CVE-2020-1337

CVE-2020-1337 CVE-2020-1337 es un bypass del parche de PrintDemon CVE-2020-1048 mediante un Directorio de Unión, creado para remediar una vulnerabilidad de Elevación de Privilegios EoP\Escalada Local de Privilegios LPE que afecta al Servicio de Cola de Impresión de Windows. La vulnerabilidad sí...

cve-2020-1337-poc

cve-2020-1337-poc poc para CVE-2020-1337 Elevación de privilegios de Windows Print Spooler Crédito para todos los investigadores que descubrieron este bug. Referencia: https://voidsec.com/cve-2020-1337-printdemon-is-dead-long-live-printdemon/ Código consultado de:...

CVE-2020-1048

CVE-2020-1048 Código de exploit POC para CVE-2020-1048 PrintDemon Sistemas vulnerables Todas las versiones de Windows mencionadas en el enlace son vulnerables: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1048 Pasos para reproducir 1. Cambie las variables gPortName ...

Exploit for Time-of-check Time-of-use (TOCTOU) Race Condition in Microsoft

cve-2020-1337-poc poc for CVE-2020-1337 Windows Print Spooler...

Exploit for Time-of-check Time-of-use (TOCTOU) Race Condition in Microsoft

PoC exploit for CVE-2020-1048. It is an exploit targeting a bina...

Exploit for Time-of-check Time-of-use (TOCTOU) Race Condition in Microsoft

CVE-2020-1337 CVE-2020-1337 is a bypass of PrintDemon...

Exploit for Incorrect Resource Transfer Between Spheres in Microsoft

CVE-2020-1048 POC exploit code for CVE-2020-1048PrintDemon...

A week in security (May 11 – May 17)

Last week on Malwarebytes Labs, we explained why RevenueWire has to pay $6.7 million to settle FTC charges, how CVSS works: characterizing and scoring vulnerabilities, and we talked about how and why hackers hit a major law firm with Sodinokibi ransomware. We also launched another episode of our...