1022 matches found
CVE-2023-36874
🇮🇱 RiportateliACasa MaiPiùOra 🇮🇱 Chiediamo il ritorno sicuro di tutti i cittadini presi in ostaggio dal gruppo terroristico Hamas. Non ci fermeremo finché ogni ostaggio non sarà rilasciato e non tornerà a casa sano e salvo. Puoi aiutarci a riportarli a casa.https://stories.bringthemhomenow.net/...
CVE-2023-36874_BOF
CVE-2023-36874 Windows Error Reporting LPE BOF Introduzione Questa è un'implementazione BOF matura e operativa per CobaltStrike dell'exploit LPE per Windows Error Reporting CVE-2023-36874 di Filip Dragovic @filipdragovic CVE-2023-36874 Windows Error Reporting LPE exploit. Ha fatto il lavoro pesan...
CVE-2023-36874
CVE-2023-36874 Solo a scopo dimostrativo. L'exploit funziona su client/server Windows vulnerabili. Compilare il codice e creare le directory c:\test\system32. Posizionare il proprio wermgr.exe in quella directory ed eseguire il PoC compilato...
CVE-2026-20817
CVE-2026-20817 - Windows Error Reporting WER ALPC Privilege Escalation Descrizione Questo repository contiene una Proof-of-Concept PoC per CVE-2026-20817 , una vulnerabilità di escalation dei privilegi locale nel servizio Windows Error Reporting WER. La vulnerabilità consente a un utente...
CVE-2020-0753-and-CVE-2020-0754
Writeup e POC per CVE-2020-0753, CVE-2020-0754 e sei vulnerabilità DOS di Windows non corrette Exploit del bug di race condition nel FileSystem - analisi di CVE-2020-0753 e CVE-2020-0754 Il servizio Windows Error Reporting ha corretto 2 bug di Elevation of Privilege nell'ultimo Patch Tuesday; ai...
CVE-2020-0753-and-CVE-2020-0754
Writeup e POC per CVE-2020-0753, CVE-2020-0754 e sei vulnerabilità DOS di Windows corrette Exploit del bug di race condition nel FileSystem - analisi di CVE-2020-0753 e CVE-2020-0754 Il servizio Windows Error Reporting ha corretto 2 bug di Elevazione dei Privilegi nell'ultimo Patch Tuesday, i due...
CVE-2019-1315
Windows Error Reporting Manager – Erweiterung von Berechtigungen durch beliebiges Verschieben von Dateien Details: https://offsec.almond.consulting/windows-error-reporting-arbitrary-file-move-eop.html Sie benötigen die NtApiDotNet-Bibliothek sowie eine gültige Report.wer-Datei. Beide müssen sich ...
CVE-2023-36874
CVE-2023-36874 Prova di concetto PoC Un'implementazione educativa e difensiva della vulnerabilità CVE-2023-36874 , che dimostra un difetto di escalation locale dei privilegi LPE nel componente Windows Error Reporting WER. ⚠️ Disclaimer Questo repository e il codice sorgente fornito sono destinati...
Lsass-Shtinkering
Lsass Shtinkering Nuovo metodo per effettuare il dump di LSASS abusando del servizio Windows Error Reporting. Invia un messaggio al servizio tramite il protocollo ALPC per segnalare un'eccezione su LSASS. Questo report farà sì che il servizio esegua il dump della memoria di LSASS. Prerequisiti Il...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1
In the Linux kernel, the following vulnerabilities have been resolved: HID: hid-pl: handling probe errors Errors in the init process must be reported back; otherwise, we will follow a NULL pointer the first time FF is used...
DirCreate2System
DirCreate2System Transformando em arma para obter NT AUTHORITY\SYSTEM por meio de bugs de criação de diretórios privilegiados com o Windows Error Reporting Descrição resumida: Descobri que comctl32.dll que está ausente no diretório do sistema, que na verdade não existe foi carregada por wermgr.ex...
unbound security update
1.24.2-18 - Add unit tests for CVE-2026-44690,55973 1.24.2-17 - Fix CVE-2026-55973: dns-error-reporting stack buffer overflow 1.24.2-16 - Fix CVE-2026-44690 - Cross-zone wildcard cache poisoning...
PT-2026-72611
In the Linux kernel, the following vulnerability has been resolved: bpf: Guard conntrack opts error writes The conntrack lookup and allocation kfuncs take an opts pointer together with an opts sz argument. The verifier checks only the memory range described by opts sz, but the wrappers...
CVE-2026-56620
Technical details such as affected products, versions, root cause, or exploit information are not publicly provided in the supplied documents. Monitor for updates from official disclosures.
EUVD-2026-55662
HCL BigFix Mobile is vulnerable to information disclosure due to improper handling of exceptions and verbose error reporting...
The vulnerabilities of the functions pkcs7_decrypt_smime(), pkcs7_decrypt_pem(), and pkcs7_decrypt_der in the Python programming language-based cryptography library allow attackers to compromise the confidentiality of protected information.
The vulnerabilities of the functions pkcs7decryptsmime, pkcs7decryptpem, and pkcs7decryptder in the Python programming language-based cryptography library are related to deficiencies in the error reporting mechanism. Exploiting these vulnerabilities could allow an attacker to influence the...
CVE-2026-55973
A flaw was found in Unbound. When the 'dns-error-reporting: yes' option is enabled, a remote attacker can send a specially crafted DNS response containing a malformed EDNS Report-Channel option from a delegated zone they control. This can lead to a stack variable overwrite, causing the Unbound...
CVE-2026-64461
The CVE-2026-64461 entry concerns a Linux kernel PCIe Mediatek issue where IRQ domains are leaked when a port fails to enable. The fix refactors IRQ teardown into a per-port helper (mtk_pcie_irq_teardown_port()) and invokes it from the setup path when mtk_pcie_enable_port() fails. This ensures IR...
Linux Distros Unpatched Vulnerability : CVE-2026-55973
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In NLnet Labs Unbound 1.23.0 up to and including 1.25.1, when 'dns-error-reporting: yes' is set, the EDNS Report-Channel option code 18 from the last upstream...
