CVE-2026-36425

CVE-2026-36425 : OPSWAT AppRemover 任意进程终止 一个已签名的 OPSWAT 内核驱动程序，可按需终止任意进程。无需管理员权限，无权限检查，也不会询问任何问题。将其指向 EDR、杀毒软件或受 PPL 保护的进程，目标即被终止。三种不同的终止方法，全部在内核模式下运行，全部由任意本地用户通过单个 IOCTL 触发。已识别出 16 个存在漏洞的驱动程序变体，均具有有效签名。 ⚠️ 本仓库仅供教育和研究目的使用。作者对所提供的任何信息或工具被滥用不承担任何责任。 📝 博客文章： 介绍 CVE-2026-36425 | OPSWAT EDR 终结者...

CVE-2025-66676

CVE-2025-66676 In IOBit Unlocker 1.3.0.11 and earlier, the application allows arbitrary process termination by trying to unlock a file. Background The application is used to unlock a unlocked file. By specifying the process image file of a running process as the locked file, IOBit unlocker will t...

CVE-2025-60349

CVE-2025-60349: Terminación Arbitraria de Procesos en Pxscan Se descubrió un problema en Prevx v3.0.5.220 que permite a los atacantes provocar una denegación de servicio enviando el código IOCTL 0x22E044 al controlador pxscan.sys. Cualquier proceso listado bajo la clave de registro...

CVE-2026-15599 Arbitrary Process Termination in TÜBİTAK BİLGEM's pardus-domain-joiner

Unverified ownership vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute pardus-domain-joiner allows Privilege Abuse. This issue affects pardus-domain-joiner: before 0.5.5...

CVE-2026-15599

The CVE-2026-15599 entry concerns TÜBİTAK BİLGEM Software Technologies Research Institute’s pardus-domain-joiner (affected: before 0.5.5). The issue is described as an unverified ownership vulnerability that enables Privilege Abuse. CVSS 3.1 base score is 3.3 (LOW), with LOCAL attack vector, low ...

CVE-2026-35081 Arbitrary process termination vulnerability in method ugw-logstop

The ugw-logstop method allows a remote attacker with user privileges to terminate arbitrary processes due to insufficient validation of user-supplied input...

CVE-2026-35081

CVE-2026-35081 documents an Arbitrary process termination vulnerability in the ugw-logstop method. A remote attacker with user privileges can terminate arbitrary processes due to insufficient input validation. The Connected documents provide the description and CVSS metrics (CVSSv4.0 base 7.2 HIG...

EUVD-2011-1782

Malware in sbrugna...

EUVD-2024-17578

Malicious code in bioql PyPI...

CVE-2025-37128 Authenticated Arbitrary Process Termination allows potential System Disruption in ECOS

A vulnerability in the web API of HPE Aruba Networking EdgeConnect SD-WAN Gateways could allow an authenticated remote attacker to terminate arbitrary running processes. Successful exploitation could allow an attacker to disrupt system operations, potentially resulting in an unstable system state...

CVE-2019-10724

There is a vulnerability with the Dolby DAX2 API system services in which a low-privileged user can terminate arbitrary processes that are running at a higher privilege. The following are affected products and versions: Legion Y520TZ370 6.0.1.8642, AIO310-20IAP 6.0.1.8642, AIO510-22ISH 6.0.1.8642...

CVE-2024-51324

An issue in the BdApiUtil driver of Baidu Antivirus v5.2.3.116083 allows attackers to terminate arbitrary process via executing a BYOVD Bring Your Own Vulnerable Driver attack...

CVE-2024-51324

An issue in the BdApiUtil driver of Baidu Antivirus v5.2.3.116083 allows attackers to terminate arbitrary process via executing a BYOVD Bring Your Own Vulnerable Driver attack...

CVE-2024-51324

CVE-2024-51324 exists in Baidu Antivirus driver BdApiUtil64.sys (v5.2.3.116083). The vulnerability arises from an IOCTL handler (0x800024B4) that terminates a target process without privilege validation, enabling a BYOVD attack to kill arbitrary processes from user mode. Exploitation chain demons...

PT-2025-6398

Name of the Vulnerable Software and Affected Versions Baidu Antivirus version 5.2.3.116083 Description An issue in the BdApiUtil driver of Baidu Antivirus allows attackers to terminate arbitrary processes by executing a Bring Your Own Vulnerable Driver BYOVD attack. The DeadLock ransomware has be...

VulnCheck KEV: CVE-2024-1853

Zemana AntiLogger v2.74.204.664 is vulnerable to an Arbitrary Process Termination vulnerability by triggering the 0x80002048 IOCTL code of the zam64.sys and zamguard64.sys drivers...

CVE-2024-1853

Zemana AntiLogger v2.74.204.664 is vulnerable to an Arbitrary Process Termination vulnerability by triggering the 0x80002048 IOCTL code of the zam64.sys and zamguard64.sys drivers...

CVE-2024-1853

CVE-2024-1853 affects Zemana AntiLogger v2.74.204.664. It exposes an Arbitrary Process Termination vulnerability by triggering IOCTL code 0x80002048 in the vulnerable drivers zam64.sys and zamguard64.sys , enabling an attacker to terminate processes. Public materials describe BYOVD-style driver a...

CVE-2024-1853 Zemana AntiLogger v2.74.204.664 - Arbitrary Process Termination

Zemana AntiLogger v2.74.204.664 is vulnerable to an Arbitrary Process Termination vulnerability by triggering the 0x80002048 IOCTL code of the zam64.sys and zamguard64.sys drivers...

CVE-2024-1853 Zemana AntiLogger v2.74.204.664 - Arbitrary Process Termination

Zemana AntiLogger v2.74.204.664 is vulnerable to an Arbitrary Process Termination vulnerability by triggering the 0x80002048 IOCTL code of the zam64.sys and zamguard64.sys drivers...