48 matches found
HITCON-2023-Demo-CVE-2023-20562
HITCON 2023 Demo CVE-2023-20562 Description This demonstration took place at HITCON 2023 in Taiwan. The demo highlights the exploitation of AMDCpuProfiler.sys within AMD μProf. By triggering an arbitrary write on the EPROCESS token, privilege escalation to SYSTEM level is achieved. Disabling the...
HITCON-2023-Demo-CVE-2023-20562
HITCON 2023 Demo CVE-2023-20562 Description This demonstration took place at HITCON 2023 in Taiwan. The demo highlights the exploitation of AMDCpuProfiler.sys within AMD μProf. By triggering an arbitrary write on the EPROCESS token, privilege escalation to SYSTEM level is achieved. Disabling the...
EUVD-2021-13140
Malware in sbrugna...
EUVD-2022-28760
Malicious code in bioql PyPI...
EUVD-2023-35652
Malicious code in bioql PyPI...
EUVD-2023-35677
Malicious code in bioql PyPI...
EUVD-2023-24735
Malicious code in bioql PyPI...
EUVD-2023-35660
Malicious code in bioql PyPI...
EUVD-2023-24740
Malicious code in bioql PyPI...
EUVD-2022-32171
Malicious code in bioql PyPI...
CVE-2023-31366
Improper input validation in AMD μProf could allow an attacker to perform a write to an invalid address, potentially resulting in denial of service...
CVE-2023-31366
Improper input validation in AMD μProf could allow an attacker to perform a write to an invalid address, potentially resulting in denial of service...
CVE-2023-31349
Incorrect default permissions in the AMD μProf installation directory could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution...
CVE-2023-31349
Incorrect default permissions in the AMD μProf installation directory could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution...
CVE-2023-31348
A DLL hijacking vulnerability in AMD μProf could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution...
CVE-2023-31341
Insufficient validation of the Input Output Control IOCTL input buffer in AMD μProf may allow an authenticated attacker to cause an out-of-bounds write, potentially causing a Windows® OS crash, resulting in denial of service...
CVE-2023-31341
Insufficient validation of the Input Output Control IOCTL input buffer in AMD μProf may allow an authenticated attacker to cause an out-of-bounds write, potentially causing a Windows® OS crash, resulting in denial of service...
PT-2024-12277
Name of the Vulnerable Software and Affected Versions AMD μProf affected versions not specified Description A DLL hijacking vulnerability in AMD μProf could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution. Recommendations At the moment, there i...
CVE-2023-31366: Improper Input Validation
Improper input validation in AMD μProf could allow an attacker to perform a write to an invalid address, potentially resulting in denial of service...
CVE-2023-31341: Improper Access Control
Insufficient validation of the Input Output Control IOCTL input buffer in AMD μProf may allow an authenticated attacker to cause an out-of-bounds write, potentially causing a Windows® OS crash, resulting in denial of service...