Lucene search
+L

7 matches found

Kitploit
Kitploit
added 2026/09/02 12:39 p.m.5 views

CVE-2024-30088

CVE-2024-30088 バグ: バグは、カーネルが現在のトークンオブジェクトの AUTHZBASEPSECURITYATTRIBUTESINFORMATION をユーザーモードにコピーする際の関数 AuthzBasepCopyoutInternalSecurityAttributes 内にあります。この構造体は次のようになっています: root@kitploit: //0x30 bytes sizeof struct AUTHZBASEPSECURITYATTRIBUTESINFORMATION ULONG SecurityAttributeCount; //0x0 struct...

7CVSS7.2AI score0.68202EPSS
SaveExploits7
Kitploit
Kitploit
added 2026/09/02 12:46 a.m.4 views

CVE-2024-30088-Windows-poc

CVE-2024-30088-Windows-poc 该漏洞存在于 NtQueryInformationToken 函数中,特别是在处理AuthzBasepCopyoutInternalSecurityAttributes 函数时,该漏洞源于内核在操作对象时对锁定机制的不当管理,这一失误可能导致恶意实体意外提升权限。 提权因为需要条件竞争,所以需要耐心等待一会...

7CVSS7.2AI score0.68202EPSS
SaveExploits7
EUVD
EUVD
added 2025/10/14 6:30 p.m.8 views

EUVD-2025-34325

Time-of-check time-of-use toctou race condition in NtQueryInformation Token function ntifs.h allows an authorized attacker to elevate privileges locally...

7.8CVSS9.1AI score0.00207EPSS
SaveExploits0References2
OSV
OSV
added 2025/10/14 5:15 p.m.9 views

CVE-2025-55696

Time-of-check time-of-use toctou race condition in NtQueryInformation Token function ntifs.h allows an authorized attacker to elevate privileges locally...

7CVSS5.8AI score0.00207EPSS
SaveExploits0References1
Microsoft CVE
Microsoft CVE
added 2025/10/14 2:00 p.m.9 views

NtQueryInformation Token function (ntifs.h) Elevation of Privilege Vulnerability

Time-of-check time-of-use toctou race condition in NtQueryInformation Token function ntifs.h allows an authorized attacker to elevate privileges locally...

7.8CVSS6.9AI score0.00207EPSS
SaveExploits0
GithubExploit
GithubExploit
added 2024/07/05 4:02 p.m.531 views

Exploit for Time-of-check Time-of-use (TOCTOU) Race Condition in Microsoft

CVE-2024-30088-Windows-poc This vulnerability resides in the...

7CVSS7.4AI score0.68202EPSS
SaveExploits7
Zero Day Initiative
Zero Day Initiative
added 2024/06/12 12:00 a.m.56 views

(Pwn2Own) Microsoft Windows NtQueryInformationToken Race Condition Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the implementation...

8.8CVSS7.1AI score0.68202EPSS
SaveExploits7References1
Rows per page
Query Builder