47 matches found
CVE-2026-40369-EXPLOIT
Blog completo - https://pwn2nimron.com/blog CVE-2026-40369: Incremento de Dirección de Kernel Arbitrario a través de NtQuerySystemInformation Clase 253 Resumen Tipo: Escritura de kernel arbitraria incremento — PRIMITIVA DE ESCALACIÓN DE PRIVILEGIOS Componente: ntoskrnl.exe —...
CVE-2024-20698
CVE-2024-20698 关于此漏洞：https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-20698 补丁分析 在 ntoskrnl.exe 中，有两个被修补的函数：sub1406AE224 和 WbAddLookupEntryEx。存在漏洞的函数是 WbAddLookupEntryEx。该函数的调用路径如下： 要调用此函数，我们需要调用 NtQuerySystemInformation，第一个参数为 0xb9。用户提供的缓冲区中的第一个字节是此 switch 的选项： switch...
makin
I create makin to make initial malware assessment little bit easier for me, I think it's useful for others as well, It helps to reveal a debugger detection techniques used by a sample. Any feedback is greatly appreciated: @qazqaz How does it work? makin opens a sample as a debuggee and injects...
SpecuCheck
SpecuCheck SpecuCheck 是一款 Windows 工具，用于检查针对 CVE-2017-5754 Meltdown、CVE-2017-5715 Spectre v2、CVE-2018-3260 Foreshadow 和 CVE-2018-3639 Spectre v4 的软件与硬件缓解措施的状态。它利用了 2018 年 1 月最新补丁中新增的两个信息类，这些信息类被添加到 NtQuerySystemInformation API 调用中，并报告 Windows 内核所看到的数据。 微软现已发布官方 PowerShell Cmdlet 模块，这是获取该信息的推荐和支持方式...
CVE-2026-40369
This is a rewrite and summary of VoidSec’s public technical analysis of CVE-2026-40369, with an added flowchart and defensive notes for my own understanding. All core technical details come from his research. I did not perform independent reverse engineering on this bug. CVE-2026-40369: Defensive...
Exploit for CVE-2026-40369
CVE-2026-40369: Arbitrary Kernel Address Increment via NtQuery...
Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Microsoft
CVE-2024-30090 - LPE PoC CVE-2024-30090https://msrc.mic...
Microsoft CLIPSP.SYS License Update out-of-bounds read vulnerability
Talos Vulnerability Report TALOS-2024-1988 Microsoft CLIPSP.SYS License Update out-of-bounds read vulnerability August 13, 2024 CVE Number None SUMMARY An out-of-bounds read vulnerability exists in the License Update functionality of Microsoft CLIPSP.SYS 10.0.22621 Build 22621. A specially crafte...
Microsoft Windows CLIPSP.SYS License Update Field Type 0xCC out-of-bounds read vulnerability
Talos Vulnerability Report TALOS-2024-1971 Microsoft Windows CLIPSP.SYS License Update Field Type 0xCC out-of-bounds read vulnerability August 13, 2024 CVE Number None SUMMARY An out-of-bounds read vulnerability exists in the License Update Field Type 0xCC functionality of Microsoft Windows...
Microsoft Windows CLIPSP.SYS License Update Field Type 0xD3 out-of-bounds read vulnerability
Talos Vulnerability Report TALOS-2024-1970 Microsoft Windows CLIPSP.SYS License Update Field Type 0xD3 out-of-bounds read vulnerability August 13, 2024 CVE Number None SUMMARY An out-of-bounds read vulnerability exists in the License Update Field Type 0xD3 functionality of Microsoft Windows...
Microsoft Windows CLIPSP.SYS License Update Field Type 0xC9 out-of-bounds read vulnerability
Talos Vulnerability Report TALOS-2024-1968 Microsoft Windows CLIPSP.SYS License Update Field Type 0xC9 out-of-bounds read vulnerability August 13, 2024 CVE Number CVE-2024-38062 SUMMARY An out-of-bounds read vulnerability exists in the License Update Field Type 0xC9 functionality of Microsoft...
Microsoft Windows CLIPSP.SYS License Update Field Type 0x20 out-of-bounds read vulnerability
Talos Vulnerability Report TALOS-2024-1969 Microsoft Windows CLIPSP.SYS License Update Field Type 0x20 out-of-bounds read vulnerability August 13, 2024 CVE Number CVE-2024-38187 SUMMARY An out-of-bounds read vulnerability exists in the License Update Field Type 0x20 functionality of Microsoft...
Microsoft CLIPSP.SYS License update out-of-bounds read vulnerability
Talos Vulnerability Report TALOS-2024-1965 Microsoft CLIPSP.SYS License update out-of-bounds read vulnerability August 13, 2024 CVE Number CVE-2024-38185 SUMMARY Multiple out-of-bounds read vulnerabilities exists in the License update functionality of Microsoft CLIPSP.SYS 10.0.22621 Build 22621,...
Microsoft CLIPSP.SYS License update signature check bypass vulnerability
Talos Vulnerability Report TALOS-2024-1964 Microsoft CLIPSP.SYS License update signature check bypass vulnerability August 13, 2024 CVE Number CVE-2024-38184 SUMMARY A signature check bypass vulnerability exists in the License update functionality of Microsoft CLIPSP.SYS 10.0.22621 Build 22621,...
Microsoft CLIPSP.SYS License update privilege escalation vulnerability
Talos Vulnerability Report TALOS-2024-1966 Microsoft CLIPSP.SYS License update privilege escalation vulnerability August 13, 2024 CVE Number CVE-2024-38186 SUMMARY A privilege escalation vulnerability exists in the License update functionality of Microsoft CLIPSP.SYS 10.0.22621 Build 22621,...
Exploit for Integer Overflow or Wraparound in Microsoft
CVE-2024-20698 About this vulnerability: https://msrc.microsof...
CVE-2023-21768
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability...
CVE-2021-31955
Windows Kernel Information Disclosure Vulnerability Recent assessments: gwillcox-r7 at June 17, 2021 3:23pm UTC reported: Ah good old NtQuerySystemInformation strikes again, never quite going out of style : In this case CVE-2021-31955 is an information disclosure in good old ntoskrnl.exe, aka the...
DELL dbutil_2_3.sys 2.3 Arbitrary Write / Privilege Escalation
Exploit Title: DELL dbutil23.sys 2.3 - Arbitrary Write to Local Privilege Escalation LPE Date: 10/05/2021 Exploit Author: Paolo Stagno aka VoidSec Version: include include include include define IOCTLCODE 0x9B0C1EC8 // IOCTLCODE value, used to reach the vulnerable function taken from IDA define...