local-exploits

Local Exploits Vari exploit locali CVE-2020-8793 opensmptd-makemap-lpe - exploit locale per root di OpenSMTPD makemap su Fedora 31. Codice in gran parte tratto dall'avviso di Qualys 2020-02-24 per CVE-2020-8793. opensmtpd: la lettura di file arbitrari da parte di un utente non privilegiato può...

Exploitability Analysis: Smash the Ref Bug Class

In April 2020, security researcher Gil Dabah published a paper on a set of vulnerabilities he had discovered within the Win32k subsystem of the Windows operating system. These vulnerabilities demonstrated instances of a new class of bugs, dubbed “Smash the Ref.” Dabah’s research included 13 test...

SandboxEscaper Drops Three More Windows Exploits, IE Zero-Day

On the heels of releasing a Windows zero-day exploit on Wednesday, developer SandboxEscaper has dropped exploit code for four more flaws on Thursday morning. On Wednesday, she dropped a Windows zero-day exploit that would allow local privilege-escalation LPE, by importing legacy tasks from other...