141 matches found
CVE-2023-28218
报告 CVE-2023-28218 漏洞概述 导致 Windows 内核权限提升的漏洞。该漏洞出现在驱动程序 Windows Ancillary Function Driver for WinSock AFD.sys 中。该漏洞在 2023 年 4 月 11 日的补丁中修复。CVSS 评分为 3.1，为 7.0 / 6.1，被评为 Important。 漏洞描述 漏洞类型：Double fetch 和 Integer overflow 导致 pool overflow。 漏洞发生在函数 Afd!AfdComputeCMSGLength 和 Afd!AfdCopyCMSGBuffer 中。...
CVE-2023-36424
信息 ============== Windows 内核池（clfs.sys）损坏权限提升。（CVE-2023-36424） 本仓库包含技术分析与有效利用代码。 作者：Nassim Asrir @p1k4l4 || https://www.linkedin.com/in/nassim-asrir-b73a57122/ 漏洞 ================ clfs.sys 微过滤器驱动程序中存在池溢出。相关信息可参阅： 1 -...
Pool-Overflow-CVE-2021-31956
池溢出-CVE-2021-31956...
CVE-2025-21333-POC
CVE-2025-21333-POC 利用 vkrnlintvsp.sys 中的 CVE-2025-21333 的概念验证（不太可靠，请参阅“要求与限制”部分）。参考章节中提供了一些非常有用的资源，适合想要研究该漏洞的人。 漏洞及利用的详细分析可见此处。 该漏洞已被检测到被威胁行为者积极利用。 已在 Windows 11 23h2 上测试。 也可能在 Windows 11 24h2 上工作，但我没有测试。 以下是用于测试 POC 的 ntoskrnl.exe 和 vkrnlintvsp.sys 的哈希值。 PS C:\Windows\System32\drivers get-fileha...
Exploit-CVE-2017-6008
Exploit-CVE-2017-6008 CVE-2017-6008 是 HitmanPro 扫描器中的一个漏洞，通过利用内核池缓冲区溢出可实现权限提升。 此处提供的利用程序采用了 Tarjei Mandt 的论文 中描述的配额进程指针覆盖攻击技术。 此外，该利用程序还使用了我的 Pool sprayer 库。 你可以在这里找到关于 Windows 7 利用的详细论文。 Windows 10 版本 此版本利用了 hitmanpro37.sys 驱动中的另一个漏洞——越界读取，我们利用该漏洞泄漏了池 Cookie。 这一泄漏使我们能够在 Windows 10 上实施完全相同的攻击。...
CVE-2016-3309_Reloaded
内核利用案例研究 - Win10 x64 RS2 上的“野性”池溢出（CVE-2016-3309 Reloaded） 这个 Github 仓库包含针对近期已修补的 win32kfull!bFill 漏洞的利用程序。执行 Palette 或 Bitmap 利用程序将赋予你在受影响系统上的 SYSTEM 权限。这些利用程序应该可以在安装了 Creators Update、版本号为 15063.540 的 Windows 10 x64 上正常工作（这是微软九月更新发布之前最新的 Win10 版本）。 该 Visual Studio 解决方案包含三个利用程序：...
Windows-Kernel-Exploitation
1. Non-Paged Pool Overflow Exploitation with Named Pipes Techniques based on named pipes for pool overflow exploitation demonstrated on CVE-2020-17087 and an off-by-one overflow 2. Segment Heap VS Allocator Metadata Abuse Techniques for turning a potentially limited write primitive eg a pool...
CVE-2026-16174 Netskope Endpoint DLP Driver Integer Overflow Leading to Kernel Pool Overflow
Netskope was notified about a potential gap in Netskope Endpoint DLP EPDLP running on Windows systems. Successful exploitation of the gap could potentially allow a privileged user to send a crafted message to the EPDLP process port to trigger an integer overflow, leading to memory corruption...
CVE-2026-16174 Netskope Endpoint DLP Driver Integer Overflow Leading to Kernel Pool Overflow
Netskope was notified about a potential gap in Netskope Endpoint DLP EPDLP running on Windows systems. Successful exploitation of the gap could potentially allow a privileged user to send a crafted message to the EPDLP process port to trigger an integer overflow, leading to memory corruption...
Windows-Non-Paged-Pool-Overflow-Exploitation
Índice Índice Introdução Introdução a Named Pipes Exploração Espalhamento do pool não paginado Divulgação de memória/Leitura arbitrária Controle completo sobre os dados de transbordo Controle limitado sobre os dados de transbordo Escrita arbitrária Liberação arbitrária de objetos...
SecureAgeExploit
SecureAge Responsible Disclosure PoCs This repository contain...
CVE-2025-13032
Double fetch in sandbox kernel driver in Avast/AVG Antivirus 25.3 on windows allows local attacker to escalate privelages via pool overflow...
EUVD-2025-93542
Double fetch in sandbox kernel driver in Avast/AVG Antivirus 25.3 on windows allows local attacker to escalate privelages via pool overflow...
CVE-2025-13032
Double fetch in sandbox kernel driver in Avast/AVG Antivirus 25.3 on windows allows local attacker to escalate privelages via pool overflow...
CVE-2025-13032
Double fetch in sandbox kernel driver in Avast/AVG Antivirus 25.3 on windows allows local attacker to escalate privelages via pool overflow...
CVE-2025-13032
Double fetch in sandbox kernel driver in Avast/AVG Antivirus 25.3 on windows allows local attacker to escalate privelages via pool overflow...
CVE-2025-13032
Double fetch in sandbox kernel driver in Avast/AVG Antivirus 25.3 on windows allows local attacker to escalate privelages via pool overflow...
CVE-2025-13032
CVE-2025-13032 affects Avast/AVG Antivirus on Windows prior to version 25.3. A double-fetch race condition in the sandbox kernel driver can allow a local attacker to escalate privileges via a pool overflow. Public sources in connected documents corroborate a kernel-driver vulnerability leading to...
Gen Digital Antivirus 安全漏洞
Gen Digital Antivirus is an antivirus software from Gen Digital, Inc. A security vulnerability exists in Gen Digital Antivirus versions prior to 25.3, which stems from a double-acquisition issue in the Windows Sandbox kernel driver that could lead to a local attacker achieving elevation of...
PT-2025-46368
Name of the Vulnerable Software and Affected Versions Avast/AVG Antivirus versions prior to 25.3 Description A double fetch race condition exists in the Avast/AVG kernel sandbox driver on Windows. This condition allows a local attacker to escalate privileges through a pool overflow. The issue...