Skip to content
Threat Feed
Subscribe

Tag

Kernel-Driver

4 briefs RSS
high advisory

Local Privilege Escalation in ieungSoft Ultra RAMDisk Pro URDSCSI.sys

The URDSCSI.sys kernel driver in ieungSoft Ultra RAMDisk Pro 1.82 contains an improper privilege management vulnerability that allows local attackers to achieve privilege escalation.

Ultra RAMDisk Pro privilege-escalation kernel-driver windows
1t 1c
high advisory

Local Privilege Escalation in CheckMAL AppCheck Pro via Kernel Driver

A local privilege escalation vulnerability in the AppCheckD.sys driver of CheckMAL AppCheck Pro version 3.1.43.10 allows attackers to perform uncontrolled search path manipulation.

AppCheck Pro privilege-escalation windows kernel-driver
1t 1c
medium advisory

Suspicious Service Installation for Defense Evasion

Attackers are installing suspicious services, specifically NalDrv or PROCEXP152, via registry modifications to non-system32 folders to facilitate defense evasion by tools like Ghost-In-The-Logs, aiming to disable or impair security monitoring capabilities.

defense-evasion persistence kernel-driver windows
1r
high advisory

fast16 Cyber Sabotage Framework

The fast16 framework is a cyber sabotage tool dating back to 2005 that selectively targets high-precision calculation software, patching code in memory to tamper with results, using a Lua virtual machine and propagating across an entire facility to produce inaccurate calculations, with svcmgmt.exe as a carrier and fast16.sys modifying executable code.

Windows 2000 +3 fast16 cyber sabotage lua kernel driver
3r 4t 4i