42 matches found
RawHive
RawHive RawHive is a Cobalt Strike BOF for pulling selected Windows registry hives directly from a raw NTFS volume. It skips the normal file APIs, walks NTFS metadata to find the target file records, and copies the bytes straight from disk. It currently looks for: C:\Windows\System32\config\SAM...
CVE-2021-31728
CVE-2021-31727 و CVE-2021-31728 مرجع عام لـ CVE-2021-31727 يكشف عن قدرات قراءة/كتابة غير مقيدة على القرص. مرجع عام لـ CVE-2021-31728 يكشف عن تنفيذ تعليمات برمجية عشوائية في الحلقة 0 مباشرة. شكر وتقدير Lima X ساعد بفكرة SystemBigPoolInformation...
CVE-2019-9702_Symantec_Encryption_Desktop_LPE_PoC
Preuve de concept d'escalade de privilèges locaux de Symantec Encryption Desktop PGPwded.sys Ce dépôt contient une preuve de concept pour une voie d'escalade de privilèges locaux dans le filtre de stockage PGPwded.sys de Symantec Encryption Desktop, basée sur une primitive de lecture/écriture bru...
Astra Linux – Vulnerability in Linux 5.15
A issue was discovered in the Linux kernel before version 6.2. The ntfs3 subsystem does not properly check for correctness during disk reads, resulting in an out-of-bounds read in the ntfssetea function in fs/ntfs3/xattr.c...
mailorder
Mail Order تم تثبيت خدمة ترخيص Nalpeiron NLSSRV32.exe كجزء من بعض تثبيتات البرامج للتعامل مع عمليات الترخيص البرمجية المميَّزة. وهي مقترنة بمكوّن عميل filechck.dll يتواصل مع الخدمة عبر صناديق البريد mailslots ومن هنا جاء الاسم. يتم إجراء الاستدعاءات للخدمة باستخدام تسلسل مخصص، ويتضمن الكثير منها...
CVE-2026-89456
A flaw was found in the Linux kernel. Specifically, within the s390/dasd component, an issue exists during error recovery for disk read operations. When a request is partially completed and then recovered, the system fails to correctly propagate the length of the processed data. This can lead to...
UBUNTU-CVE-2026-72201
In the Linux kernel, the following vulnerability has been resolved: ntfs: validate index entries on reading Validate index entries immediately after reading an index root or index block from disk. This eliminates repeated checks in lookup and readdir, and reduce the risk of missing checks in thos...
CVE-2026-72201
In the Linux kernel, the following vulnerability has been resolved: ntfs: validate index entries on reading Validate index entries immediately after reading an index root or index block from disk. This eliminates repeated checks in lookup and readdir, and reduce the risk of missing checks in thos...
EUVD-2026-58959
In the Linux kernel, the following vulnerability has been resolved: ntfs: validate index entries on reading Validate index entries immediately after reading an index root or index block from disk. This eliminates repeated checks in lookup and readdir, and reduce the risk of missing checks in thos...
Exploit for CVE-2019-9702
Symantec Encryption Desktop PGPwded.sys local privilege esca...
PT-2026-41994
Name of the Vulnerable Software and Affected Versions AVideo versions 29.0 and earlier Description An unauthenticated remote attacker can read arbitrary image files from the disk that the PHP user has permission to open. This includes private user-profile photos protected by Access Control Lists...
CVE-2026-25771
Wazuh vulnerability CVE-2026-25771 affects versions 4.3.0 through prior to 4.14.3. The DoS arises in the API authentication middleware: the async Starlette/Asyncio loop calls a synchronous generate_keypair function that performs blocking disk I/O on every request with a Bearer token, allowing an ...
EUVD-2021-18611
Malware in sbrugna...
CVE-2025-50892
The eudskacs.sys driver version 20250328 shipped with EaseUs Todo Backup 1.2.0.1 fails to properly validate privileges for I/O requests IRPMJREAD/IRPMJWRITE sent to its device object. This allows a local, low-privileged attacker to perform arbitrary raw disk reads and writes, leading to sensitive...
Linux Distros Unpatched Vulnerability : CVE-2017-10929
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The grubmemmove function in shlr/grub/kern/misc.c in radare2 1.5.0 allows remote attackers to cause a denial of service heap-based buffer overflow and applicati...
kafka-clients: privilege escalation to filesystem read-access via automatic ConfigProvider
A flaw was found in Apache Kafka Clients. Apache Kafka Clients accepts configuration data for customizing behavior and includes ConfigProvider plugins to manipulate these configurations. Apache Kafka also provides FileConfigProvider, DirectoryConfigProvider, and EnvVarConfigProvider...
kafka-clients: privilege escalation to filesystem read-access via automatic ConfigProvider
A flaw was found in Apache Kafka Clients. Apache Kafka Clients accepts configuration data for customizing behavior and includes ConfigProvider plugins to manipulate these configurations. Apache Kafka also provides FileConfigProvider, DirectoryConfigProvider, and EnvVarConfigProvider...
CVE-2025-0689
When reading data from disk, the grub's UDF filesystem module utilizes the user controlled data length metadata to allocate its internal buffers. In certain scenarios, while iterating through disk sectors, it assumes the read size from the disk is always smaller than the allocated buffer size whi...
Linux Distros Unpatched Vulnerability : CVE-2011-4127
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Linux kernel before 3.2.2 does not properly restrict SGIO ioctl calls, which allows local users to bypass intended restrictions on disk read and write...
