STProcessMonitorBYOVD

STProcessMonitorBYOVD Referencia: https://bbs.kafan.cn/thread-2288675-1-1.html Uso: 1. Coloque el controlador vulnerable en el mismo directorio que el ejecutable. La versión 11.11.4.0 la más antigua tiene CVE-2025-70795 / CVE-2026-0828 y es compatible con el parámetro /Kill; la versión 11.26.18...

CVE-2025-70795

STProcessMonitor 11.11.4.0, part of the Safetica Application suite, allows an admin-privileged user to send crafted IOCTL requests to terminate processes that are protected through a third-party implementation. This is caused by insufficient caller validation in the driver's IOCTL handler, enabli...

VulnCheck KEV: CVE-2025-70795

STProcessMonitor Driver contains an insecure IOCTL vulnerability that allows local attackers to terminate arbitrary kernel processes by bypassing validation. Attackers can exploit the exposed process termination functionality to disable security products and gain control of the affected system...