66 matches found
ThrottleStopPPL
ThrottleStopPPL A proof-of-concept tool for managing Protected Process Light PPL protection levels on Windows Server 2022 by exploiting vulnerabilities in the ThrottleStop driver CVE-2025-7771. Overview This tool demonstrates privilege escalation through arbitrary physical memory read/write...
Exploit for CVE-2025-7771
CVE-2025-7771 — ThrottleStop.sys Arbitrary Physical Memory R/W...
CVE-2026-7771
IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 is vulnerable to a trap when compiling a specially crafted statements containing subqueries could lead to a denial of service...
MAL-2026-7771 Malicious code in hwc3v (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
📄 Throttlestop Kernel Driver 3.0.0.0 Privilege Escalation
Throttlestop Kernel Driver version 3.0.0.0 suffers from a privilege escalation vulnerability. Exploit Title: Throttlestop Kernel Driver - Kernel Out-of-Bounds Write Privilege Escalation Exploit Details: https://xavibel.com/2025/12/22/using-vulnerable-drivers-in-red-team-exercises/ Date: 8/12/2025...
Exploit for CVE-2025-7771
No d...
Ubuntu 24.04 LTS : Linux kernel (OEM) vulnerabilities (USN-7771-1)
"The remote Ubuntu 24.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7771-1 advisory. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws i...
CVE-2025-7771 Code Execution / Escalation of Privileges in ThrottleStop
ThrottleStop.sys, a legitimate driver, exposes two IOCTL interfaces that allow arbitrary read and write access to physical memory via the MmMapIoSpace function. This insecure implementation can be exploited by a malicious user-mode application to patch the running Windows kernel and invoke...
CVE-2025-7771 Code Execution / Escalation of Privileges in ThrottleStop
ThrottleStop.sys, a legitimate driver, exposes two IOCTL interfaces that allow arbitrary read and write access to physical memory via the MmMapIoSpace function. This insecure implementation can be exploited by a malicious user-mode application to patch the running Windows kernel and invoke...
CVE-2025-7771
CVE-2025-7771 affects ThrottleStop.sys (v3.0.0.0 and possibly others). The driver exposes two IOCTLs (read/write physical memory) that use MmMapIoSpace with no input validation, enabling a local attacker to map arbitrary physical memory, patch the Windows kernel, and invoke kernel functions with ...
CVE-2024-7771
A vulnerability in the Dockerized version of mintplex-labs/anything-llm latest, digest 1d9452da2b92 allows for a denial of service. Uploading an audio file with a very low sample rate causes the functionality responsible for transcribing it to crash the entire site instance. The issue arises from...
CVE-2024-7771
A vulnerability in the Dockerized version of mintplex-labs/anything-llm latest, digest 1d9452da2b92 allows for a denial of service. Uploading an audio file with a very low sample rate causes the functionality responsible for transcribing it to crash the entire site instance. The issue arises from...
CVE-2024-7771
CVE-2024-7771 affects the Dockerized mintplex-labs/anything-llm (latest digest 1d9452da2b92). The issue is in the localWhisper audio transcription path: resampling from 1 Hz to 16000 Hz can quickly exhaust memory, causing the Docker container to be killed by the daemon and leading to a denial of ...
CVE-2024-7771 Denial of Service in mintplex-labs/anything-llm
A vulnerability in the Dockerized version of mintplex-labs/anything-llm latest, digest 1d9452da2b92 allows for a denial of service. Uploading an audio file with a very low sample rate causes the functionality responsible for transcribing it to crash the entire site instance. The issue arises from...
Important: Red Hat Security Advisory: rh-postgresql10-postgresql security update
An update for rh-postgresql10-postgresql is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
RHEL 7 : rh-postgresql10-postgresql (RHSA-2023:7771)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:7771 advisory. PostgreSQL is an advanced object-relational database management system DBMS. Security Fixes: postgresql: Buffer overrun from integer overflow in arra...
SUSE CVE-2017-7771
Out-of-bounds read in Graphite2 Library in Firefox before 54 in graphite2::Pass::readPass function...
CVE-2020-7771
Asciitable.js before 1.0.3 is vulnerable to Prototype Pollution via the main function. The vulnerability allows injecting properties into Object.prototype (e.g., proto ), which can lead to hijacking object properties and, in worst cases, DoS or remote code execution depending on the environment. ...
Huawei EulerOS: Security Advisory for graphite2 (EulerOS-SA-2017-1152)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Huawei EulerOS: Security Advisory for firefox (EulerOS-SA-2017-1126)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...