Lucene search
+L

60 matches found

Kitploit
Kitploit
added 2026/09/13 3:27 p.m.3 views

Raccine

Raccine Una protección sencilla contra el ransomware Por qué Con frecuencia vemos ransomware que elimina todas las copias de sombra mediante vssadmin. ¿Y si pudiéramos interceptar esa petición y matar el proceso que la invoca? Intentemos crear una vacuna sencilla. Cómo funciona Registramos un...

5.9AI score
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/11 6:59 a.m.8 views

rusty_drivers

RustyDrivers This project is a BYOVD collection with the focus on killing EDR / AV processes. Currently the following drivers are supported: Blocked means that the driver is in the block list of Microsoft and cannot be executed on an up to date Windows. Build root@kitploit: cargo build --release...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/10 2:59 p.m.11 views

Mhyprot2DrvControl

Mhyprot2DrvControl Una librería que permite usar el controlador mhyprot2 para enumerar módulos de procesos, leer/escribir memoria de procesos y terminar procesos. Uso Compila y ejecuta, consulta Driver\MhyProt2.cs para ver las funciones disponibles y su uso. Demo...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/09 10:52 a.m.6 views

CVE-2022-1227_Exploit

CVE-2022-1227Exploit 一个用于利用 CVE-2022-1227 的脚本。 背景 推荐使用 Ubuntu 20.10。 Podman TODO:添加此漏洞的原理说明 安装 Podman 按照官方文档中的说明操作: https://podman.io/getting-started/installationinstalling-on-linux 对于 Ubuntu 20.10,安装命令应为: root@kitploit: sudo apt-get install podman=3.4.4+ds1-1ubuntu1 快速开始 简单利用 在本节中,我们尝试一个简单的 PoC,...

8.8CVSS7.9AI score0.04205EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/07 12:47 p.m.5 views

BYOVD

BYOVD 是一个 PoC 集合,演示了如何利用易受攻击的驱动程序来禁用 AV/EDR 解决方案。 该集合既包含未公开的驱动程序,也包含已在 LOLDDrivers 或 Microsoft 推荐的驱动程序阻止规则 中已有覆盖的驱动程序。 自首次被发现以来,TfSysMon 驱动程序已被添加到 LOLDrivers,并被勒索软件团伙利用 EDRKillShifter 工具滥用,相关报告见 Sophos 和 ESET 📚 目录 🔍 概述 🏗️ 项目结构 🔧 构建 📦 byovd-lib 💡 PoC 🔬 完整的驱动程序逆向工程流程 x64 🔗 参考资料 ⚠️ 免责声明 🔍 概述 BYOVD 技术...

7.8CVSS6.2AI score0.00445EPSS
SaveExploits6References6
OSSF Malicious Packages
OSSF Malicious Packages
added 2026/08/19 4:08 a.m.18 views

Malicious code in flydev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e8d7456b5f0f3d2d3115eed9624272036cad1316cd50ee05e4134e5fa30f8ca The package advertises itself as a generic 'Utility' but ships a purely destructive payload hidden under a deeply nested single-letter directory tree...

5.4AI score
SaveExploits0References1
OSV
OSV
added 2026/08/10 2:17 p.m.11 views

DEBIAN-CVE-2026-15060

When systemd-machined = v259 or v258 with a custom polkit policy that allows register-machine access is running on a desktop system, an unprivileged user logged in a desktop graphical session can kill arbitrary processes, even privileged ones. - versions older than v259 are not affected, unless...

4.7CVSS5.7AI score0.00079EPSS
SaveExploits0References1
CVE
CVE
added 2026/07/23 6:43 a.m.67 views

CVE-2026-59677

The CVE-2026-59677 issue is a local vulnerability in SELinux policycoreutils seunshares (up to version 3.10) that permits a user running in an unconfined context to kill root-owned processes also in unconfined context. Documented under PT-2026-61060 as a Local DoS/vector in seunshare, with the af...

6.8CVSS5.3AI score0.0014EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/07/19 12:00 a.m.25 views

PT-2026-61059

A Time-of-check Time-of-use TOCTOU Race Condition vulnerability in seunshare of selinux policycoreutils allows a user calling seunshare that is running in the unconfined SELinux domain to delete arbitrary root-owned files, This issue affects policycoreutils through 3.10...

