CVE-2018-20404

ETKE900.sys, a SmartETK driver for VIA Technologies EPIA-E900 system board, is vulnerable to denial of service attack via IOCTL 0x9C402048, which calls memmove and constantly fails on an arbitrary uncontrollable address, resulting in an eternal hang or a BSoD...

CVE-2018-20029

The nxfs.sys driver in the DokanFS library 0.6.0 in NoMachine before 6.4.6 on Windows 10 allows local users to cause a denial of service BSOD because uninitialized memory can be read...

CVE-2018-20029

CVE-2018-20029 affects NoMachine for Windows with the DokanFS library (version 0.6.0) prior to 6.4.6. The nxfs.sys driver reads uninitialized memory, enabling local users to trigger a denial of service (BSOD). Affected component: DokanFS filesystem library used by NoMachine on Windows 10. Root ca...

MS17-010 EternalBlue SMB Remote Windows Kernel Pool Corruption

This module is a port of the Equation Group ETERNALBLUE exploit, part of the FuzzBunch toolkit released by Shadow Brokers. There is a buffer overflow memmove operation in Srv!SrvOs2FeaToNt. The size is calculated in Srv!SrvOs2FeaListSizeToNt, with mathematical error where a DWORD is subtracted in...

CVE-2018-3669

Intel advisory INTEL-SA-00177 documents CVE-2018-3669 as a denial-of-service/BSoD issue in ibtfltcoex.sys for Intel Centrino Wireless-N and Centrino Advanced-N Bluetooth adapters. Vulnerability: unauthenticated attacker could send a malformed L2CAP Connection Request to the Intel Bluetooth device...

How to use Citrix App Layering with Fixed IP Addresses

In App Layering, the ELM needs to be able to determine which NIC device is the "active" NIC. The ELM must determine the active NIC in orderto properly merge network instances and services from different layers, howeverthere's no flag in the registry that identifies the NIC that will be used to...

CVE-2018-15499

GEAR Software products that include GEARAspiWDM.sys, 2.2.5.0, allow local users to cause a denial of service Race Condition and BSoD on Windows by not checking that user-mode memory is available right before writing to it. A check is only performed at the beginning of a long subroutine...

Race condition

GEAR Software products that include GEARAspiWDM.sys, 2.2.5.0, allow local users to cause a denial of service Race Condition and BSoD on Windows by not checking that user-mode memory is available right before writing to it. A check is only performed at the beginning of a long subroutine...

CVE-2018-15499

GEAR Software products that include GEARAspiWDM.sys, 2.2.5.0, allow local users to cause a denial of service Race Condition and BSoD on Windows by not checking that user-mode memory is available right before writing to it. A check is only performed at the beginning of a long subroutine...

CVE-2018-15499

CVE-2018-15499 affects GEAR Software products that include GEARAspiWDM.sys (2.2.5.0). The issue is a denial-of-service vulnerability caused by not validating user‑mode memory availability before writing to it; a memory validity check is only performed at the start of a long subroutine. The result...

Microsoft Windows Kernel - win32k!NtUserConsoleControl Denial of Service (PoC)

Microsoft Windows Kernel - win32k!NtUserConsoleControl Denial of Service PoC / Exploit Title: Microsoft Windows Kernel - 'win32k!NtUserConsoleControl' Denial of Service PoC Author: vportal Date: 2018-07-27 Vendor homepage: http://www.microsoft.com Version: Windows 7 x86 Tested on: Windows 7 x86...

Microsoft Windows Kernel win32k!NtUserConsoleControl Denial Of Service

Exploit Title: Microsoft Windows Kernel - 'win32k!NtUserConsoleControl' Denial of Service PoC Author: vportal Date: 2018-07-27 Vendor homepage: http://www.microsoft.com Version: Windows 7 x86 Tested on: Windows 7 x86 CVE: N/A It is possible to trigger a BSOD caused by a Null pointer deference whe...

Microsoft Windows Kernel - win32k!NtUserConsoleControl Denial of Service PoC Exploit

Exploit for windows platform in category dos / poc Exploit Title: Microsoft Windows Kernel - 'win32k!NtUserConsoleControl' Denial of Service PoC Author: vportal Date: 2018-07-27 Vendor homepage: http://www.microsoft.com Version: Windows 7 x86 Tested on: Windows 7 x86 CVE: N/A It is possible to...

Microsoft Windows Kernel - 'win32k!NtUserConsoleControl' Denial of Service (PoC)

/ Exploit Title: Microsoft Windows Kernel - 'win32k!NtUserConsoleControl' Denial of Service PoC Author: vportal Date: 2018-07-27 Vendor homepage: http://www.microsoft.com Version: Windows 7 x86 Tested on: Windows 7 x86 CVE: N/A It is possible to trigger a BSOD caused by a Null pointer deference...

CVE-2018-10098

In MicroWorld eScan Internet Security Suite for Business 14.0.1400.2029, the driver econceal.sys accepts a 0x830020E0 IOCTL to .\ oken/econceal which can be triggered by a non-privileged user to cause a denial of service (BSOD). This is a local vulnerability with the CVE-2018-10098 entry. The NVD...

ISS For Business 14.0.1400.2029 Blue Screen Of Death Vulnerability

In MicroWorld eScan Internet Security Suite ISS for Business version 14.0.1400.2029, the driver econceal.sys allows a non-privileged user to send a 0x830020E0 IOCTL request to \.\econceal to cause a denial of service BSOD. ===== Tempest Security Intelligence - ADV-24/2018 === eScan ISS for...

Microsoft Windows Kernel (win32k.sys) Local Denial Of Service Vulnerability

Microsoft Windows Kernel win32k.sys suffers from a local denial of service null pointer vulnerability in NtUserConsoleControl. It is possible to trigger a BSOD caused by a Null pointer deference when calling the system call NtUserConsoleControl with the following arguments: -...

Out-of-bounds

Improper restriction of write operations within the bounds of a memory buffer in snscore.sys in SoftControl/SafenSoft SysWatch, SoftControl/SafenSoft TPSecure, SoftControl/SafenSoft Enterprise Suite before version 4.4.1 allows local users to cause a denial of service BSOD or modify kernel-mode...

CVE-2018-5718

The CVE affects SafeN’Sec SoftControl/SafenSoft products: SysWatch, TPSecure, and Enterprise Suite, where snscore.sys allows improper restriction of write operations within memory buffer bounds. The root cause is buffer-boundary checks in snscore.sys, enabling a local attacker to cause a denial o...

CVE-2018-5718

Improper restriction of write operations within the bounds of a memory buffer in snscore.sys in SoftControl/SafenSoft SysWatch, SoftControl/SafenSoft TPSecure, SoftControl/SafenSoft Enterprise Suite before version 4.4.1 allows local users to cause a denial of service BSOD or modify kernel-mode...