CVE-2025-60349 PoC — Prevx 安全漏洞

Source

https://github.com/djackreuter/CVE-2025-60349

Associated Vulnerability

Title:Prevx 安全漏洞 (CVE-2025-60349)
Description:An issue was discovered in Prevx v3.0.5.220 allowing attackers to cause a denial of service via sending IOCTL code 0x22E044 to the pxscan.sys driver. Any processes listed under registry key HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\pxscan\Files will be terminated.

Description

CVE-2025-60349: Pxscan Arbitrary Process Termination

Readme

# CVE-2025-60349: Pxscan Arbitrary Process Termination

 An issue was discovered in Prevx v3.0.5.220 allowing attackers to cause a denial of service via sending IOCTL code `0x22E044` to the `pxscan.sys` driver. Any processes listed under registry key `HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\pxscan\Files` will be terminated.

 Discovered by Dylan Reuter, August 2025.

**References:**
* https://nvd.nist.gov/vuln/detail/CVE-2025-60349
* https://www.cve.org/CVERecord?id=CVE-2025-60349

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!