5.8CVSS5.5AI score0.00087EPSS
SaveExploits0References3
CVE
CVE
added 2026/02/21 9:32 a.m.83 views

CVE-2026-27486

OpenClaw CVE-2026-27486 affects the OpenClaw CLI up to version 2026.2.13, where cleanup uses system-wide process enumeration and pattern-based termination without verifying process ownership. On shared hosts, unrelated processes matching the pattern could be terminated. The issue is addressed in ...

5.3CVSS5.5AI score0.00292EPSS
SaveExploits0References4Affected Software1
EUVD
EUVD
added 2026/02/04 4:08 p.m.12 views

EUVD-2026-5440

In the Linux kernel, the following vulnerability has been resolved: arm64/fpsimd: signal: Fix restoration of SVE context When SME is supported, Restoring SVE signal context can go wrong in a few ways, including placing the task into an invalid state where the kernel may read from out-of-bounds...

5.5AI score0.00121EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.13 views

EUVD-2013-4176

Malware in sbrugna...

3.3CVSS9.1AI score0.00688EPSS
SaveExploits0References9
Tenable Nessus
Tenable Nessus
added 2025/09/10 12:00 a.m.8 views

Linux Distros Unpatched Vulnerability : CVE-2017-14681

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The daemon in P3Scan 3.0rc1 and earlier creates a p3scan.pid file after dropping privileges to a non-root account, which might allow local users to kill arbitra...

5.5CVSS5.8AI score0.00286EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/09 12:00 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2022-49829

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/scheduler: fix fence ref counting We leaked dependency fences when processes were beeing killed. Additional to that grab a reference to the last scheduled...

5.5CVSS6.4AI score0.00163EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2025/05/23 2:49 a.m.11 views

CVE-2023-32695

socket.io parser is a socket.io encoder and decoder written in JavaScript complying with version 5 of socket.io-protocol. A specially crafted Socket.IO packet can trigger an uncaught exception on the Socket.IO server, thus killing the Node.js process. A patch has been released in version 4.2.3...

7.5CVSS6.9AI score0.01059EPSS
SaveExploits0References1
CVE
CVE
added 2025/03/31 4:22 p.m.83 views

CVE-2025-2794

CVE-2025-2794 describes an unsafe reflection vulnerability in Kentico Xperience (affecting Xperience up to and including version 13.0.180). An unauthenticated attacker can trigger the vulnerability to terminate the current process, resulting in a Denial-of-Service condition. The issue is rooted i...

8.7CVSS7.5AI score0.00459EPSS
SaveExploits0References2Affected Software1
RedHat Linux
RedHat Linux
added 2024/11/12 9:27 a.m.20 views

Low: Red Hat Security Advisory: cockpit security update

An update for cockpit is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE...

3.2CVSS5.8AI score0.00268EPSS
SaveExploits0References6
OSV
OSV
added 2024/10/21 7:15 p.m.4 views

DEBIAN-CVE-2024-50015

In the Linux kernel, the following vulnerability has been resolved: ext4: dax: fix overflowing extents beyond inode size when partially writing The daxiomaprw does two things in each iteration: map written blocks and copy user data to blocks. If the process is killed by userSee signal handling in...

5.5CVSS5.6AI score0.0024EPSS
SaveExploits0References1
NVD
NVD
added 2024/08/17 9:15 a.m.28 views

CVE-2024-42267

In the Linux kernel, the following vulnerability has been resolved: riscv/mm: Add handling for VMFAULTSIGSEGV in mmfaulterror Handle VMFAULTSIGSEGV in the page fault path so that we correctly kill the process and we don't BUG the kernel...

5.5CVSS0.00226EPSS
SaveExploits0References7
UbuntuCve
UbuntuCve
added 2024/08/17 9:15 a.m.23 views

CVE-2024-42267

In the Linux kernel, the following vulnerability has been resolved: riscv/mm: Add handling for VMFAULTSIGSEGV in mmfaulterror Handle VMFAULTSIGSEGV in the page fault path so that we correctly kill the process and we don't BUG the kernel...

5.5CVSS6.1AI score0.00226EPSS
SaveExploits0References18
Rows per page
Query Builder