
ExecuteAssembly
Load/Inject .NET assemblies by; reusing the host (spawnto) process loaded CLR AppDomainManager, Stomping Loader/.NET assembly PE DOS headers,…
command-and-controlexploitationids-ips-evasion+8
597

Load/Inject .NET assemblies by; reusing the host (spawnto) process loaded CLR AppDomainManager, Stomping Loader/.NET assembly PE DOS headers,…

BYOVD Remove PPL for 24H2 and 25H2

Implements the POP/MOV SS (CVE-2018-8897) vulnerability by bugchecking the machine (local DoS).

Insecure access control in ThreatFire System Monitor's TfSysMon.sys driver allows unprivileged process termination with kernel privileges, enabling…

Windows Privilege Escalation: IOBit Malware Fighter v8.0.2

AppXSvc Arbitrary File Overwrite DoS