CompuSource Systems Real Time Home Banking - Local Privilege Escalation

CompuSource Systems Real Time Home Banking - Local Privilege Escalation Exploit Title: CompuSource Systems - Real Time Home Banking - Local Privilege Escalation/Arbitrary Code Execution Date: 2/25/16 Exploit Author: [email protected] Vendor Homepage: https://www.css4cu.com :...

CompuSource Systems Local Privilege Escalation

Exploit Title: CompuSource Systems - Real Time Home Banking - Local Privilege Escalation/Arbitrary Code Execution Date: 2/25/16 Exploit Author: [email protected] Vendor Homepage: https://www.css4cu.com : https://www.css4cu.com/Next/InfoSide/SoftwareSolutions.php Version: CompuSource System...

Heuristics File System Secret Search: blueflower

blueflower is a command-line tool that looks for secrets such as private keys or passwords in a file structure. Interesting files are detected using heuristics on their names and on their content. Unlike some forensics tools, blueflower does not search in RAM, and does not attempt to identify...

Comodo AntiVirus - Forwards Emulated API Calls to the Real API During Scans

Comodo AntiVirus - Forwards Emulated API Calls to the Real API During Scans Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=769 Comodo Antivirus includes a x86 emulator that is used to unpack and monitor obfuscated executables, this is common practice among antivirus products. T...

Comodo AntiVirus - Forwards Emulated API Calls to the Real API During Scans

Exploit for windows platform in category remote exploits Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=769 Comodo Antivirus includes a x86 emulator that is used to unpack and monitor obfuscated executables, this is common practice among antivirus products. The idea is that...

Comodo AntiVirus - Forwards Emulated API Calls to the Real API During Scans

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=769 Comodo Antivirus includes a x86 emulator that is used to unpack and monitor obfuscated executables, this is common practice among antivirus products. The idea is that emulators can run the code safely for a short time, giving t...

AddressSanitizer (ASan) SUID Executable Privilege Escalation

This module attempts to gain root privileges on Linux systems using setuid executables compiled with AddressSanitizer ASan. ASan configuration related environment variables are permitted when executing setuid executables built with libasan. The logpath option can be set using the ASANOPTIONS...

WinImage DLL Hijacking

Hi @ll, the executable installer winima90.exe and previous versions available from loads and executes CRTdll.dll, UXTheme.dll, RichEd32.dll and WindowsCodecs.dll from its "application directory". Self-extracting executables created with WinImage load and execute CRTdll.dll, UXTheme.dll and MPR.dl...

Avast! - Out-of-Bounds Write Decrypting PEncrypt Packed executables

Avast! - Out-of-Bounds Write Decrypting PEncrypt Packed executables Source: https://code.google.com/p/google-security-research/issues/detail?id=554 The attached PEncrypt packed executable causes an OOB write on Avast Server Edition. gdb bt 0 0xf6f5e64a in EmulatePolyCodePOLYINFO, int from...

VirusTotal now Scans Mac OS X Apps for Malware

Do Mac Computers Get Viruses? Yes, Of Course, they do! According to stats, malware for MAC OS X has appeared five times more in 2015 alone than the previous five years combined. As malware for Macs is becoming more common, Google has decided to add support for Mac OS X malware detection to its...

CVE-2011-4089

The bzexe command in bzip2 1.0.5 and earlier generates compressed executables that do not properly handle temporary files during extraction, which allows local users to execute arbitrary code by precreating a temporary directory...

Kaspersky Anti-Virus DoS

The vulnerability of Kaspersky Anti-Virus lies in a flaw in its memory processing mechanism when dealing with compressed executable files. Exploiting this vulnerability can allow an attacker to cause service interruptions...

Kaspersky Anti-Virus Code Execution

The vulnerability of Kaspersky Anti-Virus lies in a memory corruption that occurs during the unpacking of executable files. Exploiting this vulnerability allows an attacker to cause service interruptions or execute arbitrary code using the executable file packed with UPX during the antivirus...

Kaspersky Anti-Virus Code Execution

The vulnerability of Kaspersky Anti-Virus lies in a memory corruption that occurs during the unpacking of executable files. Exploiting this vulnerability allows an attacker to cause service failures or execute arbitrary code using the executable file packed by the “Yoda’s Protector” tool, during...

Microsoft Windows Trusted Boot Security Feature Bypass Vulnerability

Microsoft Windows is a series of operating systems released by Microsoft Corporation in the United States. kernel is one of the kernels. A security feature bypass vulnerability exists in Microsoft Windows. An attacker can exploit this vulnerability to disable code integrity checking, load signed...

Kaspersky AntiVirus - PE Unpacking Integer Overflow

Kaspersky AntiVirus - PE Unpacking Integer Overflow Source: https://code.google.com/p/google-security-research/issues/detail?id=526 Fuzzing of packed executables found the attached crash. 0:022 g 83c.bbc: Access violation - code c0000005 first chance First chance exceptions are reported before an...

Kaspersky AntiVirus - ExeCryptor Parsing Memory Corruption

Kaspersky AntiVirus - ExeCryptor Parsing Memory Corruption Source: https://code.google.com/p/google-security-research/issues/detail?id=525 Fuzzing packed executables found the attached crash, it might be usable as an information leak as part of another bug, so filing as a low-risk bug. If I had t...

Kaspersky AntiVirus - PE Unpacking Integer Overflow

Source: https://code.google.com/p/google-security-research/issues/detail?id=526 Fuzzing of packed executables found the attached crash. 0:022 g 83c.bbc: Access violation - code c0000005 first chance First chance exceptions are reported before any exception handling. This exception may be expected...

OS X Install.framework suid Helper Privilege Escalation Vulnerability

Exploit for macOS platform in category local exploits Source: https://code.google.com/p/google-security-research/issues/detail?id=314 The private Install.framework has a few helper executables in /System/Library/PrivateFrameworks/Install.framework/Resources, one of which is suid root: -rwsr-sr-x ...

iOS Mac OS X Code Signing Bypass

The vulnerability of iOS and Mac OS X operating systems is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to bypass the code signing mechanism by adding code to the created executable file...