local-exploits

Local Exploits Varios exploits locales CVE-2020-8793 opensmptd-makemap-lpe - Exploit local root para OpenSMTPD makemap en Fedora 31. Código tomado en su mayor parte del aviso de Qualys 2020-02-24 para CVE-2020-8793. opensmtpd: La lectura de archivos arbitrarios por parte de un atacante sin...

Exploitability Analysis: Smash the Ref Bug Class

In April 2020, security researcher Gil Dabah published a paper on a set of vulnerabilities he had discovered within the Win32k subsystem of the Windows operating system. These vulnerabilities demonstrated instances of a new class of bugs, dubbed “Smash the Ref.” Dabah’s research included 13 test...

SandboxEscaper Drops Three More Windows Exploits, IE Zero-Day

On the heels of releasing a Windows zero-day exploit on Wednesday, developer SandboxEscaper has dropped exploit code for four more flaws on Thursday morning. On Wednesday, she dropped a Windows zero-day exploit that would allow local privilege-escalation LPE, by importing legacy tasks from other...