CVE-2019-6739

CVE-2019-6739 affects Malwarebytes Anti-Malware (v3.6.1.2711). A vulnerability in URI handling within certain schemes allows remote code execution when a user visits a crafted web page. The root cause is improper sanitization of special characters in URIs, enabling arbitrary code execution in the...

CVE-2019-6739

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Malwarebytes Antimalware 3.6.1.2711. User interaction is required to exploit this vulnerability in that the target must visit a malicious web page. There is an issue with the way the product handle...

Improved Fallout EK comes back after short hiatus

Edit 2019-01-24 Fallout EK introduces a new dropper to facilitate the final payload retrieval. This update replaces the plain MZ we saw for a little while. -- After a short hiatus in early January, the Fallout exploit kit is back in business again with some new features for the new year. During i...

Code injection

Zemana AntiMalware before 3.0.658 Beta mishandles update logic...

CVE-2019-6440

Zemana AntiMalware before 3.0.658 Beta mishandles update logic...

CVE-2019-6440

Zemana AntiMalware before 3.0.658 Beta mishandles update logic...

CVE-2019-6440

Zemana AntiMalware before 3.0.658 Beta is affected by an issue in the update logic. The CVE describes mishandling of update logic, with affected product/version clearly stated as Zemana AntiMalware prior to 3.0.658 Beta. NVD metrics indicate high/critical impact (network attack vector, no authent...

CVE-2019-6440

Zemana AntiMalware before 3.0.658 Beta mishandles update logic...

Fallout Exploit Kit Releases the Kraken Ransomware on Its Victims

ARCHIVED STORY Fallout Exploit Kit Releases the Kraken Ransomware on Its Victims By John Fokker · October 30, 2018 Alexandr Solad and Daniel Hatheway of Recorded Future are coauthors of this post. Read Recorded Future’s version of this analysis. Rising from the deep, Kraken Cryptor ransomware has...

STOPzilla AntiMalware 6.5.2.59 - Privilege Escalation Exploit

Exploit for windows platform in category local exploits / Exploit Title: STOPzilla AntiMalware 6.5.2.59 - Privilege Escalation Author: Parvez Anwar @parvezghh Vendor Homepage: https://www.stopzilla.com/ Software link:...

STOPzilla AntiMalware 6.5.2.59 - Privilege Escalation (2)

STOPzilla AntiMalware 6.5.2.59 - Privilege Escalation 2 / 3y3t3m th!s - Ivan Ivanovic Ivanov Иван-дурак недействительный 31337 Team clone of https://www.exploit-db.com/exploits/45401 deb yaaaa win7 narrrr fails ch@ng3 p@yl0@d!!!!!!!!!!!!! / include include include include pragma...

STOPzilla AntiMalware 6.5.2.59 Privilege Escalation

/ Exploit Title: STOPzilla AntiMalware 6.5.2.59 - Privilege Escalation Date: 2018-09-13 Author: Parvez Anwar @parvezghh Vendor Homepage: https://www.stopzilla.com/ Software link: https://download.stopzilla.com/binaries/stopzilla/autoinstaller/STOPzillaAntiMalware.msi Tested Version: 6.5.2.59 Driv...

STOPzilla AntiMalware 6.5.2.59 - Privilege Escalation (1)

STOPzilla AntiMalware 6.5.2.59 - Privilege Escalation 1 / Exploit Title: STOPzilla AntiMalware 6.5.2.59 - Privilege Escalation Date: 2018-09-13 Author: Parvez Anwar @parvezghh Vendor Homepage: https://www.stopzilla.com/ Software link:...

STOPzilla AntiMalware 6.5.2.59 - Privilege Escalation (1)

/ Exploit Title: STOPzilla AntiMalware 6.5.2.59 - Privilege Escalation Date: 2018-09-13 Author: Parvez Anwar @parvezghh Vendor Homepage: https://www.stopzilla.com/ Software link: https://download.stopzilla.com/binaries/stopzilla/autoinstaller/STOPzillaAntiMalware.msi Tested Version: 6.5.2.59 Driv...

Microsoft Windows: Boot-Start Driver Initialization Policy

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winbootstartdriverinitialization.nasl 11337 2018-09-11 14:23:53Z emoss $ Check value for Boot-Start Driver Initialization Policy Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH,...

Microsoft Malware Protection Engine Remote Code Execution Vulnerability

A remote code execution vulnerability exists when the Microsoft Malware Protection Engine does not properly scan a specially crafted file, leading to memory corruption. An attacker who successfully exploited this vulnerability could execute arbitrary code in the security context of the LocalSyste...

MalwareFox AntiMalware 2.74.0.150 - Privilege Escalation

/ Title: MalwareFox AntiMalware 2.74.0.150 - Local Privilege Escalation Date: 03/02/2018 Author: Souhail Hammou Vendor Homepage: https://www.malwarefox.com/ Version: 2.74.0.150 Tested on: Windows 7 32-bit / Windows 10 64-bit CVE: CVE-2018-6606 / include include include BOOL...

MalwareFox AntiMalware 2.74.0.150 - Privilege Escalation Exploit

Exploit for windows platform in category local exploits / Title : MalwareFox AntiMalware 2.74.0.150 - Local Privilege Escalation Date : 02/02/2018 Author : Souhail Hammou Vendor Homepage : https://www.malwarefox.com/ Version : 2.74.0.150 Tested on : Windows 7 32-bit / Windows 10 64-bit CVE :...

MalwareFox AntiMalware Local Elevation of Privilege Vulnerability (CNVD-2018-04848)

MalwareFox AntiMalware is a suite of malware removal tools from the American company MalwareFox. The tool automatically detects and removes malware, cleans browsers, repairs files corrupted by rootkits and protects against virus infections in real time. A local elevation of privilege vulnerabilit...

MalwareFox AntiMalware 2.74.0.150 - Local Privilege Escalation

MalwareFox AntiMalware 2.74.0.150 - Local Privilege Escalation / Title : MalwareFox AntiMalware 2.74.0.150 - Local Privilege Escalation Date : 02/02/2018 Author : Souhail Hammou Vendor Homepage : https://www.malwarefox.com/ Version : 2.74.0.150 Tested on : Windows 7 32-bit / Windows 10 64-bit CVE...