CVE-2025-61156

CVE-2025-61156 ThreatFire System Monitor（=v4.7.0.53）のカーネルモード TfSysMon.sys コンポーネントに、非特権ユーザーがカーネルモードの権限で任意のプロセス終了を実行できるようにする脆弱性が発見されました。その結果、PPL および保護されたシステムプロセスは強制的に停止される可能性があり、これにはアンチマルウェア、EDR ソリューション、エージェント型クライアントなどが含まれますが、これらに限定されません。これは、ローカルでの EDR Bypass と Denial of Service の両方を引き起こす可能性があります。...

CVE-2026-38053---Remove-PPL

CVE-2026-38053---Remove-PPL BYOVD 移除 PPL（适用于 24H2 和 25H2） Wise System Monitor v1.5.3.127 中 IOCTL 0x12C807（METHODNEITHER）处理程序内的任意内存写入，使攻击者能够通过特制输入导致 PPL 被移除或拒绝服务（DoS）。 附加信息 测试环境：Windows 11 25H2。可能影响所有安装了该漏洞驱动版本的 Windows 版本。 PoC 中使用的 EPROCESS.Protection 偏移量：+0x87A（Windows 11 25H2）。偏移量可能因 Windows...

CVE-2026-61884 Tycon Systems TPDIN-Monitor-WEB2 Missing Authentication for Critical Function

The Tycon Systems TPDIN-Monitor-WEB2 ships without HTTP credentials configured, intended for an installer to set them on first use. On firmware 2.4.4 and earlier, a unit left in this unconfigured state serves the web management interface without requiring any login. An attacker with network acces...

Security Bulletin: Enterprise Content Managemant System Monitor for March 2026 - multiple CVEs

Summary Enterprise Content Management System Monitor is vulnerable to multiple remote code execution and denial of service attacks in third party and open source used in the product for various functions. See full list below. The vulnerabilities have been addressed. Vulnerability Details...

BorG SPM 安全漏洞

BorG SPM is a software platform developed by BorG in Taiwan, China, used for system performance monitoring and resource management analysis. The BorG SPM 2007 version contains a security vulnerability, which stems from an authentication bypass mechanism. This vulnerability could allow unauthorize...

[SECURITY] Fedora 44 Update: plasma-systemmonitor-6.6.4-1.fc44

An interface for monitoring system sensors, process information and other sys tem resources...

CVE-2019-7240

An issue was discovered in WinRing0x64.sys in Moo0 System Monitor 1.83. The vulnerable driver exposes a wrmsr instruction via IOCTL 0x9C402088 and does not properly filter the Model Specific Register MSR. Allowing arbitrary MSR writes can lead to Ring-0 code execution and escalation of privileges...

CVE-2025-61156

Incorrect access control in the kernel driver of ThreatFire System Monitor v4.7.0.53 allows attackers to escalate privileges and execute arbitrary commands via an insecure IOCTL...

EUVD-2025-36670

Incorrect access control in the kernel driver of ThreatFire System Monitor v4.7.0.53 allows attackers to escalate privileges and execute arbitrary commands via an insecure IOCTL...

CVE-2025-61156

Incorrect access control in the kernel driver of ThreatFire System Monitor v4.7.0.53 allows attackers to escalate privileges and execute arbitrary commands via an insecure IOCTL...

CVE-2025-61156

Incorrect access control in the kernel driver of ThreatFire System Monitor v4.7.0.53 allows attackers to escalate privileges and execute arbitrary commands via an insecure IOCTL...

PT-2025-44305

Name of the Vulnerable Software and Affected Versions ThreatFire System Monitor version 4.7.0.53 Description A flaw exists in the kernel driver of ThreatFire System Monitor that allows for privilege escalation and arbitrary command execution. This is due to insecure access control through an...

CVE-2025-61156

ThreatFire System Monitor, version 4.7.0.53, contains a kernel driver flaw with insecure IOCTL that allows privilege escalation and arbitrary command execution. The vulnerability is due to incorrect access control in the kernel driver. Documented impact: local attacker can escalate privileges and...

EUVD-2019-16784

Malware in sbrugna...

Unity Linux 20.1070e Security Update: deepin-system-monitor (UTSA-2025-673155)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-673155 advisory. deepin-system-monitor Tenable has extracted the preceding description block directly from the Unity Linux security advisory. Note that Nessus has not tested for this...

EUVD-2021-33051

Malicious code in bioql PyPI...

EUVD-2025-2570

Malicious code in bioql PyPI...

CISA Releases Nine Industrial Control Systems Advisories

CISA released nine Industrial Control Systems ICS advisories on July 22, 2025. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-25-203-01 DuraComm DP-10iN-100-MU ICSA-25-203-02 Lantronix Provisioning Manager...

Exploit for Incorrect Permission Assignment for Critical Resource in Facebook Below

CVE-2025-27591-Below 📌 Description This is a proof-of-c...

CVE-2023-1488

A vulnerability, which was classified as problematic, was found in Lespeed WiseCleaner Wise System Monitor 1.5.3.54. Affected is the function 0x9C40A0D8/0x9C40A0DC/0x9C40A0E0 in the library WiseHDInfo64.dll of the component IoControlCode Handler. The manipulation leads to denial of service. It is...