CVE-2019-12899

Delta Electronics DeviceNet Builder 2.04 has a User Mode Write AV starting at ntdll!RtlQueueWorkItem+0x00000000000005e3...

EUVD-2019-4477

Malware in sbrugna...

EUVD-2017-18802

Malware in sbrugna...

EUVD-2017-2381

Malware in sbrugna...

EUVD-2017-6079

Malware in sbrugna...

EUVD-2019-7399

Malware in sbrugna...

EUVD-2017-2414

Malware in sbrugna...

EUVD-2019-8522

Malware in sbrugna...

EUVD-2017-2399

Malware in sbrugna...

EUVD-2019-4474

Malware in sbrugna...

CVE-2019-9967

XnView Classic 2.48 on Windows allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted file, related to ntdll!RtlPrefixUnicodeString...

CVE-2019-18820

Eximious Logo Designer 3.82 has Heap Corruption starting at ntdll!RtlpNtMakeTemporaryKey+0x0000000000001a78...

CrimsonEDR - Simulate The Behavior Of AV/EDR For Malware Development Training

CrimsonEDR is an open-source project engineered to identify specific malware patterns, offering a tool for honing skills in circumventing Endpoint Detection and Response EDR. By leveraging diverse detection methods, it empowers users to deepen their understanding of security evasion tactics...

RefleXXion - A Utility Designed To Aid In Bypassing User-Mode Hooks Utilised By AV/EPP/EDR Etc

Introduction RefleXXion is a utility designed to aid in bypassing user-mode hooks utilised by AV/EPP/EDR etc. In order to bypass the user-mode hooks, it first collects the syscall numbers of the NtOpenFile, NtCreateSection, NtOpenSection and NtMapViewOfSection found in the LdrpThunkSignature arra...

Backdoor.Win32.Nucleroot.mf Buffer Overflow

Discovery / credits: Malvuln - malvuln.com c 2021 Original source: https://malvuln.com/advisory/8de56eef118187a89eeab972288ce94d.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.Nucleroot.mf Vulnerability: Stack Buffer Overflow Description: Description: MaskPE by...

CVE-2020-23894

A User Mode Write AV in ntdll!RtlpCoalesceFreeBlocks+0x268 of WildBit Viewer v6.6 allows attackers to cause a denial of service DoS via a crafted tiff file...

CVE-2020-23886

XnView MP v0.96.4 was discovered to contain a heap overflow which allows attackers to cause a denial of service DoS via a crafted pict file. Related to a User Mode Write AV starting at ntdll!RtlpLowFragHeapFree...

Design/Logic Flaw

A User Mode Write AV in ntdll!RtlpCoalesceFreeBlocks+0x268 of WildBit Viewer v6.6 allows attackers to cause a denial of service DoS via a crafted tiff file...

CVE-2020-23894

WildBit Viewer v6.6 is affected by CVE-2020-23894 due to a User Mode Write AV in ntdll!RtlpCoalesceFreeBlocks+0x268, enabling denial of service via a specially crafted TIFF file. The Red Hat advisory and CNVD/CNNVD entries corroborate the same root cause and impact (DoS). Public details in the pr...

CVE-2020-23894

A User Mode Write AV in ntdll!RtlpCoalesceFreeBlocks+0x268 of WildBit Viewer v6.6 allows attackers to cause a denial of service DoS via a crafted tiff file...