106 matches found
whids
IMPORTANT: this README and other documentation is not updated to reflect the changes made to latest beta releases as a lot of changes happened. All this will be updated in time when a stable version will be released see Roadmap until next release. Feel free to run beta releases on your own and as...
Noriben
Noriben Malware Analysis Sandbox Contact Information: @bbaskin on Twitter brian at thebaskins dot com Noriben is a Python-based script that works in conjunction with Sysinternals Procmon to automatically collect, analyze, and report on runtime indicators of malware. In a nutshell, it allows you t...
CVE-2026-100205
An untrusted pointer dereference vulnerability in SysInternals allows an authorized attacker to achieve local privilege escalation . This vulnerability is associated with CWE-822 and has been assigned a CVSS 3.1 base score of 7.1 (High) . No specific exploit details or in-the-wild exploitation in...
CVE-2026-105729
An untrusted pointer dereference vulnerability exists in SysInternals , which could allow an authorized attacker to perform a local privilege escalation . The vulnerability is associated with CWE-822 . While the CVSS score indicates a high severity impact on integrity and availability, specific d...
CVE-2026-105732
A stack-based buffer overflow in SysInternals allows an authorized attacker to achieve local privilege escalation . The vulnerability has a HIGH base severity score of 7.3. No specific affected versions, root cause components, or exploit links are provided in the documents, though an official fix...
SysInternals Elevation of Privilege Vulnerability
Stack-based buffer overflow in SysInternals allows an authorized attacker to elevate privileges locally...
PT-2026-111883
Untrusted pointer dereference in SysInternals allows an authorized attacker to elevate privileges locally...
PT-2026-112002
Untrusted pointer dereference in SysInternals allows an authorized attacker to elevate privileges locally...
Find-VulnerableElectronVersion
Find-VulnerableElectronVersion Scans an executable and determines if it was wrapped in an Electron version vulnerable to the Chromium vulnerability CVE-2023-4863/ CVE-2023-5129 using the Sysinternals tool Strings. Only supported on Windows devices. Requires Sysinternals to be installed:...
ProcDump-for-Linux
ProcDump ProcDump es una reinvención de la clásica herramienta ProcDump del conjunto Sysinternals para Windows, adaptada para Linux y Mac. ProcDump proporciona una manera conveniente para que los desarrolladores de Linux y Mac creen volcados de núcleo de sus aplicaciones basados en disparadores d...
ps-ppl-bypass
Process Explorer vulnerable driver PPL Bypass While it is well known that old versions before 17.x of SysInternals Process Explorer drivers PSEXP152.sys are vulnerable and can be abused to open full access process handles to PPL processes IOCTL: 0x8335003c, newer versions 17.x upward are still...
ProcDump-for-Linux v3.5.3
ProcDump ProcDump is a Linux and Mac reimagining of the classic ProcDump tool from the Sysinternals suite of tools for Windows. ProcDump provides a convenient way for Linux and Mac developers to create core dumps of their application based on performance triggers. ProcDump for Linux and Mac is pa...
EUVD-2007-4206
Malware in sbrugna...
EUVD-2004-2720
Malware in sbrugna...
EUVD-2023-32926
Malicious code in bioql PyPI...
EUVD-2021-7197
Malicious code in bioql PyPI...
Exploit for Use After Free in Microsoft
CVE Analysis & Detection — PoCs, Snort Detection, and Mitigati...
CVE-2005-2679
Buffer overflow in Sysinternals Process Explorer 9.23, and other versions before 9.25, allows local users to execute arbitrary code via a long CompanyName field in the VersionInfo information in a running process...
How to Capture a Memory Dump from a Provisioned Target in a Hyper-V Environment
This article describes how to generate a memory dump file from a provisioned target in a Hyper-V environment.This process requires no modification to the virtual machine. Requirements Download and install the Debugging Tools for Windows package from Microsoft's web site: Debugging Tools for Windo...
