115 matches found
Raccine
Raccine A Simple Ransomware Protection Why We see ransomware delete all shadow copies using vssadmin pretty often. What if we could just intercept that request and kill the invoking process? Let's try to create a simple vaccine. How it works We register a debugger for vssadmin.exe and wmic.exe,...
SelectMyParent
What's this This is a project for parent process spoofing. How to use step 1:Select a parent process and remember the pid Step 2:Execute the following command. Implement parent process spoofing SelectMyParent.exe notepad 928 Step 3:Using process explorer to view the process tree, you can see the...
ppid-spoofing
https://www.countercept.com/blog/detecting-parent-pid-spoofing/...
CVE-2017-11882-Blocker
CVE-2017-11882-Blocker A Windows driver that neutralizes CVE-2017-11882 : How it works This project is split into a kernel driver and a user-mode notification component that talk over a custom device using the inverted call model. Kernel driver 1. Process callback - DriverEntry registers a...
GHSA-JM7P-CC5G-QWXX Electron: Parent process code-sign check is spoofable
Impact On macOS, the check Electron uses to confirm it was launched by a same-signed parent process could be bypassed by a local process. Apps that enable the fuse-based hardening restricting ELECTRONRUNASNODE and NODEOPTIONS to same-signed parents rely on this check; a local attacker could bypas...
NPM: Electron: Parent process code-sign check is spoofable
NPM: Electron: Parent process code-sign check is spoofable vulnerability discovered by ? in WordPress Npm electron versions 39.8.8...
CVE-2026-70597
Electron on macOS had a bug where the code-sign check that verifies a launched app’s parent process could be bypassed by a local attacker. This affects Electron versions prior to 39.8.8, 40.9.0, 41.2.1, and 42.0.0-beta.3. By exploiting this, a local attacker could bypass the fuse-based hardening ...
laurel v0.8.2
Linux Audit – Usable, Robust, Easy Logging LAUREL is an event post-processing plugin for auditd8 that generates useful, enriched JSON-based audit logs suitable for modern security monitoring setups. Documentation corresponding to the latest stable release can be found here. Why? TLDR: Instead of...
SUSE CVE-2026-46259
In the Linux kernel, the following vulnerability has been resolved: procfs: fix missing RCU protection when reading realparent in dotaskstat When reading /proc/pid/stat, dotaskstat accesses task-realparent without proper RCU protection, which leads to: cpu 0 cpu 1 ----- ----- dotaskstat var =...
EUVD-2016-4992
Malware in sbrugna...
EUVD-2021-7368
Malicious code in bioql PyPI...
CVE-2024-43704
Software installed and run as a non-privileged user may conduct improper GPU system calls to gain access to the graphics buffers of a parent process...
Imagination GPU Driver security vulnerabilities
Imagination GPU Driver is a graphics driver from Imagination. A security vulnerability exists in Imagination GPU Driver DDK24.2 RTM1 and earlier versions, which originates from software installed and run as an unprivileged user, and may make improper GPU system calls to access the graphics buffer...
firefox: DOM push subscription message could hang Firefox
The Mozilla Foundation's Security Advisory: By sending a specially crafted push message, a remote server could hang the parent process, causing the browser to become unresponsive...
firefox: DOM push subscription message could hang Firefox
The Mozilla Foundation's Security Advisory: By sending a specially crafted push message, a remote server could hang the parent process, causing the browser to become unresponsive...
firefox: DOM push subscription message could hang Firefox
The Mozilla Foundation's Security Advisory: By sending a specially crafted push message, a remote server could hang the parent process, causing the browser to become unresponsive...
firefox: DOM push subscription message could hang Firefox
The Mozilla Foundation's Security Advisory: By sending a specially crafted push message, a remote server could hang the parent process, causing the browser to become unresponsive...
firefox: DOM push subscription message could hang Firefox
The Mozilla Foundation's Security Advisory: By sending a specially crafted push message, a remote server could hang the parent process, causing the browser to become unresponsive...
firefox: DOM push subscription message could hang Firefox
The Mozilla Foundation's Security Advisory: By sending a specially crafted push message, a remote server could hang the parent process, causing the browser to become unresponsive...
