1317 matches found
CVE-2020-0753-and-CVE-2020-0754
Writeup and POC for CVE-2020-0753, CVE-2020-0754 and six fixed Window DOS Vulnerabilities Exploit FileSystem race condition bug - analysis of CVE-2020-0753 and CVE-2020-0754 Windows Error Reporting service has fixed 2 Elevation of Privilege bugs in last Patch Tuesday, the two bugs are assigned wi...
CVE-2023-36874
🇮🇱 BringThemHome NeverAgainIsNow 🇮🇱 We demand the safe return of all citizens who have been taken hostage by the terrorist group Hamas. We will not rest until every hostage is released and returns home safely. You can help bring them back home.https://stories.bringthemhomenow.net/ CVE-2023-36874...
CVE-2023-36874_BOF
CVE-2023-36874 Windows Error Reporting LPE BOF Introduction This is a mature and operational CobaltStrike BOF implementation of Filip Dragovic's @filipdragovic CVE-2023-36874 Windows Error Reporting LPE exploit. He did the heavy lifting in terms of creating a working exploit by reversing the...
Lsass-Shtinkering
Lsass Shtinkering New method of dumping LSASS by abusing the Windows Error Reporting service. It sends a message to the service with the ALPC protocol to report an exception on LSASS. This report will cause the service to dump the memory of LSASS. Prerequisites The registry value "DumpType" under...
DirCreate2System
DirCreate2System Weaponizing to get NT AUTHORITY\SYSTEM for Privileged Directory Creation Bugs with Windows Error Reporting Short Description: I've discovered comctl32.dll which is missing in system dir which doesn't really exist has been loaded by wermgr.exe via windows error reporting by runnin...
CVE-2023-36874
CVE-2023-36874 For demonstration purposes only. Exploit works on vulnerable Windows clients/servers. Compile code and create c:\test\system32 directories. Place your wermgr.exe in that directory and run compiled PoC...
CVE-2019-1315
Windows Error Reporting Manager arbitrary file move Elevation of Privilege Details: https://offsec.almond.consulting/windows-error-reporting-arbitrary-file-move-eop.html You will need the NtApiDotNet library to run it, as well as a valid Report.wer file, both to be placed in the same directory as...
CVE-2020-0753-and-CVE-2020-0754
Writeup and POC for CVE-2020-0753, CVE-2020-0754 and six unfixed Window DOS Vulnerabilities Exploit FileSystem race condition bug - analysis of CVE-2020-0753 and CVE-2020-0754 Windows Error Reporting service has fixed 2 Elevation of Privilege bugs in last Patch Tuesday, the two bugs are assigned...
CVE-2026-20817
CVE-2026-20817 - Windows Error Reporting WER ALPC Privilege Escalation Description This repository contains a Proof-of-Concept PoC for CVE-2026-20817 , a local privilege escalation vulnerability in the Windows Error Reporting WER service. The vulnerability allows an authenticated low-privileged...
CVE-2026-97815
Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network...
CVE-2026-97798
Improper neutralization of argument delimiters in a command 'argument injection' in Windows Error Reporting allows an authorized attacker to elevate privileges locally...
CVE-2026-85800
Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally...
CVE-2026-85354
Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally...
CVE-2026-83916
Double free in Windows Error Reporting allows an authorized attacker to execute code locally...
CVE-2026-83840
Weak authentication in Windows Error Reporting allows an authorized attacker to elevate privileges locally...
CVE-2026-83758
Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to execute code locally...
CVE-2026-83747
Out-of-bounds read in Windows Error Reporting allows an authorized attacker to disclose information locally...
CVE-2026-83748
Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network...