loldrivers-client

LOLDrivers-client The OG, blazingly fast , zero dependencies client for LOLDrivers by MagicSword. Scan your Windows computer for known vulnerable or malicious drivers. Installation Command Line Copy and paste the command below into a PowerShell terminal. This does not require an elevated...

WinDriver-EXP

PoC Repository for Vulnerable Windows Drivers This repository includes PoC exploits for vulnerabilities in Windows drivers, showcasing flaws that can result in privilege escalation, arbitrary code execution, or other security risks. Intended for research and education only. POCs Vulnerability| CV...

LOLDrivers

LOLDrivers - Living Off The Land Drivers 🚗💨 Welcome to LOLDrivers Living Off The Land Drivers, an exciting open-source project that brings together vulnerable, malicious, and known malicious Windows drivers in one comprehensive repository. Our mission is to empower organizations of all sizes with...

HolyGrail

HolyGrail A BYOVD hunter for finding the HolyGrail driver - Windows drivers suitable for BYOVD. Install git clone https://github.com/BlackSnufkin/HolyGrail cd HolyGrail cargo build --release Quick start HolyGrail.exe -d "C:\path\to\driver.sys" Add JSON output, custom output dir, and policy dir if...

CVE-2026-105960

The PEAK-System PCAN Windows drivers are affected by a vulnerability involving the improper handling of length parameter inconsistency (CWE-130). The driver fails to sufficiently cap a variable-length receive-record copy to the actual caller-supplied output length, instead using a requested or qu...

CVE-2026-105960 HMS Networks PEAK-System PCAN Windows drivers Improper Handling of Length Parameter Inconsistency

PEAK-System PCAN contains a vulnerable operation involving a variable-length receive-record copy. The driver uses a requested or queued record count without sufficiently capping the copy to the actual caller-supplied output length...

CVE-2026-105960 HMS Networks PEAK-System PCAN Windows drivers Improper Handling of Length Parameter Inconsistency

PEAK-System PCAN contains a vulnerable operation involving a variable-length receive-record copy. The driver uses a requested or queued record count without sufficiently capping the copy to the actual caller-supplied output length...

CVE-2026-110322

The HMS Networks PEAK-System PCAN Windows drivers are vulnerable to an untrusted pointer dereference within the PCAN type 0x4030 processing path . The flaw occurs because the driver fails to validate a selected or returned object pointer before dereferencing fixed fields during post-processing. T...

CVE-2026-110322 HMS Networks PEAK-System PCAN Windows drivers Untrusted Pointer Dereference

The PEAK-System PCAN type 0x4030 processing path fails to validate a selected/returned object pointer before dereferencing fixed fields during post-processing...

CVE-2026-110322 HMS Networks PEAK-System PCAN Windows drivers Untrusted Pointer Dereference

The PEAK-System PCAN type 0x4030 processing path fails to validate a selected/returned object pointer before dereferencing fixed fields during post-processing...

CVE-2026-103672

The PEAK-System PCAN Windows drivers from HMS Networks are vulnerable to an Improper Validation of Array Index (CWE-129). The vulnerability exists because the PCAN parser indexes a length table using attacker-controlled DLC without enforcing the required bound of DLC

CVE-2026-103672 HMS Networks PEAK-System PCAN Windows drivers Improper Validation of Array Index

The PEAK-System PCAN parser indexes a length table using attacker-controlled DLC without enforcing DLC = 0x0f, then copies attacker payload from record+0x1c into a fixed-size stack destination...

CVE-2026-103672 HMS Networks PEAK-System PCAN Windows drivers Improper Validation of Array Index

The PEAK-System PCAN parser indexes a length table using attacker-controlled DLC without enforcing DLC = 0x0f, then copies attacker payload from record+0x1c into a fixed-size stack destination...

CVE-2026-101103 HMS Networks PEAK-System PCAN Windows drivers Classic Buffer Overflow

The PEAK-System PCAN diagnostic call did not validate that the caller-supplied output buffer was large enough to hold the output record...

CVE-2026-101103

The PEAK-System PCAN Windows drivers are vulnerable to a classic buffer overflow (CWE-120) within the diagnostic call. The root cause is a failure to validate that the caller-supplied output buffer is large enough to accommodate the output record. This vulnerability can lead to a high availabilit...

CVE-2026-101103 HMS Networks PEAK-System PCAN Windows drivers Classic Buffer Overflow

The PEAK-System PCAN diagnostic call did not validate that the caller-supplied output buffer was large enough to hold the output record...

CVE-2026-109576 HMS Networks PEAK-System PCAN Windows drivers Out-of-bounds Write

The parser in PEAK-System PCAN driver correctly detected the malformed record, but the loop iterating the record list advanced its processed-bytes counter even when a record had been rejected as invalid...

CVE-2026-109576 HMS Networks PEAK-System PCAN Windows drivers Out-of-bounds Write

The parser in PEAK-System PCAN driver correctly detected the malformed record, but the loop iterating the record list advanced its processed-bytes counter even when a record had been rejected as invalid...

CVE-2026-109576

The PEAK-System PCAN Windows drivers are vulnerable to an Out-of-bounds Write (CWE-787) due to a logic error in the parser. While the parser correctly identifies malformed records, the loop iterating through the record list incorrectly advances the processed-bytes counter even when a record is re...

HMS Networks PEAK-System PCAN Windows drivers

ADVISORY SUMMARY Successful exploitation of these vulnerabilities could crash the Windows kernel. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities. Minimize network exposure for all control system devices and/or...