FortiClient NDIS Miniport Driver Null Pointer Dereference

There is a Null pointer dereference in the NDIS Miniport drivers in FortiClient on Windows, which may be leveraged by an unprivileged user to cause a Denial of Service BSOD...

CVE-2018-20404

ETKE900.sys, a SmartETK driver for VIA Technologies EPIA-E900 system board, is vulnerable to denial of service attack via IOCTL 0x9C402048, which calls memmove and constantly fails on an arbitrary uncontrollable address, resulting in an eternal hang or a BSoD...

Code injection

ETKE900.sys, a SmartETK driver for VIA Technologies EPIA-E900 system board, is vulnerable to denial of service attack via IOCTL 0x9C402048, which calls memmove and constantly fails on an arbitrary uncontrollable address, resulting in an eternal hang or a BSoD...

CVE-2018-20404

CVE-2018-20404 affects the ETK_E900.sys SmartETK driver for VIA Technologies EPIA-E900 system boards. The vulnerability is triggered by IOCTL 0x9C402048, which calls memmove and may fail on an arbitrary, uncontrollable address, leading to an eternal hang or a blue screen (DoS). Exploitation detai...

CVE-2018-20404

ETKE900.sys, a SmartETK driver for VIA Technologies EPIA-E900 system board, is vulnerable to denial of service attack via IOCTL 0x9C402048, which calls memmove and constantly fails on an arbitrary uncontrollable address, resulting in an eternal hang or a BSoD...

CVE-2018-20029

The nxfs.sys driver in the DokanFS library 0.6.0 in NoMachine before 6.4.6 on Windows 10 allows local users to cause a denial of service BSOD because uninitialized memory can be read...

CVE-2018-20029

CVE-2018-20029 affects NoMachine for Windows with the DokanFS library (version 0.6.0) prior to 6.4.6. The nxfs.sys driver reads uninitialized memory, enabling local users to trigger a denial of service (BSOD). Affected component: DokanFS filesystem library used by NoMachine on Windows 10. Root ca...

Google Chrome 67, 68 and 69 Object.create exploit

This modules exploits a type confusion in Google Chromes JIT compiler. The Object.create operation can be used to cause a type confusion between a PropertyArray and a NameDictionary. The payload is executed within the rwx region of the sandboxed renderer process. This module can target the render...

CVE-2018-3669

Intel advisory INTEL-SA-00177 documents CVE-2018-3669 as a denial-of-service/BSoD issue in ibtfltcoex.sys for Intel Centrino Wireless-N and Centrino Advanced-N Bluetooth adapters. Vulnerability: unauthenticated attacker could send a malformed L2CAP Connection Request to the Intel Bluetooth device...

How to use Citrix App Layering with Fixed IP Addresses

In App Layering, the ELM needs to be able to determine which NIC device is the "active" NIC. The ELM must determine the active NIC in orderto properly merge network instances and services from different layers, howeverthere's no flag in the registry that identifies the NIC that will be used to...

CVE-2018-15499

GEAR Software products that include GEARAspiWDM.sys, 2.2.5.0, allow local users to cause a denial of service Race Condition and BSoD on Windows by not checking that user-mode memory is available right before writing to it. A check is only performed at the beginning of a long subroutine...

Race condition

GEAR Software products that include GEARAspiWDM.sys, 2.2.5.0, allow local users to cause a denial of service Race Condition and BSoD on Windows by not checking that user-mode memory is available right before writing to it. A check is only performed at the beginning of a long subroutine...

CVE-2018-15499

GEAR Software products that include GEARAspiWDM.sys, 2.2.5.0, allow local users to cause a denial of service Race Condition and BSoD on Windows by not checking that user-mode memory is available right before writing to it. A check is only performed at the beginning of a long subroutine...

CVE-2018-15499

CVE-2018-15499 affects GEAR Software products that include GEARAspiWDM.sys (2.2.5.0). The issue is a denial-of-service vulnerability caused by not validating user‑mode memory availability before writing to it; a memory validity check is only performed at the start of a long subroutine. The result...

Microsoft Windows Kernel - win32k!NtUserConsoleControl Denial of Service PoC Exploit

Exploit for windows platform in category dos / poc Exploit Title: Microsoft Windows Kernel - 'win32k!NtUserConsoleControl' Denial of Service PoC Author: vportal Date: 2018-07-27 Vendor homepage: http://www.microsoft.com Version: Windows 7 x86 Tested on: Windows 7 x86 CVE: N/A It is possible to...

Microsoft Windows Kernel win32k!NtUserConsoleControl Denial Of Service

Exploit Title: Microsoft Windows Kernel - 'win32k!NtUserConsoleControl' Denial of Service PoC Author: vportal Date: 2018-07-27 Vendor homepage: http://www.microsoft.com Version: Windows 7 x86 Tested on: Windows 7 x86 CVE: N/A It is possible to trigger a BSOD caused by a Null pointer deference whe...

Microsoft Windows Kernel - win32k!NtUserConsoleControl Denial of Service (PoC)

Microsoft Windows Kernel - win32k!NtUserConsoleControl Denial of Service PoC / Exploit Title: Microsoft Windows Kernel - 'win32k!NtUserConsoleControl' Denial of Service PoC Author: vportal Date: 2018-07-27 Vendor homepage: http://www.microsoft.com Version: Windows 7 x86 Tested on: Windows 7 x86...

Microsoft Windows Kernel - 'win32k!NtUserConsoleControl' Denial of Service (PoC)

/ Exploit Title: Microsoft Windows Kernel - 'win32k!NtUserConsoleControl' Denial of Service PoC Author: vportal Date: 2018-07-27 Vendor homepage: http://www.microsoft.com Version: Windows 7 x86 Tested on: Windows 7 x86 CVE: N/A It is possible to trigger a BSOD caused by a Null pointer deference...

CVE-2018-10098

In MicroWorld eScan Internet Security Suite for Business 14.0.1400.2029, the driver econceal.sys accepts a 0x830020E0 IOCTL to .\ oken/econceal which can be triggered by a non-privileged user to cause a denial of service (BSOD). This is a local vulnerability with the CVE-2018-10098 entry. The NVD...

ISS For Business 14.0.1400.2029 Blue Screen Of Death Vulnerability

In MicroWorld eScan Internet Security Suite ISS for Business version 14.0.1400.2029, the driver econceal.sys allows a non-privileged user to send a 0x830020E0 IOCTL request to \.\econceal to cause a denial of service BSOD. ===== Tempest Security Intelligence - ADV-24/2018 === eScan ISS for...