Exploit-CVE-2017-6008

Exploit-CVE-2017-6008 CVE-2017-6008 es una vulnerabilidad en el escáner de HitmanPro que permite la escalada de privilegios explotando un desbordamiento de búfer del pool del kernel. Los exploits aquí incluidos utilizan el ataque Quota Process Pointer Overwrite como se describe en el documento de...

EUVD-2021-12182

Malware in sbrugna...

EUVD-2017-15075

Malware in sbrugna...

EUVD-2017-16465

Malware in sbrugna...

CVE-2021-25271

A local attacker could read or write arbitrary files with administrator privileges in HitmanPro before version Build 318...

Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Sophos Hitmanpro

引用 这篇文章的目的是介绍一种基于内核态内存的越界写入通用利用技术和相关工具复现. toc 简介 笔者的在原作者池风水利用工具以下简称工具基础上进行二次开发,新增了全自动获取内核调试模块符号的偏移量及配置参数和不同漏洞利用方式优化等功能, 解决了不同Windows版本适配问题,工具包括适配驱动和利用程序两部分组成,实现了在Windows 10 19H1之后任意版本包括满补丁系统上的稳定利用. 自Windows 10 19H1开始，用户层段堆（Segment Heap）结构后端逻辑被用于内核层，主要分为低碎片化堆Low-fragmentation Heap与VS堆Variable Size...

Sophos HitmanPro has an unspecified vulnerability (CNVD-2021-103402)

Sophos HitmanPro is an excellent multi-engine cloud anti-virus scanner from Sophos UK.A security vulnerability exists in Sophos HitmanPro, which stems from a lack of authentication, access control, privilege management and other security measures in the network system or product. A local attacker...

Sophos HitmanPro has an unspecified vulnerability

Sophos HitmanPro is an excellent multi-engine cloud anti-virus scanner from Sophos UK.Sophos HitmanPro suffers from a security vulnerability that stems from a lack of authentication, access control, permission management and other security measures in the network system or product, which could be...

CVE-2021-25271

A local attacker could read or write arbitrary files with administrator privileges in HitmanPro before version Build 318...

CVE-2021-25271

A local attacker could read or write arbitrary files with administrator privileges in HitmanPro before version Build 318...

Design/Logic Flaw

A local attacker could read or write arbitrary files with administrator privileges in HitmanPro before version Build 318...

CVE-2021-25271

The CVE-2021-25271 vulnerability affects Sophos HitmanPro prior to Build 318. A local attacker can read or write arbitrary files with administrator privileges due to improper access control, enabling escalation on affected installations. Connected sources consistently reference HitmanPro and Buil...

CVE-2021-25271

A local attacker could read or write arbitrary files with administrator privileges in HitmanPro before version Build 318...

CVE-2021-25270

CVE-2021-25270 concerns HitmanPro.Alert prior to Build 901, where a local attacker could execute arbitrary code with administrator privileges. The vulnerability is described across multiple sources (e.g., Red Hat, NVD) as a local-privilege escalation affecting HitmanPro.Alert before 901. The exac...

Sophos HitmanPro 安全漏洞

Sophos HitmanPro is an excellent multi-engine cloud anti-virus scanner from Sophos UK.Sophos HitmanPro suffers from a security vulnerability that stems from a lack of authentication, access control, permission management and other security measures in the network system or product, which could be...

Sophos HitmanPro 安全漏洞

Sophos HitmanPro is an excellent multi-engine cloud anti-virus scanner from Sophos UK.A security vulnerability exists in Sophos HitmanPro, which stems from a lack of authentication, access control, privilege management and other security measures in the network system or product. A local attacker...

CVE-2020-9540

Technical details about CVE-2020-9540 are not publicly available in the provided documents; no affected products, exploit vectors, or fixes are disclosed here. Monitor for updates.

CVE-2018-3970

An exploitable memory disclosure vulnerability exists in the 0x222000 IOCTL handler functionality of Sophos HitmanPro.Alert 3.7.6.744. A specially crafted IRP request can cause the driver to return uninitialized memory, resulting in kernel memory disclosure. An attacker can send an IRP request to...

CVE-2018-3971

An exploitable arbitrary write vulnerability exists in the 0x2222CC IOCTL handler functionality of Sophos HitmanPro.Alert 3.7.6.744. A specially crafted IRP request can cause the driver to write data under controlled by an attacker address, resulting in memory corruption. An attacker can send IRP...

CVE-2018-3970

Sophos HitmanPro.Alert 3.7.6.744 contains an exploitable memory-disclosure vulnerability in the hmpalert IOCTL handler (0x222000). A crafted IRP/IOCTL request can leak kernel memory to user mode, as confirmed by TALOS-2018-0635 and related OpenVAS/PT-2018-16350 analyses. The issue affects the IOC...