TopazTerminator

TopazTerminator F, Another driver got burned.. I was gatekeeping wsftprm.sys driver for a while ; but since someone posted a public POC, I'm ungatekeeping it. We all know it'll get added to the driver blocklist soon, so here's my implementation for the same — in C This project exploits the...

EUVD-2023-56944

Malicious code in bioql PyPI...

Code injection

The wsftprm.sys kernel driver 2.0.0.0 in Topaz Antifraud allows low-privileged attackers to kill any Protected Process Light process via an IOCTL which will be named at a later time...

CVE-2023-52271

The wsftprm.sys kernel driver 2.0.0.0 in Topaz Antifraud allows low-privileged attackers to kill any Protected Process Light process via an IOCTL which will be named at a later time...

CVE-2023-52271

The CVE-2023-52271 entry concerns Topaz Antifraud wsftprm.sys kernel driver 2.0.0.0. Public materials confirm a vulnerability where low-privilege attackers can terminate any Protected Process Light process via an IOCTL, potentially disabling security products. Public PoCs/exploit code exist (e.g....

Topaz Antifraud wsftprm.sys security vulnerability

Topaz Antifraud is a business application from Topaz, Inc. provides defined processes, integrations and customizable rules to optimize costs and provide a secure ecosystem for your business. A security vulnerability exists in Topaz Antifraud wsftprm.sys version 2.0.0.0, which stems from a...

CVE-2023-52271

The wsftprm.sys kernel driver 2.0.0.0 in Topaz Antifraud allows low-privileged attackers to kill any Protected Process Light process via an IOCTL which will be named at a later time...