NT-AUTHORITY-SYSTEM-CONTEXT-RTCORE

NT-AUTHORITY-SYSTEM-CONTEXT-RTCORE Dieser Exploit baut CVE-2019-16098 nach und nutzt ihn aus. Die Schwachstelle befindet sich im Treiber Micro-Star MSI Afterburner 4.6.2.15658 auch bekannt als RTCore64.sys und RTCore32.sys und erlaubt jedem authentifizierten Benutzer, auf beliebigen Speicher,...

CVE-2022-22077

✅ Framework di sfruttamento di CVE-2022-22077 RTCore64.sys: Questo documento fornisce una panoramica completa del framework di sfruttamento di CVE-2022-22077, una sofisticata toolkit di attacco BYOVD Bring Your Own Vulnerable Driver che prende di mira la vulnerabilità del driver RTCore64.sys...

PE-Obfuscator

PE-Obfuscator Obfuscator di PE progettato con l'Evasion in mente, richiede privilegi di amministratore per caricare il driver RTCore64. Video: https://user-images.githubusercontent.com/123980007/234171901-c1eb735e-ceca-481d-9310-02ba30f6836b.mp4 L'Obfuscator : root@kitploit: - Ottiene un PE...

RTCore64-probe

Questo repository non contiene un README...

CVE-2019-16098

CVE-2019-16098 Questa CVE sfrutta il driver RTCore64.sys e crea un processo cmd.exe con privilegi di sistema copiando il token del processo System con uno dei processi cmd.exe a bassi privilegi. Un blog sull'approccio e la metodologia si trova qui...

PPLcontrol

PPLcontrol Descrizione Questo strumento ti permette di elencare i processi protetti, ottenere il livello di protezione di un processo specifico o impostare un livello di protezione arbitrario. Per maggiori informazioni, puoi leggere questo post del blog: Debugging Protected Processes. Utilizzo 1...

EUVD-2024-17210

Malicious code in bioql PyPI...

EUVD-2024-17195

Malicious code in bioql PyPI...

EUVD-2024-32318

Malicious code in bioql PyPI...

CVE-2024-3745

MSI Afterburner v4.6.6.16381 Beta 3 is vulnerable to an ACL Bypass vulnerability in the RTCore64.sys driver, which leads to triggering vulnerabilities like CVE-2024-1443 and CVE-2024-1460 from a low privileged user...

CVE-2024-3745 MSI Afterburner v4.6.6.16381 Beta 3 - ACL Bypass

MSI Afterburner v4.6.6.16381 Beta 3 is vulnerable to an ACL Bypass vulnerability in the RTCore64.sys driver, which leads to triggering vulnerabilities like CVE-2024-1443 and CVE-2024-1460 from a low privileged user...

CVE-2024-3745

MSI Afterburner v4.6.6.16381 Beta 3 is affected by an ACL Bypass in the RTCore64.sys driver, enabling escalation from a low-privilege user and potentially triggering CVE-2024-1443 and CVE-2024-1460. The CVE entry is supported by multiple sources (NVD, CVE lists) with CVSSv3.1 metrics showing LOCA...

CVE-2024-3745 MSI Afterburner v4.6.6.16381 Beta 3 - ACL Bypass

MSI Afterburner v4.6.6.16381 Beta 3 is vulnerable to an ACL Bypass vulnerability in the RTCore64.sys driver, which leads to triggering vulnerabilities like CVE-2024-1443 and CVE-2024-1460 from a low privileged user...

PT-2024-27563 · Msi · Msi Afterburner

Name of the Vulnerable Software and Affected Versions: MSI Afterburner version 4.6.6.16381 Beta 3 Description: The issue is related to an ACL Bypass vulnerability in the RTCore64.sys driver, which can lead to incorrect authorization and potentially compromise the local system. Recommendations:...

CVE-2024-1460

MSI Afterburner v4.6.5.16370 is vulnerable to a Kernel Memory Leak vulnerability by triggering the 0x80002040 IOCTL code of the RTCore64.sys driver. The handle to the driver can only be obtained from a high integrity process...

CVE-2024-1443

MSI Afterburner v4.6.5.16370 is vulnerable to a Denial of Service vulnerability by triggering the 0x80002000 IOCTL code of the RTCore64.sys driver. The handle to the driver can only be obtained from a high integrity process...

CVE-2024-1443

MSI Afterburner v4.6.5.16370 is vulnerable to a Denial of Service vulnerability by triggering the 0x80002000 IOCTL code of the RTCore64.sys driver. The handle to the driver can only be obtained from a high integrity process...

CVE-2024-1460

MSI Afterburner v4.6.5.16370 is vulnerable to a Kernel Memory Leak vulnerability by triggering the 0x80002040 IOCTL code of the RTCore64.sys driver. The handle to the driver can only be obtained from a high integrity process...

Memory corruption

MSI Afterburner v4.6.5.16370 is vulnerable to a Kernel Memory Leak vulnerability by triggering the 0x80002040 IOCTL code of the RTCore64.sys driver. The handle to the driver can only be obtained from a high integrity process...

Code injection

MSI Afterburner v4.6.5.16370 is vulnerable to a Denial of Service vulnerability by triggering the 0x80002000 IOCTL code of the RTCore64.sys driver. The handle to the driver can only be obtained from a high integrity process...