1018 matches found
Hershell - Multiplatform Reverse Shell Generator
Simple TCP reverse shell written in Go. It uses TLS to secure the communications, and provide a certificate public key fingerprint pinning feature, preventing from traffic interception. Supported OS are: Windows Linux Mac OS FreeBSD and derivatives Why ? Although meterpreter payloads are great,...
SysWhispers - AV/EDR Evasion Via Direct System Calls
SysWhispers helps with evasion by generating header/ASM files implants can use to make direct system calls. All core syscalls are supported from Windows XP to 10. Example generated files available in example-output/. Introduction Various security products place hooks in user-mode APIs which allow...
UBUNTU-CVE-2019-20160
An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is a stack-based buffer overflow in the function av1parsetilegroup in mediatools/avparsers.c...
Stealthy Malware Flies Under AV Radar with Advanced Obfuscation
Researchers warn hackers are putting a new spin on old injection techniques and successfully end-running endpoint protection. They are tracking a campaign, that kicked off in January, that is still going strong exploiting weaknesses in web browsers. The objective is to hide in the background of...
September 10, 2019—KB4516033 (Security-only update)
None None...
CVE-2019-18819
Eximious Logo Designer 3.82 has a User Mode Write AV starting at ExiVectorRender!StrokeTextBlend+0x00000000000003a7...
CVE-2019-18821
Eximious Logo Designer 3.82 has a User Mode Write AV starting at ExiCustomPathLib!ExiCustomPathLib::CGradientColorsProfile::BuildGradientColorsTable+0x0000000000000053...
Code injection
Eximious Logo Designer 3.82 has a User Mode Write AV starting at ExiVectorRender!StrokeTextBlend+0x00000000000003a7...
CVE-2019-18819
Eximious Logo Designer 3.82 is affected by CVE-2019-18819, described as a user-mode write access conflict in ExiVectorRender!StrokeText_Blend+0x…3a7. Multiple sources (CNVD-2019-40495, RH: CVE-2019-18819, NVD) corroborate a vulnerability path within the logo design software that can lead to abnor...
CVE-2019-18821
Eximious Logo Designer 3.82 has a User Mode Write AV starting at ExiCustomPathLib!ExiCustomPathLib::CGradientColorsProfile::BuildGradientColorsTable+0x0000000000000053...
CVE-2019-18821
CVE-2019-18821 affects EximiousSoft Logo Designer 3.82. The connected sources describe a user-mode write access conflict starting at ExiCustomPathLib!ExiCustomPathLib::CGradientColorsProfile::BuildGradientColorsTable+0x53 (0x53). Several documents note potential denial of service due to this vuln...
CVE-2019-3636
A File Masquerade vulnerability in McAfee Total Protection MTP version 16.0.R21 and earlier in Windows client allowed an attacker to read the plaintext list of AV-Scan exclusion files from the Windows registry, and to possibly replace excluded files with potential malware without being detected...
Design/Logic Flaw
A File Masquerade vulnerability in McAfee Total Protection MTP version 16.0.R21 and earlier in Windows client allowed an attacker to read the plaintext list of AV-Scan exclusion files from the Windows registry, and to possibly replace excluded files with potential malware without being detected...
CVE-2019-3636 File masquerade attack vulnerability in McAfee Total Protection
A File Masquerade vulnerability in McAfee Total Protection MTP version 16.0.R21 and earlier in Windows client allowed an attacker to read the plaintext list of AV-Scan exclusion files from the Windows registry, and to possibly replace excluded files with potential malware without being detected...
CVE-2019-3636
McAfee Total Protection Windows client (versions up to 16.0.R21) is affected by CVE-2019-3636, a local File Masquerade vulnerability that lets an attacker read the plaintext list of AV-Scan exclusion files from the Windows registry and potentially replace excluded files with malware without detec...
CVE-2019-17262
XnView Classic 2.49.1 allows a User Mode Write AV starting at Xwsq+0x0000000000001fc0...
CVE-2019-17259
KMPlayer 4.2.2.31 allows a User Mode Write AV starting at utils!srcnew+0x000000000014d6ee...
CVE-2019-17253
IrfanView 4.53 allows a User Mode Write AV starting at JPEGLS+0x000000000000a6b8...