CVE-2024-21338-Exploit

Exploit CVE-2024-21338 Descripción del proyecto Este es un POC para CVE-2024-21338, una vulnerabilidad de elevación de privilegios en el controlador Windows AppLocker appid.sys, que fue explotada como 0day por el grupo Lazarus para la elevación de privilegios locales en Windows. Contexto de la...

CVE-2021-27965

CVE-2021-27965 Simple PoC for exploiting CVE-2021-27965 for LPE by spawning system cmd. https://vulners.com/cve/CVE-2021-27965 An issue was discovered in signed MICSYS windows driver MsIo64.sys which may lead to compromisation of whole local system. Driver's ioctl dispatch routine suffers from...

EUVD-2026-76913

A flaw has been found in IOBit Uninstaller 15.5.0.11. Affected by this issue is the function sub11838 of the file IURegistryFilter.sys of the component IOCTL Dispatch Handler. This manipulation causes null pointer dereference. The attack requires local access. The exploit has been published and m...

CVE-2026-90485

A flaw has been found in IOBit Uninstaller 15.5.0.11. Affected by this issue is the function sub11838 of the file IURegistryFilter.sys of the component IOCTL Dispatch Handler. This manipulation causes null pointer dereference. The attack requires local access. The exploit has been published and m...

CVE-2026-90485 IOBit Uninstaller IOCTL Dispatch IURegistryFilter.sys sub_11838 null pointer dereference

A flaw has been found in IOBit Uninstaller 15.5.0.11. Affected by this issue is the function sub11838 of the file IURegistryFilter.sys of the component IOCTL Dispatch Handler. This manipulation causes null pointer dereference. The attack requires local access. The exploit has been published and m...

CVE-2026-90485

A null pointer dereference in the function sub_11838 of the IURegistryFilter.sys driver (IOCTL Dispatch Handler) affects IOBit Uninstaller 15.5.0.11 . A local attacker with low privileges can trigger the flaw without user interaction, resulting in a high-impact denial of service (CVSS 3.1: 5.5 Me...

PT-2026-90722

A flaw has been found in IOBit Uninstaller 15.5.0.11. Affected by this issue is the function sub 11838 of the file IURegistryFilter.sys of the component IOCTL Dispatch Handler. This manipulation causes null pointer dereference. The attack requires local access. The exploit has been published and...

iqvw64e-privilege-escalation

iqvw64e-privilege-escalation CVE-2015-2291 Local Privilege Escalation PoC Overview This project is an educational proof-of-concept for a Local Privilege Escalation LPE vulnerability in the driver iqvw64e.sys SHA256: 37c637a74bf20d7630281581a8fae124200920df11ad7cd68c14c26cc12c5ec9 — the Intel...

CVE-2026-82628

A vulnerability was found in Colorful iGameCenter 2.0.0.81. This vulnerability affects the function sub11504 in the library WinRing0x64.sys of the component IOCTL Dispatch. Performing a manipulation of the argument PhysicalAddress/AlignNumer/AlignSize results in improper privilege management...

CVE-2026-82628

Colorful iGameCenter 2.0.0.81 contains a vulnerability in the WinRing0x64.sys driver, specifically in the function sub_11504 within the IOCTL Dispatch component. Manipulating the PhysicalAddress/AlignNumber/AlignSize arguments leads to improper privilege management , enabling a local attacker wit...

EUVD-2026-68376

A vulnerability was found in Colorful iGameCenter 2.0.0.81. This vulnerability affects the function sub11504 in the library WinRing0x64.sys of the component IOCTL Dispatch. Performing a manipulation of the argument PhysicalAddress/AlignNumer/AlignSize results in improper privilege management...

CVE-2026-82628 Colorful iGameCenter IOCTL Dispatch WinRing0x64.sys sub_11504 privileges management

A vulnerability was found in Colorful iGameCenter 2.0.0.81. This vulnerability affects the function sub11504 in the library WinRing0x64.sys of the component IOCTL Dispatch. Performing a manipulation of the argument PhysicalAddress/AlignNumer/AlignSize results in improper privilege management...

PT-2026-83713

Name of the Vulnerable Software and Affected Versions Colorful iGameCenter version 2.0.0.81 Description Improper privilege management exists within the IOCTL Dispatch component of the WinRing0x64.sys library. A local attacker can exploit this by manipulating the PhysicalAddress, AlignNumer, and...

CVE-2026-68455

In the Linux kernel, the following vulnerability has been resolved: liveupdate: validate session type before performing operation The sessions ioctls are not applicable to all session types. PRESERVEFD is only applicable to outgoing sessions. RETRIEVEFD and FINISH are only valid for incoming...