PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

[CVE-2024-36072] A Deep Dive into the CoSoSys EndPoint Protector Exploit: Remote Code Execution

theori.io | vulnerability | CVE-2024-36072 | #rce | #netwrix | #cve-2024-36072 | #cososys | #endpoint-protector | #apt-simulation
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Theori’s APT simulation uncovered four RCEs in CoSoSys Endpoint Protector (CVE-2024-36072 to -36075), including unauthenticated root command execution; all are patched, with a full exploit analysis.
CVE
CVE-2024-36072
Published
Collected

Related coverage

vulnerability · bishopfox.com
Netwrix Auditor Advisory
Bishop Fox details CVE-2022-31199, an insecure object deserialization flaw in Netwrix Auditor's .NET remoting service (TCP 9004) enabling RCE and AD compromise; fixed in 10.5.
Critical · vulnerability · aikido.dev
Node2Shell Evolves to HTTP2Shell: Google Brotli Flaw (CVE-2026-111497) Affects HTTP Ecosystem
Brotli is ubiquitous across the modern HTTP ecosystem for web asset compression. Because the flaw allows unauthenticated remote code execution in both directions, any service or client automatically decompressing untrusted Brotli payloads is at critical risk until patched.
vulnerability · aikido.dev
Node2Shell: Node.js Brotli vulnerability allows remote code execution (CVE-2026-111497)
Node.js shipped a security update on Wednesday for a flaw in how it decompresses Brotli data, a bug people are already calling Node2Shell (CVE-2026-111497). If an attacker can get a malicious payload in front of your app, the flaw can crash the process, leak part of its memory, or potentially let them run their own code.
vulnerability · pwn.ai
CVE-2026-106378: Chrome GPU Sandbox Escape to RCE
How an allowed WindowServer connection and inherited macOS event-posting permission let Chrome’s sandboxed GPU process inject keystrokes and launch apps outside the sandbox.
Critical · vulnerability · github.com
CVE-2026-111497: Unauthenticated WordPress RCE Exploit Chain PoC via Brotli Decoder Flaw
Demonstrates a reliable, real-world weaponization of the Brotli decoder memory corruption flaw in web application environments without requiring information leaks or debugging instrumentation. Highlights the critical risk of untrusted compressed streams in server-side HTTP clients.
vulnerability · wiz.io
[CVE-2026-111497] Broccoli2shell: Everything You Need To Know About The Critical Brotli Decoder Vulnerability
Detect and mitigate CVE-2026-111497, a critical Brotli decoder vulnerability enables remote code execution.
Back