NT-AUTHORITY-SYSTEM-CONTEXT-RTCORE

NT-AUTHORITY-SYSTEM-CONTEXT-RTCORE Este exploit reconstrói e explora o CVE-2019-16098 que está no driver Micro-Star MSI Afterburner 4.6.2.15658 também conhecido como RTCore64.sys e RTCore32.sys e permite que qualquer usuário autenticado leia e escreva em memória arbitrária, portas de E/S e MSRs. ...

CVE-2022-22077

✅ CVE-2022-22077 शोषण फ्रेमवर्क RTCore64.sys: यह दस्तावेज़ CVE-2022-22077 शोषण फ्रेमवर्क का एक व्यापक अवलोकन प्रदान करता है, जो RTCore64.sys ड्राइवर कमजोरी को लक्षित करने वाला एक परिष्कृत BYOVD अपना स्वयं का असुरक्षित ड्राइवर लाएँ आक्रमण टूलकिट है। यह फ्रेमवर्क शैक्षिक और सुरक्षा अनुसंधान...

CVE-2019-16098

CVE-2019-16098 يستغل هذا الثغرة CVE برنامج تشغيل RTCore64.sys وينشئ عملية cmd.exe بصلاحيات النظام عن طريق نسخ رمز token عملية System إلى إحدى عمليات cmd.exe ذات الصلاحيات المنخفضة. يمكن العثور على مدونة حول النهج والمنهجية هنا...

EUVD-2024-17210

Malicious code in bioql PyPI...

EUVD-2024-17195

Malicious code in bioql PyPI...

EUVD-2024-32318

Malicious code in bioql PyPI...

CVE-2024-3745

MSI Afterburner v4.6.6.16381 Beta 3 is vulnerable to an ACL Bypass vulnerability in the RTCore64.sys driver, which leads to triggering vulnerabilities like CVE-2024-1443 and CVE-2024-1460 from a low privileged user...

CVE-2024-3745 MSI Afterburner v4.6.6.16381 Beta 3 - ACL Bypass

MSI Afterburner v4.6.6.16381 Beta 3 is vulnerable to an ACL Bypass vulnerability in the RTCore64.sys driver, which leads to triggering vulnerabilities like CVE-2024-1443 and CVE-2024-1460 from a low privileged user...

CVE-2024-3745

MSI Afterburner v4.6.6.16381 Beta 3 is affected by an ACL Bypass in the RTCore64.sys driver, enabling escalation from a low-privilege user and potentially triggering CVE-2024-1443 and CVE-2024-1460. The CVE entry is supported by multiple sources (NVD, CVE lists) with CVSSv3.1 metrics showing LOCA...

CVE-2024-3745 MSI Afterburner v4.6.6.16381 Beta 3 - ACL Bypass

MSI Afterburner v4.6.6.16381 Beta 3 is vulnerable to an ACL Bypass vulnerability in the RTCore64.sys driver, which leads to triggering vulnerabilities like CVE-2024-1443 and CVE-2024-1460 from a low privileged user...

CVE-2024-1443

MSI Afterburner v4.6.5.16370 is vulnerable to a Denial of Service vulnerability by triggering the 0x80002000 IOCTL code of the RTCore64.sys driver. The handle to the driver can only be obtained from a high integrity process...

CVE-2024-1460

MSI Afterburner v4.6.5.16370 is vulnerable to a Kernel Memory Leak vulnerability by triggering the 0x80002040 IOCTL code of the RTCore64.sys driver. The handle to the driver can only be obtained from a high integrity process...

Memory corruption

MSI Afterburner v4.6.5.16370 is vulnerable to a Kernel Memory Leak vulnerability by triggering the 0x80002040 IOCTL code of the RTCore64.sys driver. The handle to the driver can only be obtained from a high integrity process...

Code injection

MSI Afterburner v4.6.5.16370 is vulnerable to a Denial of Service vulnerability by triggering the 0x80002000 IOCTL code of the RTCore64.sys driver. The handle to the driver can only be obtained from a high integrity process...

CVE-2024-1460 MSI Afterburner v4.6.5.16370 - Kernel Memory Leak

MSI Afterburner v4.6.5.16370 is vulnerable to a Kernel Memory Leak vulnerability by triggering the 0x80002040 IOCTL code of the RTCore64.sys driver. The handle to the driver can only be obtained from a high integrity process...

CVE-2024-1460 MSI Afterburner v4.6.5.16370 - Kernel Memory Leak

MSI Afterburner v4.6.5.16370 is vulnerable to a Kernel Memory Leak vulnerability by triggering the 0x80002040 IOCTL code of the RTCore64.sys driver. The handle to the driver can only be obtained from a high integrity process...

CVE-2024-1460

Summary: CVE-2024-1460 affects MSI Afterburner v4.6.5.16370 and is described as a kernel memory leak in RTCore64.sys triggered by IOCTL 0x80002040. The handle to RTCore64.sys must be obtained from a high-integrity process, constraining exploitability to local, high-privilege contexts. Technical d...

CVE-2024-1443 MSI Afterburner v4.6.5.16370 - Denial of Service

MSI Afterburner v4.6.5.16370 is vulnerable to a Denial of Service vulnerability by triggering the 0x80002000 IOCTL code of the RTCore64.sys driver. The handle to the driver can only be obtained from a high integrity process...

CVE-2024-1443 MSI Afterburner v4.6.5.16370 - Denial of Service

MSI Afterburner v4.6.5.16370 is vulnerable to a Denial of Service vulnerability by triggering the 0x80002000 IOCTL code of the RTCore64.sys driver. The handle to the driver can only be obtained from a high integrity process...

CVE-2024-1443

MSI Afterburner 4.6.5.16370 is vulnerable to a Denial of Service via the RTCore64.sys driver. The DoS can be triggered by calling IOCTL 0x80002000, and the driver handle can only be obtained from a high-integrity process. No exploitation details are provided in the supplied documents, and there i...