333 matches found
CVE-2022-30206
CVE-2022-30206 This is the PoC for CVE-2022-30206. Windows Print Spooler Elevation of Privilege Vulnerability. Introduction Perform the following operations to arbitrary file deletion： 1. Run the addprinter.exe to create a printer and set the SpoolDirectory in C:\Users\Public\tmp\1. 2. Run the...
CVE-2024-37726-MSI-Center-Local-Privilege-Escalation
CVE-2024-37726 MSI Center Local Privilege Escalation - Arbitrary File Overwrite Vulnerability Vulnerability Summary A local privilege escalation vulnerability on Windows OS has been identified in MSI Center versions = 2.0.36.0, which allows a low-privileged user to arbitrarily overwrite or delete...
CVE-2022-30206
CVE-2022-30206 This is the PoC for CVE-2022-30206. Introduction Perform the following operations to arbitrary file deletion： 1. Run the addprinter.exe to create a printer and set the SpoolDirectory in C:\Users\Public\tmp\1. 2. Run the FileLock.exe TargetFile to redirect .SHD file to TargetFile an...
CVE-2026-33825
🔨 CVE-2026-33825: BlueHammer Microsoft Defender Elevation of Privilege 📌 General Description The CVE-2026-33825 vulnerability, nicknamed "BlueHammer" , is a critical Local Privilege Escalation EoP flaw in the Microsoft Defender threat remediation engine. 🚨 Critical Impact: It allows a user with...
CVE-2026-112907
On Windows the soft locks "SoftFileLock", "MarkerSoftFileLock", "SoftFileLease", their async forms, and a "FileLock" that fell back to a soft lock read their marker by path. The marker is the lock file whose presence says a process holds the lock. Each "acquire" attempt that finds a marker opens ...
filelock: On Windows an oplock on a soft lock's marker holds SoftFileLock.acquire() past its timeout and blocks the stale break
On Windows the soft locks SoftFileLock, MarkerSoftFileLock, SoftFileLease, their async forms, and a FileLock that fell back to a soft lock read their marker by path. The marker is the lock file whose presence says a process holds the lock. Each acquire attempt that finds a marker opens it with...
GHSA-567Q-5QVW-PF92 filelock: On Windows an oplock on a soft lock's marker holds SoftFileLock.acquire() past its timeout and blocks the stale break
On Windows the soft locks SoftFileLock, MarkerSoftFileLock, SoftFileLease, their async forms, and a FileLock that fell back to a soft lock read their marker by path. The marker is the lock file whose presence says a process holds the lock. Each acquire attempt that finds a marker opens it with...
Improper Locking
Overview Affected versions of this package are vulnerable to Improper Locking via SoftFileLock.acquire on Windows, where a os.open call used to read a soft-lock marker file blocks indefinitely when another handle holds a Level 1 or batch oplock on that file and never acknowledges the break reques...
PT-2026-122458
On Windows the soft locks SoftFileLock, MarkerSoftFileLock, SoftFileLease, their async forms, and a FileLock that fell back to a soft lock read their marker by path. The marker is the lock file whose presence says a process holds the lock. Each acquire attempt that finds a marker opens it with...
PT-2026-122418
On Windows the soft locks SoftFileLock, MarkerSoftFileLock, SoftFileLease, their async forms, and a FileLock that fell back to a soft lock read their marker by path. The marker is the lock file whose presence says a process holds the lock. Each acquire attempt that finds a marker opens it with...
CVE-2026-90167
A flaw was found in ksmbd, the in-kernel SMB server for Linux. A race condition exists during the handling of oplock opportunistic locking close operations. This can allow a new oplock break owner to incorrectly overwrite internal state, leading to unexpected behavior or a denial of service. This...
Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15
In the Linux kernel, the following vulnerabilities have been resolved: smb/server: fixed a potential null-ptr-deref of leasectxinfo in smb2open A null-ptr-deref will occur when reqoplevel == SMB2OPLOCKLEVELLEASE and parseleasestate returns NULL. This issue was fixed by checking whether...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: smb: Client: Fixed a potential Use-after-Free UAF in isvalidoplockbreak. Skipped sessions that are being torn down status == SESEXITING to avoid UAF...
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix potential use-after-free in oplock/lease break ack If ksmbdiovpinrsp returns an error, a use-after-free may occur due to accessing opinfo-state and opinfoput, and ksmbdfdput being called twice...
Astra Linux – vulnerability in linux-6.1, linux-5.15
In the Linux kernel, the following vulnerability has been resolved: smb: client: fix use-after-free in cifsoplockbreak A race condition can occur in cifsoplockbreak leading to a use-after-free of the cinode structure when unmounting: cifsoplockbreak cifsFileInfoputcfile cifsFileInfoputfinal...
symboliclink-testing-tools
symboliclink-testing-tools c Google Inc. 2015 Sviluppato da James Forshaw Questa è una piccola suite di strumenti per testare vari tipi di collegamenti simbolici di Windows. È composta dai seguenti strumenti: BaitAndSwitch : Crea un collegamento simbolico e usa un OPLOCK per vincere una TOCTOU...
CVE-2026-97557
A flaw was found in the Linux kernel's Server Message Block SMB client. This flaw allows a remote or slow-responding SMB server to cause a Denial of Service DoS through a kernel crash. When handling opportunistic lock oplock break requests, the client can leak file reference counters if a new...
CVE-2026-97556
A flaw was found in the Linux kernel's SMB client. This vulnerability can lead to a denial of service DoS on systems using multi-user CIFS mount configurations. When processing an opportunistic lock oplock break, an error during tree link lookup prevents the client from releasing an acquired file...
PT-2026-98497
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A reference count leak occurs in the SMB client within the cifs queue oplock break function. The function takes a reference on the target file before queueing cifs oplock break, but the...
PT-2026-98496
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A reference count leak occurs in the SMB client when the cifs sb tlink function fails. This issue specifically affects configurations using the -o multiuser option. In these scenarios, t...