CVE-2026-3796

CVE-2026-3796 No QAX Virus Removal, versão datada de 22/10/2025 e anteriores, o driver afetado QKSecureIOImp.sys depende da imagem do processo do chamador para determinar se ele tem permissão para se comunicar com o driver mini filter. Os atacantes poderiam se passar pela imagem de um processo...

BYOVD-DriverKiller

BYOVD-DriverKiller ⚠️ Avvertenza : Questo progetto è strettamente educativo e dimostrativo. Non è destinato a essere utilizzato in un contesto dannoso. L'obiettivo è apprendere la metodologia del reverse engineering e le fasi di exploitation di un driver Windows. Qui spiego l'approccio che ho...

AV-EDR-Killer

AV/EDR Killer https://github.com/user-attachments/assets/1eda3340-2af2-4136-b74e-be7a3f4b3924 Dieses Projekt demonstriert, wie ein legitimer und signierter Treiber bewaffnet werden kann, um Zugriff auf Kernel-Ebene zu erhalten. 🚨 Der verwundbare Treiber: wsftprm.sys , signiert von TPZ SOLUCOES...

EUVD-2026-10288

A weakness has been identified in Qi-ANXIN QAX Virus Removal up to 2025-10-22. The affected element is the function ZwTerminateProcess in the library QKSecureIOImp.sys of the component Mini Filter Driver. Executing a manipulation can lead to improper access controls. The attack is restricted to...

CVE-2026-3796 Qi-ANXIN QAX Virus Removal Mini Filter Driver QKSecureIO_Imp.sys ZwTerminateProcess access control

A weakness has been identified in Qi-ANXIN QAX Virus Removal up to 2025-10-22. The affected element is the function ZwTerminateProcess in the library QKSecureIOImp.sys of the component Mini Filter Driver. Executing a manipulation can lead to improper access controls. The attack is restricted to...

CVE-2026-3796 Qi-ANXIN QAX Virus Removal Mini Filter Driver QKSecureIO_Imp.sys ZwTerminateProcess access control

A weakness has been identified in Qi-ANXIN QAX Virus Removal up to 2025-10-22. The affected element is the function ZwTerminateProcess in the library QKSecureIOImp.sys of the component Mini Filter Driver. Executing a manipulation can lead to improper access controls. The attack is restricted to...

CVE-2026-3796

CVE-2026-3796 affects Qi-ANXIN QAX Virus Removal (Mini Filter Driver component) via ZwTerminateProcess in QKSecureIO_Imp.sys. The vulnerability arises from a manipulation that enables improper access controls; attack is local and there is publicly available exploit. Multiple trusted sources (NVD,...

QiAnXin QAX Virus Removal 访问控制错误漏洞

QiAnXin QAX Virus Removal is a malware and virus removal tool developed by QiAnXin Corporation. Versions of QiAnXin QAX Virus Removal released on or before October 22, 2025, have a vulnerability related to access control. This vulnerability stems from incorrect operations on the function...

Microsoft Windows Kernel - Local Privilege Escalation (MS06-049)

/ MS06-049 Windows ZwQuerySystemInformation Local Privilege Escalation Vulnerability Exploit Created by SoBeIt Main file of exploit Tested on: Windows 2000 PRO SP4 Chinese Windows 2000 PRO SP4 Rollup 1 Chinese Windows 2000 PRO SP4 English Windows 2000 PRO SP4 Rollup 1 English Usage:ms06-049.exe /...

MS Windows (Windows Kernel) Privilege Escalation Exploit (MS06-049)

Exploit for unknown platform in category local exploits =================================================================== MS Windows Windows Kernel Privilege Escalation Exploit MS06-049 =================================================================== / MS06-049 Windows ZwQuerySystemInformati...

Microsoft Windows Kernel - Local Privilege Escalation (MS06-049)

Microsoft Windows Kernel - Local Privilege Escalation MS06-049 / MS06-049 Windows ZwQuerySystemInformation Local Privilege Escalation Vulnerability Exploit Created by SoBeIt Main file of exploit Tested on: Windows 2000 PRO SP4 Chinese Windows 2000 PRO SP4 Rollup 1 Chinese Windows 2000 PRO SP4...