KslDump

KslDump - BMVD（自带微软易受攻击驱动程序） 重要背景 我于2026年3月7日 向微软报告了该问题。然而，大约20天前，游戏破解社区已经逆向并公开讨论了它。就我而言，我并未关注他们的项目，对此毫不知情。很明显，这是两个完全独立且不相关的项目。 参考资料 Avantguard 博客文章 既然 Defender 已经留了一把刀在厨房，何必自备刀具？ KslDump 仅使用微软签名的组件从 PPL 保护的 LSASS 中提取凭据。无需部署漏洞，无需加载驱动程序。整个攻击链随 Windows Defender 预装。微软通过将 MmCopyMemory...

kur

kur Un código que simplemente ofrece la capacidad de leer/escribir memoria en modo kernel desde el modo usuario utilizando un driver firmado vulnerable. Simplemente utiliza MmCopyVirtualMemory, una API no documentada aunque una de las más comunes, en modo kernel para que puedas leer/escribir...

CVE-2025-8061-Exploit

Exploit CVE-2025-8061 Resumen Exploit de prueba de concepto para LnvMSRIO.sys Controlador MSR I/O de Lenovo, que demuestra lectura/escritura arbitraria de memoria física y acceso a memoria del kernel mediante traducción VA a PA de Superfetch. Información del controlador Propiedad| Valor ---|---...

CVE-2026-7878-eBPF-Verifier-Type-Confusion-Kernel-Memory-Read-Write

6. CVE-2026-7878 – Confusión de Tipos del Verificador eBPF → Lectura/Escritura de Memoria del Kernel Resumen Un sutil desbordamiento de enteros en el seguimiento de límites del verificador eBPF permite a un atacante crear un programa eBPF que accede a memoria del kernel fuera de los límites...

CVE-2021-21551

CVE-2021-21551 通过启动系统命令来利用CVE-2021-21551进行本地权限提升（LPE）的简单PoC。 https://vulners.com/cve/CVE-2021-21551 在签名的戴尔Windows驱动程序（dbutil23.sys）中发现了一个问题，可能导致整个本地系统被攻陷。该驱动程序的ioctl调度例程缺乏对用户提供的缓冲区的验证。 IOCTL 任何人都可以创建句柄并向这些ioctl代码发出ioctl请求，从而破坏Windows安全模型： 0x9b0c1f40 - 任意物理内存读取 0x9b0c1f44 - 任意物理内存写入 0x9b0c1ec4 -...

CVE-2026-36355

CVE-2026-36355: Realtek rtl819x Jungle SDK - Lectura/Escritura no autenticada de memoria del kernel mediante ioctls de depuración CVE : CVE-2026-36355 CWE : CWE-782, CWE-787, CWE-200 Descubridor : Daniil Gordeev Divulgado : 2026-05-03 Resumen El controlador de kernel Wi-Fi rtl8192cd del "Jungle...

cheat-engine-undetectable

Cheat Engine Indetectable Edición de Investigación Académica — Cheat Engine modificado con evasión de anti-cheat en múltiples niveles para educación en ciberseguridad e investigación de ingeniería inversa a nivel universitario. Aviso legal: Este proyecto es exclusivamente para investigación...

evil-mhyprot-cli

evil-mhyprot-cli Una PoC para el controlador vulnerable Mhyprot2.sys que permite leer/escribir memoria en kernel/usuario mediante un proceso de usuario sin privilegios. libmhyprot Wiki Descripción general Lo que podemos hacer con esta CLI es lo siguiente: Leer/Escribir cualquier memoria del kerne...

CVE-2026-13043

A missing authentication vulnerability in the Kernel Memory Access Driver PSKMAD used by WatchGuard endpoint security products allows a local, authenticated attacker to bypass the driver's access-control handshake and issue arbitrary privileged commands to the driver, resulting in disclosure of...

EUVD-2026-90898

A missing authentication vulnerability in the Kernel Memory Access Driver PSKMAD used by WatchGuard endpoint security products allows a local, authenticated attacker to bypass the driver's access-control handshake and issue arbitrary privileged commands to the driver, resulting in disclosure of...

CVE-2026-13043 WatchGuard Endpoint Security Missing Authentication in Kernel Memory Access Driver Allows Arbitrary Kernel Memory Access

A missing authentication vulnerability in the Kernel Memory Access Driver PSKMAD used by WatchGuard endpoint security products allows a local, authenticated attacker to bypass the driver's access-control handshake and issue arbitrary privileged commands to the driver, resulting in disclosure of...

CVE-2026-13043

WatchGuard endpoint security products are affected by a missing authentication vulnerability in the Kernel Memory Access Driver (PSKMAD) . A local, authenticated attacker can bypass the driver's access-control handshake to issue arbitrary privileged commands. This flaw allows for the disclosure o...

CVE-2026-13043 WatchGuard Endpoint Security Missing Authentication in Kernel Memory Access Driver Allows Arbitrary Kernel Memory Access

A missing authentication vulnerability in the Kernel Memory Access Driver PSKMAD used by WatchGuard endpoint security products allows a local, authenticated attacker to bypass the driver's access-control handshake and issue arbitrary privileged commands to the driver, resulting in disclosure of...

PT-2026-103920

Name of the Vulnerable Software and Affected Versions WatchGuard endpoint security products affected versions not specified Description A missing authentication issue in the Kernel Memory Access Driver PSKMAD allows a local, authenticated attacker to bypass the access-control handshake. This...

CVE-2026-13043: Missing Authentication for Critical Function

A missing authentication vulnerability in the Kernel Memory Access Driver PSKMAD used by WatchGuard endpoint security products allows a local, authenticated attacker to bypass the driver's access-control handshake and issue arbitrary privileged commands to the driver, resulting in disclosure of...

CVE-2026-90212: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: arm64/efi: Avoid voluntary preemption with efimm installed Gus reports a bad kernel memory access when using software PAN CONFIGARM64SWTTBR0PAN=y on a machine with support for EFI runtime services: Unable to handle kernel access ...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: drm/exynos: vidi – fixed an issue to avoid directly dereferencing the user pointer. In vidiconnectionioctl, vidi-ediduser pointer is directly dereferenced in the kernel. This allows arbitrary kernel memory access from the user...

Astra Linux – Vulnerability in Linux 5.10, Linux

KGDB and KDB allow read and write access to kernel memory, and therefore should be restricted during lockdown. An attacker with access to a serial port could trigger the debugger, so it is important that the debugger respects the lockdown mode when/if it is triggered. CVSS 3.1 Base Score: 6.7...

Exploit for Out-of-bounds Write in Arm Bifrost_Gpu_Kernel_Driver

CVE-2021-28664-PoC Mali kbase GPU driver UAF CVE-2021-2866...

Linux Distros Unpatched Vulnerability : CVE-2026-89489

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - openrisc: fix arbitrary kernel memory access via or1katomic syscall sysor1katomic syscall 244 in the or1k ABI takes two user pointers, v1 and v2, and swaps the...