CVE-2025-62470

Questo non è un exploit, solo un POC root@kitploit: BUGCHECKCODE: 50 BUGCHECKP1: ffffc101f6bf91be BUGCHECKP2: 0 BUGCHECKP3: fffff8007e194409 BUGCHECKP4: 0 READADDRESS: ffffc101f6bf91be MMINTERNALCODE: 0 IMAGENAME: CLFS.SYS MODULENAME: CLFS FAULTINGMODULE: fffff8007e190000 CLFS PROCESSNAME:...

CVE

CVE Eine Sammlung von Proof-of-Concept-Exploit-Skripten, die vom STAR Labs-Team für verschiedene CVEs geschrieben wurden, die sie entdeckt haben oder die von anderen gefunden wurden. CVE-2026-53264 Ziel: Linux Kernel Version: CentOS 9-Kernel-Version 5.14.0-721 Exploit geschrieben von: Lee Jia Jie...

SOC335-CVE-2024-49138-Exploitation-Detected

Rilevamento dello sfruttamento di CVE-2024-49138 In questo progetto, ho esaminato un incidente di sicurezza simulato sulla piattaforma LetsDefend, in cui una macchina Windows è stata compromessa tramite lo sfruttamento di CVE-2024-49138, una vulnerabilità di escalation dei privilegi nel driver de...

CVE-2023-28252

CVE-2023-28252 CVE-2023-28252 CLFS Privilegieneskalations-Schwachstelle POC...

CVE-2023-28252

CVE-2023-28252 Il TL;DR per gli apprendimenti sulla vulnerabilità Windows CVE-2023-28252 Quindi questo weekend stavo facendo pratica con la macchina Aero su Hack The Box. La macchina è molto divertente da giocare quando puoi simulare un attacco del mondo reale a una macchina Windows 11. Dopo aver...

CVE-2022-24481-POC

CVE-2022-24481-POC TL;DR Dieses poc wurde aus dem Exploit SHA1:fec933b0c46366a1fb272bfaf82a8262597a8d75 zurückentwickelt und viele AV-Engines haben es als CVE-2022-24521 erkannt. Nach der Analyse stelle ich fest, dass es sich möglicherweise um den Exploit für CVE-2022-24481 handelt, weil...

CVE-2021-43224-POC

CVE-2021-43224-POC विंडोज कॉमन लॉग फ़ाइल सिस्टम ड्राइवर POC शायद CVE-2021-43226 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-43226 बस bsod !!! विंडोज 20H2 ver 19042.1387 पर परीक्षण किया गया...

CVE-2025-29824

🔥 ثغرة CVE-2025-29824 ذات اليوم الصفري 🔥 مرحبًا بك في قلب الفضاء الإلكتروني المظلم، حيث تنحني الحدود الأخلاقية تحت ثقل المعرفة المحرمة. يحتوي هذا المستودع على برهان إثبات المفهوم PoC لاستغلال CVE-2025-29824 ، وهي ثغرة من نوع use-after-free UAF في برنامج تشغيل نواة نظام ملفات السجل المشترك CLFS...

CLFS

Attacco CLFS - CVE-2023-28252 Dal febbraio 2022 è stato segnalato un nuovo ransomware che sembra utilizzare una vulnerabilità zero-day di Windows, secondo la ricerca condotta da Trend Micro. Ulteriori informazioni su questo ransomware sono disponibili a questo link. Secondo l'analisi di Kaspersky...

CVE-2023-36900

CVE-2023-36900 Informazioni su questa vulnerabilità: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36900. Relazione Pattern Imhex per estensione .blf Header con dichiarazione delle strutture CLFS Prova di concetto di Denial-of-Service Pattern Imhex per estensione .blf Prima: Dopo...

CVE-2025-29824

CVE-2025-29824 win1021h2190445608x64 win1123h2226315126x64 testclient Testprogramm monitorclfssys Treiber zur Überwachung aller IRP-Anfragen von CLFS poc Crash Blue-Screen-PoC LPE win10poc win11poc Grundlegende Kompilierungsinformationen Windows SDK-Version: 10.0 aktuell installierte Version...

letsdefend-cve-2024-49138-investigation

Indagine LetsDefend: CVE-2024-49138 🔍 Panoramica Simulazione pratica di indagine SOC e risposta agli incidenti usando LetsDefend, concentrata sullo sfruttamento reale di CVE-2024-49138 — una vulnerabilità di escalation dei privilegi nel driver CLFS di Windows. 📅 Dettagli dell'Evento ID Evento : 3...

CVE-2025-29824-Exploit

🚨 CVE-2025-29824 Exploit: Cadeia de Ransomware PipeMagic 📌 Visão Geral da Vulnerabilidade Crítica Falha de Escalação de Privilégio no CLFS do Windows → Sequestro de Privilégio SYSTEM Explorado em Ataques Ativos de Ransomware pelo Grupo de Ameaça Storm-2460 🖥️ Sistemas Afetados Expandir Lista de...

Windows Common Log File System Driver Elevation of Privilege Vulnerability

Time-of-check time-of-use toctou race condition in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally...

PT-2026-70490

Name of the Vulnerable Software and Affected Versions Windows Common Log File System Driver affected versions not specified Description A time-of-check time-of-use toctou race condition exists in the Windows Common Log File System Driver. This occurs when a system checks a condition such as a...

CVE-2026-40397

Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally...

Microsoft Windows Common Log File System Driver 数字错误漏洞

The Microsoft Windows Common Log File System Driver is a high-performance, general-purpose log file system API provided by Microsoft. It allows specialized client applications to utilize this subsystem, enabling multiple clients to share it for optimized log access. The Microsoft Windows Common L...

Exploit for Out-of-bounds Read in Microsoft

!CVEhttps://img.shields.io/badge/CVE-2025--60709-FF0000?styl...

CVE-2026-2636

This vulnerability is caused by a CWE‑159: "Improper Handling of Invalid Use of Special Elements" weakness, which leads to an unrecoverable inconsistency in the CLFS.sys driver. This condition forces a call to the KeBugCheckEx function, allowing an unprivileged user to trigger a system crash...

CVE-2026-2636 Denial of Service in Microsoft OS

This vulnerability is caused by a CWE‑159: "Improper Handling of Invalid Use of Special Elements" weakness, which leads to an unrecoverable inconsistency in the CLFS.sys driver. This condition forces a call to the KeBugCheckEx function, allowing an unprivileged user to trigger a system crash...