CVE-2018-15734

An issue was discovered in STOPzilla AntiMalware 6.5.2.59. The driver file szkg64.sys contains an Arbitrary Write vulnerability due to not validating the output buffer address value from IOCtl 0x8000206B...

CVE-2018-15735

The CVE-2018-15735 issue affects STOPzilla AntiMalware 6.5.2.59 in the szkg64.sys driver, where an Arbitrary Write vulnerability arises from not validating the output-buffer address for IOCTL 0x8000206F. According to the linked metrics, exploitation is local with low complexity and requires low p...

CVE-2018-15735

An issue was discovered in STOPzilla AntiMalware 6.5.2.59. The driver file szkg64.sys contains an Arbitrary Write vulnerability due to not validating the output buffer address value from IOCtl 0x8000206F...

CVE-2018-15736

CVE-2018-15736 affects STOPzilla AntiMalware 6.5.2.59 via the szkg64.sys driver. The vulnerability arises from not validating the output buffer address value in IOCTL 0x8000204F, enabling a Denial of Service condition. Public records in the connected documents confirm the affected product/compone...

CVE-2018-15736

An issue was discovered in STOPzilla AntiMalware 6.5.2.59. The driver file szkg64.sys contains a Denial of Service vulnerability due to not validating the output buffer address value from IOCtl 0x8000204F...

CVE-2018-15737

An issue was discovered in STOPzilla AntiMalware 6.5.2.59. The driver file szkg64.sys contains a Denial of Service vulnerability due to not validating the output buffer address value from IOCtl 0x80002043...

CVE-2018-15737

The CVE-2018-15737 entry concerns STOPzilla AntiMalware 6.5.2.59, specifically the szkg64.sys driver. The vulnerability is a Denial of Service caused by not validating the output buffer address value from IOCTL 0x80002043. The issue is documented across multiple sources (NVD/RH/CNVD/CVE records) ...

CVE-2019-6739

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Malwarebytes Antimalware 3.6.1.2711. User interaction is required to exploit this vulnerability in that the target must visit a malicious web page. There is an issue with the way the product handle...

CVE-2019-6739

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Malwarebytes Antimalware 3.6.1.2711. User interaction is required to exploit this vulnerability in that the target must visit a malicious web page. There is an issue with the way the product handle...

Design/Logic Flaw

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Malwarebytes Antimalware 3.6.1.2711. User interaction is required to exploit this vulnerability in that the target must visit a malicious web page. There is an issue with the way the product handle...

CVE-2019-6739

CVE-2019-6739 affects Malwarebytes Anti-Malware (v3.6.1.2711). A vulnerability in URI handling within certain schemes allows remote code execution when a user visits a crafted web page. The root cause is improper sanitization of special characters in URIs, enabling arbitrary code execution in the...

CVE-2019-6739

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Malwarebytes Antimalware 3.6.1.2711. User interaction is required to exploit this vulnerability in that the target must visit a malicious web page. There is an issue with the way the product handle...

Improved Fallout EK comes back after short hiatus

Edit 2019-01-24 Fallout EK introduces a new dropper to facilitate the final payload retrieval. This update replaces the plain MZ we saw for a little while. -- After a short hiatus in early January, the Fallout exploit kit is back in business again with some new features for the new year. During i...

Code injection

Zemana AntiMalware before 3.0.658 Beta mishandles update logic...

CVE-2019-6440

Zemana AntiMalware before 3.0.658 Beta mishandles update logic...

CVE-2019-6440

Zemana AntiMalware before 3.0.658 Beta mishandles update logic...

CVE-2019-6440

Zemana AntiMalware before 3.0.658 Beta mishandles update logic...

CVE-2019-6440

Zemana AntiMalware before 3.0.658 Beta is affected by an issue in the update logic. The CVE describes mishandling of update logic, with affected product/version clearly stated as Zemana AntiMalware prior to 3.0.658 Beta. NVD metrics indicate high/critical impact (network attack vector, no authent...

Fallout Exploit Kit Releases the Kraken Ransomware on Its Victims

ARCHIVED STORY Fallout Exploit Kit Releases the Kraken Ransomware on Its Victims By John Fokker · October 30, 2018 Alexandr Solad and Daniel Hatheway of Recorded Future are coauthors of this post. Read Recorded Future’s version of this analysis. Rising from the deep, Kraken Cryptor ransomware has...

STOPzilla AntiMalware 6.5.2.59 - Privilege Escalation Exploit

Exploit for windows platform in category local exploits / Exploit Title: STOPzilla AntiMalware 6.5.2.59 - Privilege Escalation Author: Parvez Anwar @parvezghh Vendor Homepage: https://www.stopzilla.com/ Software link:...