Exploit for CVE-2020-1034

This is a PoC Proof of Concept exploit for CVE-2020-1034, a vulnerability discovered by Microsoft and fixed on August 9, 2020. The exploit targets an unpatched Windows 10 2004, build 19041.488. The exploit code is written in C++ and uses the Windows API to manipulate the system's Event Tracing fo...

CVE-2021-1662

Windows Event Tracing Elevation of Privilege Vulnerability...

Privilege escalation

Windows Event Tracing Elevation of Privilege Vulnerability...

CVE-2021-1662

Windows Event Tracing Elevation of Privilege Vulnerability...

CVE-2021-1662

CVE-2021-1662 is a Windows Event Tracing Elevation of Privilege vulnerability (local, low complexity, high impact per CVSS 3.1). The available connected documents indicate Windows event tracing is the affected component and classify the issue as a local privilege escalation; no specific exploit d...

CVE-2021-1662 Windows Event Tracing Elevation of Privilege Vulnerability

...

Windows Event Tracing Elevation of Privilege Vulnerability

...

PT-2021-1600 · Microsoft · Windows Event Tracing +1

Name of the Vulnerable Software and Affected Versions: Windows Event Tracing versions affected versions not specified Description: The issue is related to errors in privilege management within the Windows operating system's tracing service. It allows an attacker to potentially elevate their...

CVE-2021-1662: Improper Privilege Management

Windows Event Tracing Elevation of Privilege Vulnerability...

Microsoft Diagnostics Hub Standard Collector Service Security Vulnerability

Microsoft Diagnostics Hub Standard Collector Service is a Win32 service from Microsoft USA. It is used to collect real-time ETW events and process them. A security vulnerability exists in Microsoft Diagnostics Hub Standard Collector Service. No information about this vulnerability is available at...

Microsoft Windows Event Tracing Security Vulnerability

Microsoft Windows Event Tracing is an application from Microsoft Corporation USA. It provides a mechanism for tracking and logging events raised by user-mode applications and kernel-mode drivers. A security vulnerability exists in Microsoft Windows Event Tracing, for which no information is...

Citrix CDFControl Tool

Description CDFControl is an event tracing tool geared towards capturing Citrix Diagnostic Facility CDF trace messages that are output from the various Citrix tracing providers. CDFControl v3.13.0.55 Created on: Mar 8, 2007 Updated on: December 10, 2024 Please note: You can download the required...

Winshark - A Wireshark Plugin To Instrument ETW

Wireshark plugin to work with Event Tracing for Windows Microsoft Message Analyzer is being retired and its download packages were removed from microsoft.com sites on November 25 2019. Wireshark have built a huge library of network protocol dissectors. The best tool for Windows would be one that...

Ubuntu 18.04 LTS : Linux kernel (HWE) vulnerabilities (USN-4225-2)

The remote Ubuntu 18.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-4225-2 advisory. USN-4225-1 fixed vulnerabilities in the Linux kernel for Ubuntu 19.10. This update provides the corresponding updates for the Linux Hardware Enablement H...

USN-4225-2: Linux kernel (HWE) vulnerabilities

USN-4225-1 fixed vulnerabilities in the Linux kernel for Ubuntu 19.10. This update provides the corresponding updates for the Linux Hardware Enablement HWE kernel from Ubuntu 19.10 for Ubuntu 18.04 LTS. It was discovered that a heap-based buffer overflow existed in the Marvell WiFi-Ex Driver for...

Ubuntu 18.04 LTS : Linux kernel vulnerabilities (USN-4225-1)

The remote Ubuntu 18.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-4225-1 advisory. It was discovered that a heap-based buffer overflow existed in the Marvell WiFi-Ex Driver for the Linux kernel. A physically proximate attacker could use...

Ubuntu 18.04 LTS : Linux kernel vulnerabilities (USN-4226-1)

The remote Ubuntu 18.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-4226-1 advisory. Michael Hanselmann discovered that the CIFS implementation in the Linux kernel did not sanitize paths returned by an SMB server. An attacker controlling ...

SilkETW - Flexible C# Wrapper For ETW (Event Tracing for Windows)

SilkETW is a flexible C wrapper for ETW, it is meant to abstract away the complexities of ETW and give people a simple interface to perform research and introspection. While SilkETW has obvious defensive and offensive applications it is primarily a research tool in it's current state. For easy...

SilkETW: Because Free Telemetry is … Free!

Over time people have had an on-again, off-again interest in Event Tracing for Windows ETW. ETW, first introduced in Windows 2000, is a lightweight Kernel level tracing facility that was originally intended for debugging, diagnostics and performance. Gradually, however, defenders realized that ET...

Introducing pywintrace: A Python Wrapper for ETW

Introduction Event tracing for Windows ETW is a lightweight logging facility first introduced with Windows 2000. Originally intended as a software diagnostic, troubleshooting and performance monitoring tool, it was greatly expanded in Windows Vista to create a lightweight debugging mechanism. The...