HITCON-2023-Demo-CVE-2023-20562

HITCON 2023 Demo CVE-2023-20562 Description This demonstration took place at HITCON 2023 in Taiwan. The demo highlights the exploitation of AMDCpuProfiler.sys within AMD μProf. By triggering an arbitrary write on the EPROCESS token, privilege escalation to SYSTEM level is achieved. Disabling the...

HITCON-2023-Demo-CVE-2023-20562

HITCON 2023 Demo CVE-2023-20562 Descrizione Questa dimostrazione si è svolta a HITCON 2023 a Taiwan. La demo evidenzia lo sfruttamento di AMDCpuProfiler.sys all'interno di AMD μProf. Attivando una scrittura arbitraria sul token EPROCESS, si ottiene l'escalation dei privilegi a livello SYSTEM. La...

EUVD-2021-13140

Malware in sbrugna...

EUVD-2022-32171

Malicious code in bioql PyPI...

EUVD-2023-35652

Malicious code in bioql PyPI...

EUVD-2023-35677

Malicious code in bioql PyPI...

EUVD-2023-24735

Malicious code in bioql PyPI...

EUVD-2023-24740

Malicious code in bioql PyPI...

EUVD-2023-35660

Malicious code in bioql PyPI...

EUVD-2022-28760

Malicious code in bioql PyPI...

CVE-2023-31366

Improper input validation in AMD μProf could allow an attacker to perform a write to an invalid address, potentially resulting in denial of service...

CVE-2023-31366

Improper input validation in AMD μProf could allow an attacker to perform a write to an invalid address, potentially resulting in denial of service...

CVE-2023-31349

Incorrect default permissions in the AMD μProf installation directory could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution...

CVE-2023-31349

Incorrect default permissions in the AMD μProf installation directory could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution...

CVE-2023-31348

A DLL hijacking vulnerability in AMD μProf could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution...

CVE-2023-31341

Insufficient validation of the Input Output Control IOCTL input buffer in AMD μProf may allow an authenticated attacker to cause an out-of-bounds write, potentially causing a Windows® OS crash, resulting in denial of service...

CVE-2023-31341

Insufficient validation of the Input Output Control IOCTL input buffer in AMD μProf may allow an authenticated attacker to cause an out-of-bounds write, potentially causing a Windows® OS crash, resulting in denial of service...

AMD μProf 安全漏洞

AMD μProf is a software analysis tool from Ultra Micro Semiconductor AMD. A security vulnerability exists in AMD μProf that stems from insufficient validation of the input buffer, which could allow an authenticated attacker to perform out-of-bounds writes, which could result in a crash of the...

AMD µPROF Security Notice

Bulletin ID: AMD-SB-9001 Potential Impact: Varies by CVE, see descriptions below Severity: Varies by CVE, see descriptions below Summary AMD μProf “MICRO-prof” is a software profiling analysis tool for x86 applications running on Windows®, Linux® and FreeBSD® operating systems and is designed to...

CVE-2023-20556

Insufficient validation of the IOCTL Input Output Control input buffer in AMD μProf may allow an authenticated user to send an arbitrary buffer, potentially resulting in a Windows crash, leading to denial of service. Mitigation Please contact AMD support for updates...