103 matches found
CVE-2015-1769
CVE-2015-1769 PoC para CVE-2015-1769 Archivo VHD para reproducir CVE-2015-1769. El VHD no contiene una carga útil real, solo notepad.exe. Al montar, inspeccione el registro del sistema para ver el error bloqueado informado si el parche más reciente está instalado. El script por lotes muestra cómo...
cve-2025-24985
cve-2025-24985 Calcular el número de clúster de un archivo VHD para detectar desbordamiento. Sectores de arranque compatibles: MBR GPT Uso root@kitploit: python -m cve202524985 -f Configuración Nix root@kitploit: With direnv: direnv allow Or Without direnv: nix develop Peotry WIP Docker WIP Tarea...
frostbyte
FrostByte Progolue: In the past few days I've been experimenting with the AppDomain manager injection technique had a decent success with it in my previous Red Team engagements against certain EDRs. Although, this is really good for initial access vector, I wanted to release a POC which will help...
libvhdi
libvhdi es una biblioteca para acceder al formato de imagen de disco duro virtual VHD. Información del proyecto: Estado: alpha Licencia: LGPL-3.0-or-later Formatos de lectura compatibles: Disco duro virtual versión 1 VHD Disco duro virtual versión 2 VHDX Tipos de imagen compatibles: Imagen de dis...
Volumiser
Volumiser Einführung Volumiser ist ein Befehlszeilenwerkzeug und eine interaktive Konsolen-GUI zum Auflisten, Durchsuchen und Extrahieren von Dateien aus gängigen Festplatten-Image-Formaten virtueller Maschinen. Das Werkzeug wurde entwickelt, um ein häufiges Problem zu lösen: Massive...
CVE-2026-59125
Use after free in Virtual Hard Disk VHD Miniport Driver allows an authorized attacker to elevate privileges locally...
CVE-2026-59125
Use after free in Virtual Hard Disk VHD Miniport Driver allows an authorized attacker to elevate privileges locally...
CVE-2026-59125 Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability
...
CVE-2026-59125
Use-after-free in the Virtual Hard Disk (VHD) Miniport Driver can allow an authorized local attacker to elevate privileges. The vulnerability is described as a local privilege escalation with high impact to confidentiality, integrity, and availability. The CVSS vector indicates LOCAL access, user...
EUVD-2026-56610
Use after free in Virtual Hard Disk VHD Miniport Driver allows an authorized attacker to elevate privileges locally...
CVE-2026-59125 Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability
...
Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability
Use after free in Virtual Hard Disk VHD Miniport Driver allows an authorized attacker to elevate privileges locally...
PT-2026-70405
Name of the Vulnerable Software and Affected Versions Virtual Hard Disk VHD Miniport Driver affected versions not specified Description A use-after-free issue exists in the Virtual Hard Disk VHD Miniport Driver. This allows an authorized attacker to elevate privileges locally on the system...
Command Injection
Overview Affected versions of this package are vulnerable to Command Injection via the Resize-VHD PowerShell command construction process. An attacker can execute arbitrary PowerShell commands with the privileges of the affected process by supplying a crafted VM image path containing malicious...
PowerShell Command Injection in Podman HyperV Machine
Summary A command injection vulnerability exists in Podman's HyperV machine backend. The VM image path is inserted into a PowerShell double-quoted string without sanitization, allowing $ subexpression injection. Affected Code File: pkg/machine/hyperv/stubber.go:647 go resize :=...
Command Injection
Overview Affected versions of this package are vulnerable to Command Injection via the Resize-VHD PowerShell command construction process. An attacker can execute arbitrary PowerShell commands with the privileges of the affected process by supplying a crafted VM image path containing malicious...
Command Injection
Overview Affected versions of this package are vulnerable to Command Injection via the Resize-VHD PowerShell command construction process. An attacker can execute arbitrary PowerShell commands with the privileges of the affected process by supplying a crafted VM image path containing malicious...
GHSA-HC8W-H2MF-HP59 PowerShell Command Injection in Podman HyperV Machine
Summary A command injection vulnerability exists in Podman's HyperV machine backend. The VM image path is inserted into a PowerShell double-quoted string without sanitization, allowing $ subexpression injection. Affected Code File: pkg/machine/hyperv/stubber.go:647 go resize :=...