collateral-damage

Daño Colateral Daño Colateral es un exploit de kernel para Xbox SystemOS que utiliza CVE-2024-30088. Está dirigido a consolas Xbox One y Xbox Series con versiones de kernel 25398.4478, 25398.4908 y 25398.4909. El punto de entrada inicial es a través de la aplicación UWP Game Script. Los payloads ...

CVE-2024-30088

CVE-2024-30088 Vulnerabilidad TOCTOU en el kernel de Windows: AuthzBasepCopyoutInternalSecurityAttributes Este repositorio contiene una prueba de concepto PoC detallada para CVE-2024-30088, una vulnerabilidad TOCTOU en el kernel de Windows que permite escalar desde un proceso con bajos privilegio...

cve-2024-30088-binary-LPE-PRIVIELEGE-ESCALATION-CYGHT-TOCTOU

Este repositorio no tiene un README...

CVE-2024-30088__Windows-TOCTOU-exploit

CVE-2024-30088 – PoC adaptado para WinRM 📌 Resumen Esta es una versión modificada del exploit original CVE-2024-30088, adaptada para funcionar en entornos no interactivos WinRM. El PoC original inicia un cmd.exe interactivo, que no funciona a través de WinRM. Esta versión se centra en la ejecució...

cve-2024-30088-binary

Questo repository non contiene un README...

Exploit for Time-of-check Time-of-use (TOCTOU) Race Condition in Microsoft

CVE-2024-30088 – WinRM Adapted PoC 📌 Summary This is a mo...

Linux Distros Unpatched Vulnerability : CVE-2023-30088

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue found in Cesanta MJS v.1.26 allows a local attacker to cause a denial of service via the mjsexecute function in mjs.c. CVE-2023-30088 Note that Nessus...

CVE-2023-30088

An issue found in Cesanta MJS v.1.26 allows a local attacker to cause a denial of service via the mjsexecute function in mjs.c...

OilRig Exploits Windows Kernel Flaw in Espionage Campaign Targeting UAE and Gulf

The Iranian threat actor known as OilRig has been observed exploiting a now-patched privilege escalation flaw impacting the Windows Kernel as part of a cyber espionage campaign targeting the U.A.E. and the broader Gulf region. "The group utilizes sophisticated tactics that include deploying a...

Microsoft Windows TOCTOU Local Privilege Escalation Exploit

CVE-2024-30088 is a Windows kernel elevation of privilege vulnerability which affects many recent versions of Windows 10, Windows 11 and Windows Server 2022. The vulnerability exists inside the function called AuthzBasepCopyoutInternalSecurityAttributes specifically when the kernel copies the...

Microsoft Windows TOCTOU Local Privilege Escalation

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Windows Kernel Time of Check Time of Use LPE in AuthzBasepCopyoutInternalSecurityAttributes', 'Description' = %q CVE-2024-30088 is a Windows Kern...

Exploit for Time-of-check Time-of-use (TOCTOU) Race Condition in Microsoft

CVE-2024-30088 Questa repository contiene un Proof of Concept...

CVE-2024-30088

creationtimestamp| type| source ---|---|--- 2024-06-26 09:50:07+00:00| published-proof-of-concept| https://t.me/Kelvinseccommunity/529 2024-06-26 17:09:16+00:00| published-proof-of-concept| https://t.me/cybersecs/2884 2024-06-27 04:28:28+00:00| published-proof-of-concept|...

Microsoft Windows Multiple Vulnerabilities (KB5039214)

This host is missing an important security update according to Microsoft KB5039214 SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

Microsoft Windows Multiple Vulnerabilities (KB5039211)

This host is missing an important security update according to Microsoft KB5039211 SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

CVE-2024-30088

Windows Kernel Elevation of Privilege Vulnerability...

CVE-2024-30088 Windows Kernel Elevation of Privilege Vulnerability

...

CVE-2024-30088 Windows Kernel Elevation of Privilege Vulnerability

...

CVE-2024-30088

CVE-2024-30088 is a Windows Kernel TOCTOU race condition that can lead to local privilege escalation via AuthzBasepCopyoutInternalSecurityAttributes. Publicly discussed exploits and PoCs exist (Windows kernel LPE PoCs and Metasploit module), and CISA lists it as a known-exploited vulnerability; a...

Windows Kernel Time of Check Time of Use LPE in AuthzBasepCopyoutInternalSecurityAttributes

CVE-2024-30088 is a Windows Kernel Elevation of Privilege Vulnerability which affects many recent versions of Windows 10, Windows 11 and Windows Server 2022. The vulnerability exists inside the function called AuthzBasepCopyoutInternalSecurityAttributes specifically when the kernel copies the...