local-exploits

Local Exploits Various local exploits CVE-2020-8793 opensmptd-makemap-lpe - Fedora 31 OpenSMTPD makemap local root exploit. Code mostly taken from Qualys advisory 2020-02-24 for CVE-2020-8793. opensmtpd: Reading of arbitrary file by unprivileged attacker can result in information disclosure or...

Exploitability Analysis: Smash the Ref Bug Class

In April 2020, security researcher Gil Dabah published a paper on a set of vulnerabilities he had discovered within the Win32k subsystem of the Windows operating system. These vulnerabilities demonstrated instances of a new class of bugs, dubbed “Smash the Ref.” Dabah’s research included 13 test...

SandboxEscaper Drops Three More Windows Exploits, IE Zero-Day

On the heels of releasing a Windows zero-day exploit on Wednesday, developer SandboxEscaper has dropped exploit code for four more flaws on Thursday morning. On Wednesday, she dropped a Windows zero-day exploit that would allow local privilege-escalation LPE, by importing legacy tasks from other...