127 matches found
CVE-2026-36425
CVE-2026-36425 : OPSWAT AppRemover 任意进程终止 一个已签名的 OPSWAT 内核驱动程序，可按需终止任意进程。无需管理员权限，无权限检查，也不会询问任何问题。将其指向 EDR、杀毒软件或受 PPL 保护的进程，目标即被终止。三种不同的终止方法，全部在内核模式下运行，全部由任意本地用户通过单个 IOCTL 触发。已识别出 16 个存在漏洞的驱动程序变体，均具有有效签名。 ⚠️ 本仓库仅供教育和研究目的使用。作者对所提供的任何信息或工具被滥用不承担任何责任。 📝 博客文章： 介绍 CVE-2026-36425 | OPSWAT EDR 终结者...
Spark RAT Targets Cambodia, Abuses Vulnerable OPSWAT Driver to Disable Security Tools
Individuals and organizations in Cambodia have emerged as the target of a new campaign that delivers an open-source remote access trojan RAT called Spark RAT. "The samples employ diverse lure themes, suggesting an effort to appeal to a broad range of potential victims. These include government...
VulnCheck KEV: CVE-2026-36425
An issue in OPSWAT AppRemover Driver ardrv.sys v2017.10.02.1551 and earlier in IOCTL handler 0x2420031. Any local user can open the device and send process termination requests without privilege validation...
CVE-2026-66152
A Path traversal vulnerability in the SonicWall NetExtender Linux client file extractor component allows an attacker to write arbitrary file as root...
EUVD-2026-65747
A Path traversal vulnerability in OPSWAT tarball in the SonicWall NetExtender Linux client allows an attacker to write arbitrary file as root...
CVE-2026-66152
A Path traversal vulnerability in the SonicWall NetExtender Linux client file extractor component allows an attacker to write arbitrary file as root...
CVE-2026-66152
A Path traversal vulnerability exists in the SonicWall NetExtender Linux client file extractor component, specifically within the OPSWAT tarball . This flaw allows an attacker to write arbitrary files with root privileges by using special characters like ../ to access directories outside the inte...
CVE-2026-66152
A Path traversal vulnerability in the SonicWall NetExtender Linux client file extractor component allows an attacker to write arbitrary file as root...
SonicWall NetExtender Linux Client Multiple Vulnerabilities
1 CVE-2026-66152 - SonicWall NetExtender arbitrary file write via path traversal vulnerabilityA Path traversal vulnerability in the SonicWall NetExtender Linux client file extractor component allows an attacker to write arbitrary file as root. CVSS Score: 8.8 CVSS Vector:...
PT-2026-81517
Name of the Vulnerable Software and Affected Versions SonicWall NetExtender Linux client affected versions not specified Description A path traversal issue exists within the OPSWAT tarball component. This flaw allows an attacker to write arbitrary files with root privileges. Path traversal is a...
PT-2026-60576
Name of the Vulnerable Software and Affected Versions OPSWAT AppRemover versions prior to 2017.10.02.1551 Description An issue exists in the IOCTL handler 0x2420031 of the OPSWAT AppRemover Driver ardrv.sys. This flaw allows any local user to open the device and send process termination requests...
CVE-2026-36425
An issue in OPSWAT AppRemover Driver ardrv.sys v2017.10.02.1551 and earlier in IOCTL handler 0x2420031. Any local user can open the device and send process termination requests without privilege validation...
CVE-2026-36425: Improper Privilege Management
An issue in OPSWAT AppRemover Driver ardrv.sys v2017.10.02.1551 and earlier in IOCTL handler 0x2420031. Any local user can open the device and send process termination requests without privilege validation...
Exploit for CVE-2026-36425
CVE-2026-36425 — OPSWAT AppRemover Driver ardrv.sys Improper...
EUVD-2018-8127
Malware in sbrugna...
EUVD-2023-40602
Malicious code in bioql PyPI...
EUVD-2022-44044
Malicious code in bioql PyPI...
EUVD-2024-53900
Malicious code in bioql PyPI...