yari

YARI - YARA Interactive Interactive debugger for the YARA language written in Rust. Debugger directly calls libyara avoiding emulation to get the most accurate results. 🚀 Features: Call functions from modules Get the value of module constants Evaluate complex expressions Check the matches of...

CVE-2025-3500-Poc

Lab: CVE-2025-3500 - Integer Overflow in Avast Antivirus Privilege Escalation Download Download Lab ZIP : https://github.com/chicken3962/CVE-2025-3500-Poc/releases/download/Release/cve-2025-3500.zip 🚀 Overview This repository provides a lab environment for researching CVE-2025-3500, an integer...

avscript

Avast Antivirus JavaScript Interpreter NOTE: On 03/11/2020 Avast announced they had decided to disable this interpreter globally! The main Avast antivirus process is called AvastSvc.exe, which runs as SYSTEM. That service loads the low level antivirus engine, and analyzes untrusted data received...

CVE-2009-4049

CVE-2009-4049 Heap-based buffer overflow in aswRdr.sys aka the TDI RDR driver in avast! Home and Professional 4.8.1356.0 allows local users to cause a denial of service memory corruption or possibly gain privileges via crafted arguments to IOCTL 0x80002024. While part of the reason as to why I di...

CVE-2026-80303

An integer underflow vulnerability in the Avast Windows Filtering Platform WFP stream parser on Windows allows denial of service by causing a system crash. The WFP callout driver processes network stream data and computes length values for packet fragment reassembly. The length calculation does n...

CVE-2026-80302

Insufficient isolation in the Avast sandbox file virtualization layer on Windows allows a local, low-privileged attacker executing inside the sandbox to write arbitrary files outside sandbox containment and execute code on the host. The sandbox virtualizes file system operations by intercepting...

CVE-2026-80301

Improper isolation in the Avast sandbox on Windows allows a local, low-privileged attacker executing inside the sandbox to access COM interfaces to the Task Scheduler service, escape containment, and execute code with elevated privileges outside the sandbox. The sandbox virtualizes file system an...

CVE-2026-80301

The Avast sandbox on Windows contains an improper isolation vulnerability that allows a local, low-privileged attacker to escape the sandbox environment. While the sandbox virtualizes the file system and registry, it fails to restrict COM interface access to the Task Scheduler service . An attack...

EUVD-2026-118331

Improper isolation in the Avast sandbox on Windows allows a local, low-privileged attacker executing inside the sandbox to access COM interfaces to the Task Scheduler service, escape containment, and execute code with elevated privileges outside the sandbox. The sandbox virtualizes file system an...

CVE-2026-80301 Avast sandbox escape via unpreserved COM pathway through Task Scheduler

Improper isolation in the Avast sandbox on Windows allows a local, low-privileged attacker executing inside the sandbox to access COM interfaces to the Task Scheduler service, escape containment, and execute code with elevated privileges outside the sandbox. The sandbox virtualizes file system an...

CVE-2026-80302 Avast sandbox escape via arbitrary file write in virtualized environment

Insufficient isolation in the Avast sandbox file virtualization layer on Windows allows a local, low-privileged attacker executing inside the sandbox to write arbitrary files outside sandbox containment and execute code on the host. The sandbox virtualizes file system operations by intercepting...

CVE-2026-80302

The Avast sandbox file virtualization layer on Windows suffers from insufficient isolation , allowing a local, low-privileged attacker executing inside the sandbox to perform an escape. The root cause is a failure to properly validate write targets in specific edge cases, which allows the attacke...

EUVD-2026-118330

Insufficient isolation in the Avast sandbox file virtualization layer on Windows allows a local, low-privileged attacker executing inside the sandbox to write arbitrary files outside sandbox containment and execute code on the host. The sandbox virtualizes file system operations by intercepting...

CVE-2026-80303 Avast WFP stream parser integer underflow causes system crash

An integer underflow vulnerability in the Avast Windows Filtering Platform WFP stream parser on Windows allows denial of service by causing a system crash. The WFP callout driver processes network stream data and computes length values for packet fragment reassembly. The length calculation does n...

CVE-2026-80303

The Avast Windows Filtering Platform (WFP) stream parser on Windows is vulnerable to an integer underflow (CWE-191). The WFP callout driver fails to properly validate input stream sizes against expected boundaries during packet fragment reassembly. Processing specially crafted input causes the le...

EUVD-2026-118328

An integer underflow vulnerability in the Avast Windows Filtering Platform WFP stream parser on Windows allows denial of service by causing a system crash. The WFP callout driver processes network stream data and computes length values for packet fragment reassembly. The length calculation does n...

CVE-2026-80303: Gen Digital: An integer underflow vulnerability in the Avast Windows Filtering Platform (WFP) stream parser on Windows allows denial…

An integer underflow vulnerability in the Avast Windows Filtering Platform WFP stream parser on Windows allows denial of service by causing a system crash. The WFP callout driver processes network stream data and computes length values for packet fragment reassembly. The length calculation does n...

CVE-2026-80301: Gen Digital: Improper isolation in the Avast sandbox on Windows allows a local, low-privileged attacker executing inside the sandbox…

Improper isolation in the Avast sandbox on Windows allows a local, low-privileged attacker executing inside the sandbox to access COM interfaces to the Task Scheduler service, escape containment, and execute code with elevated privileges outside the sandbox. The sandbox virtualizes file system an...

CVE-2026-80302: Gen Digital: Insufficient isolation in the Avast sandbox file virtualization layer on Windows allows a local, low-privileged…

Insufficient isolation in the Avast sandbox file virtualization layer on Windows allows a local, low-privileged attacker executing inside the sandbox to write arbitrary files outside sandbox containment and execute code on the host. The sandbox virtualizes file system operations by intercepting...

CVE-2026-6064

Link following vulnerability in Data Shredder components in Norton Antivirus, Avast Antivirus, and AVG Internet Security prior to 26.5.10933 on Windows allows a local, low-privileged attacker to escalate privileges to SYSTEM. During a privileged shred operation, enabling arbitrary file/folder...