RUSTSEC-2021-0007 `Frame::copy_from_raw_parts` can lead to segfault without `unsafe`

fn Frame::copyfromrawparts is a safe API that can take a raw pointer and dereference it. It is possible to read arbitrary memory address with an arbitrarily fed pointer. This allows the safe API to access & read arbitrary address in memory. Feeding an invalid memory address pointer to the API may...

Microsoft Windows - Windows Error Reporting Local Privilege Escalation Exploit

Exploit for windows platform in category local exploits Microsoft Windows - Windows Error Reporting Local Privilege Escalation Exploit Make sure to copy the file report.wer found in the folder PoC-Files in the same folder as the executable before running it... I guess I could have included it as ...

Microsoft Windows - Windows Error Reporting Local Privilege Escalation

Microsoft Windows - Windows Error Reporting Local Privilege Escalation Make sure to copy the file report.wer found in the folder PoC-Files in the same folder as the executable before running it... I guess I could have included it as a resource in the exe.. but whatever. Example:...

March 13, 2018—KB4088782 (OS Build 15063.966 and 15063.968)

March 13, 2018—KB4088782 OS Build 15063.966 and 15063.968 Applies To Windows 10, version 1703, all editions Note The release also contains updates for Windows 10 Mobile OS Build 15063.968 released on March 19, 2018. Improvements and fixes This update includes quality improvements. No new operatin...

March 13, 2018—KB4088786 (OS Build 10240.17797)

March 13, 2018—KB4088786 OS Build 10240.17797 Applies To Windows 10 Improvements and fixes This update includes quality improvements. No new operating system features are being introduced in this update. Key changes include: Addresses issue with printing XML documents with Internet Explorer and...

Preemptive Protection against LizaMoon - Mass SQL Injection Attacks

LizaMoon is a mass SQL code injection attack, where a Web application vulnerability is exploited to inject malicious code into affected websites. If a Web surfer visits an infested site, he will be redirected to an alternate website that tries to install a rogue anti-malware software. This...

Multiple Vendor Anti-Virus Magic Byte Detection Evasion

Anti-Virus AV software is meant to search for known viruses embedded in accessed or transferred files. The products are also known as virus scanners. Most virus scanners use a database of known binary patterns of viruses in order to identify trojans and other malware. The number of recognizable...