format...
Vulnerability-scanner
Con la crescente dipendenza delle organizzazioni dalle tecnologie digitali per la comunicazione, l'archiviazione dei dati e le operazioni aziendali, le minacce alla sicurezza informatica sono aumentate in modo significativo. Considerato il ruolo fondamentale che il software di sicurezza degli...
EDR-Freeze
EDR-Freeze Dies ist ein Tool, das die Software-Sicherheitslücke von WerFaultSecure ausnutzt, um die Prozesse von EDRs und Antimalware anzuhalten, ohne die BYOVD-Angriffsmethode Bring Your Own Vulnerable Driver verwenden zu müssen. EDR-Freeze arbeitet im Benutzermodus, sodass Sie keine zusätzliche...
KSLDBYOVDARK
KSLDBYOVD Riferimento: KslKatz e KslDump. KslD.sys, alias MpKslDrv.sys, era uno dei driver degli strumenti anti-rootkit di Microsoft Antimaware che include Microsoft Defender Antivirus, Windows Defender Antivirus nelle vecchie versioni di Windows, Microsoft Security Essentials, System Center...
CVE-2019-6440
CVE-2019-6440: Produtos testados: Zemana antimalware v.2.74.2.150 & Zemana antilogger v.2.74.204.150. Corrigido desde a v.2.74.2.664 Sobre a vulnerabilidade: Esta vulnerabilidade permitia que atacantes obtivessem privilégios de SYSTEM em máquinas alvo sem interação do usuário. Requisitos: 1. O...
AntimalwareBlight
Usa questo modulo PowerShell per eseguire codice PowerShell al livello di protezione antimalware-light. Questo codice è stato evidenziato nella presentazione Living Off the Walled Garden: Abusing the Features of the Early Launch Antimalware Ecosystem alla conferenza REcon e anche al Black Hat USA...
CVE-2026-58644: Microsoft SharePoint Server Unauthenticated Remote Code Execution Vulnerability Exploited in the Wild
Overview On July 14, 2026, Microsoft published a security advisory addressing CVE-2026-58644, a critical remote code execution RCE vulnerability affecting on-premises Microsoft SharePoint Server deployments. The vulnerability, which carries a CVSS v3.1 score of 9.8 Critical, results from the...
Security Updates for Windows Defender (April 2026)
The Antimalware Platform version of Microsoft Windows Defender installed on the remote Windows host is prior to 4.18.26030.3011. It is, therefore, affected by a privilege escalation vulnerability: - Insufficient granularity of access control in Microsoft Defender allows an authorized attacker to...
CVE-2026-20056 Cisco Secure Web Appliance TBD Bypass Vulnerability
A vulnerability in the Dynamic Vectoring and Streaming DVS Engine implementation of Cisco AsyncOS Software for Cisco Secure Web Appliance could allow an unauthenticated, remote attacker to bypass the anti-malware scanner, allowing malicious archive files to be downloaded. This vulnerability is du...
CVE-2021-31727
Incorrect access control in zam64.sys, zam32.sys in MalwareFox AntiMalware 2.74.0.150 where IOCTL's 0x80002014, 0x80002018 expose unrestricted disk read/write capabilities respectively. A non-privileged process can open a handle to \.\ZemanaAntiMalware, register with the driver using IOCTL...
CVE-2021-31728
Incorrect access control in zam64.sys, zam32.sys in MalwareFox AntiMalware 2.74.0.150 allows a non-privileged process to open a handle to \.\ZemanaAntiMalware, register itself with the driver by sending IOCTL 0x80002010, allocate executable memory using a flaw in IOCTL 0x80002040, install a hook...
CVE-2022-42045
Certain Zemana products are vulnerable to Arbitrary code injection. This affects Watchdog Anti-Malware 4.1.422 and Zemana AntiMalware 3.2.28...
Description of the security update for SharePoint Server 2019: October 14, 2025 (KB5002796)
None None...
EUVD-2018-7607
Malware in sbrugna...
EUVD-2018-7606
Malware in sbrugna...
EUVD-2018-7602
Malware in sbrugna...