47 matches found
HITCON-2023-Demo-CVE-2023-20562
HITCON 2023 デモ CVE-2023-20562 説明 このデモンストレーションは台湾のHITCON 2023で行われました。デモでは、AMD μProf内のAMDCpuProfiler.sysの悪用に焦点を当てています。EPROCESSトークンへの任意書き込みをトリガーすることで、SYSTEMレベルへの権限昇格が達成されます。DSEフラグを無効にすることで、悪意のある未署名ドライバーの読み込みが可能になります。さらに、この発表では、360 Total SecurityのObRegisterCallbacksを無効化することで、360 Total...
HITCON-2023-Demo-CVE-2023-20562
HITCON 2023 Demo CVE-2023-20562 Descrizione Questa dimostrazione si è svolta a HITCON 2023 a Taiwan. La demo evidenzia lo sfruttamento di AMDCpuProfiler.sys all'interno di AMD μProf. Attivando una scrittura arbitraria sul token EPROCESS, si ottiene l'escalation dei privilegi a livello SYSTEM. La...
EUVD-2021-13140
Malware in sbrugna...
EUVD-2022-32171
Malicious code in bioql PyPI...
EUVD-2023-35652
Malicious code in bioql PyPI...
EUVD-2023-24735
Malicious code in bioql PyPI...
EUVD-2023-35677
Malicious code in bioql PyPI...
EUVD-2022-28760
Malicious code in bioql PyPI...
EUVD-2023-35660
Malicious code in bioql PyPI...
EUVD-2023-24740
Malicious code in bioql PyPI...
CVE-2023-31366
Improper input validation in AMD μProf could allow an attacker to perform a write to an invalid address, potentially resulting in denial of service...
CVE-2023-31348
A DLL hijacking vulnerability in AMD μProf could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution...
CVE-2023-31366
Improper input validation in AMD μProf could allow an attacker to perform a write to an invalid address, potentially resulting in denial of service...
CVE-2023-31366
Improper input validation in AMD μProf could allow an attacker to perform a write to an invalid address, potentially resulting in denial of service...
CVE-2023-31366
CVE-2023-31366 affects AMD μProf: improper input validation could enable writing to an invalid address, potentially causing denial of service. The AMD μProf tool (Windows, Linux, FreeBSD) is the affected product. The issue is categorized as low severity by AMD (local access, low complexity, low p...
CVE-2023-31349
Incorrect default permissions in the AMD μProf installation directory could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution...
CVE-2023-31349
Incorrect default permissions in the AMD μProf installation directory could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution...
CVE-2023-31348
A DLL hijacking vulnerability in AMD μProf could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution...
CVE-2023-31341
Insufficient validation of the Input Output Control IOCTL input buffer in AMD μProf may allow an authenticated attacker to cause an out-of-bounds write, potentially causing a Windows® OS crash, resulting in denial of service...
CVE-2023-31341
Insufficient validation of the Input Output Control IOCTL input buffer in AMD μProf may allow an authenticated attacker to cause an out-of-bounds write, potentially causing a Windows® OS crash, resulting in denial of service...