| शीर्षक | 360 Total Security (360.cn) 360 Total Security (Nucleus Engine) 360 Total Security for Business V6.0 Security Feature Bypass |
|---|
| विवरण | A security bypass vulnerability exists in 360 Nucleus Engine's monitoring logic for scheduled task creation. The engine blocks RPC binding using "localhost" but fails to detect semantically equivalent addresses NULL or "0". Attackers can exploit this by setting the NetworkAddr parameter in RpcStringBindingComposeW to NULL or L"0" to create malicious scheduled tasks without triggering alerts. |
|---|
| स्रोत | ⚠️ https://github.com/Gach0ng/vuldb_submit/issues/4 |
|---|
| उपयोगकर्ता | gachong (UID 98198) |
|---|
| सबमिशन | 19/05/2026 02:17 PM (4 महीनों पहले) |
|---|
| संयम | 14/06/2026 02:54 PM (26 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 370858 [Qihoo 360 Total Security 6.0 Nucleus Engine Monitoring Logic RpcStringBindingComposeW NetworkAddr अधिकार वृद्धि] |
|---|
| अंक | 20 |
|---|