kernel-mii

Cobalt Strike Beacon Object File は、CVE-2021-21551 を利用したカーネルエクスプロイトのための基盤です。 作者: Tijme。Alex に教えてもらったことに感謝します! Northwave Security によって実現されました 説明 これは、CVE-2021-21551 を悪用する Cobalt Strike CS Beacon Object File BOF です。ビーコンのプロセストークンをシステムプロセストークンで上書きするだけです。ただし、この BOF は、CS を介したさらなるカーネルエクスプロイトのための優れた基盤にすぎませ...

PrintNightmare

PrintNightmare Impacket을 사용한 PrintNightmare CVE-2021-1675 / CVE-2021-34527 파이썬 구현체입니다. 설치 root@kitploit: $ pip3 install impacket 사용법 root@kitploit: Impacket v0.9.23 - Copyright 2021 SecureAuth Corporation usage: printnightmare.py -h -debug -port destination port -target-ip ip address -hashes...

CVE-2024-7479

CVE-2024-7479 TeamViewer 드라이버 설치의 부적절한 서명 검증 작성자: Marcos Accossatto 데모 목적으로만 제공됩니다. 전체 익스플로잇은 Windows용 TeamViewer의 취약한 버전에서 동작합니다. 소개 이 익스플로잇 PoC는 Pedro Gabaldon의 CVE-2024-7479 PoC를 Python으로 구현한 것입니다. 이 스크립트는 익스플로잇을 위한 IPC 프로토콜을 처리하는 모든 클래스를 포함합니다. 최종 익스플로잇을 위해서는 dbutil23.sys 드라이버와 BYOVDKit 프로젝트에...

kemon

Kemon An Open Source Pre and Post Callback-based Framework for macOS Kernel Monitoring. Breaking News - 08/28/2019 macOS Catalina 10.15 Beta 7 Release Notes https://developer.apple.com/documentation/macosreleasenotes/macoscatalina1015beta7releasenotes Endpoint Security The kauth API has been...

CVE-2026-0432

Incorrect default permissions in the installation directory for the AMD chipset driver could allow an attacker to achieve privilege escalation resulting in arbitrary code execution...

Microsoft JDBC driver for MSSQL Detection

Binary data microsoftmssqljdbcdriverinstalled.nbin...

EUVD-2025-200095

A carefully crafted DLL, copied to C:\ProgramData\Synaptics folder, allows a local user to execute arbitrary code with elevated privileges during driver installation...

CVE-2025-11772

A carefully crafted DLL, copied to C:\ProgramData\Synaptics folder, allows a local user to execute arbitrary code with elevated privileges during driver installation...

CVE-2025-11772 Co-Installer Privilege Escalation

A carefully crafted DLL, copied to C:\ProgramData\Synaptics folder, allows a local user to execute arbitrary code with elevated privileges during driver installation...

CVE-2025-11772

CVE-2025-11772 affects the Synaptics Fingerprint Driver; a specially crafted DLL copied into C:\ProgramData\Synaptics (co-installer context) allows a local user to execute arbitrary code with elevated privileges during driver installation. This Red Hat and EUVD entries confirm the same行为. The roo...

CVE-2025-11772 Co-Installer Privilege Escalation

A carefully crafted DLL, copied to C:\ProgramData\Synaptics folder, allows a local user to execute arbitrary code with elevated privileges during driver installation...

PT-2025-48540

A carefully crafted DLL, copied to C:ProgramDataSynaptics folder, allows a local user to execute arbitrary code with elevated privileges during driver installation...

EUVD-2023-35123

Malicious code in bioql PyPI...

EUVD-2025-30265

Malicious code in bioql PyPI...

CVE-2025-34195

Vasion Print formerly PrinterLogic Virtual Appliance Host versions prior to 1.0.735 and Application prior to 20.0.1330 Windows client deployments contain a remote code execution vulnerability during driver installation caused by unquoted program paths. The PrinterInstallerClient driver-installati...

CVE-2025-34195

Vasion Print formerly PrinterLogic Virtual Appliance Host versions prior to 1.0.735 and Application prior to 20.0.1330 Windows client deployments contain a remote code execution vulnerability during driver installation caused by unquoted program paths. The PrinterInstallerClient driver-installati...

CVE-2025-34195

The CVE-2025-34195 entry describes a remote code execution in Vasion Print (formerly PrinterLogic) Virtual Appliance Host (versions prior to 1.0.735) and Vasion Print Application (Windows client deployments prior to 20.0.1330) caused by unquoted program paths during driver installation. The Print...

CVE-2025-34195 Vasion Print (formerly PrinterLogic) Unquoted Path During Driver Installation Leads to Execution of C:\Program.exe

Vasion Print formerly PrinterLogic Virtual Appliance Host versions prior to 1.0.735 and Application prior to 20.0.1330 Windows client deployments contain a remote code execution vulnerability during driver installation caused by unquoted program paths. The PrinterInstallerClient driver-installati...

PT-2025-38595

Name of the Vulnerable Software and Affected Versions Vasion Print formerly PrinterLogic Virtual Appliance Host versions prior to 1.0.735 Vasion Print formerly PrinterLogic Application versions prior to 20.0.1330 Description Vasion Print formerly PrinterLogic Virtual Appliance Host and Applicatio...

Intel® Rapid Storage Technology Software Advisory

Summary: A potential security vulnerability for Intel® Rapid Storage Technology installation software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2025-20099 Description: Improper access control...