546 matches found
MiniPlasma-Runner
MiniPlasma-Runner Modified version of Nightmare-Eclipse/MiniPlasma CVE-2020-17103 adapted for C2 usage. Original PoC runs from disk only. This version runs entirely from memory via execute-assembly, with a split-binary approach to avoid detection. Disclaimer This tool is provided for authorized...
Microsoft Windows Cloud Files Mini Filter Driver CldiStreamPrepareRequestForMoreProcessing Type Confusion vulnerability
Summary A type confusion vulnerability exists in the CldiStreamPrepareRequestForMoreProcessing functionality of Windows Cloud Files Mini Filter Driver versions: 10.0.26100.8457 WinBuild.160101.0800 and 10.0.26100.8655 WinBuild.160101.0800. A specially crafted sequence of Cloud Filter API calls ca...
miniplasma-advisory
MiniPlasma - Vulnerability Protection Advisory Technical mitigation advisory for the MiniPlasma variant of CVE-2020-17103 affecting the Windows Cloud Files Mini Filter Driver cldflt.sys. Authored by Rafael França - Microsoft Cybersecurity Architect CSA, Customer Success Unit CSU. Download...
CVE-2026-41091-PoC-Exploit
CVE-2026-41091 - RedSun SolarFlare - Microsoft Defender LPE Exploit Toolkit Legal Disclaimer & Responsible Use This tool is provided for educational and authorized penetration testing purposes only. The authors and contributors are not responsible for any misuse or damage caused by this software...
CVE-2026-83991-writeup-and-poc
CVE-2026-83991: superseding a file that the caller cannot delete Microsoft awarded me a bounty of $1,000 under the Windows Insider Preview Bounty Program. I kept these lines next to each other because separating them makes the bug look more complicated than it is: CreateFileW, GENERICWRITE error ...
CVE-2026-112810
Time-of-check time-of-use toctou race condition in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally...
CVE-2026-112803
Improper access control in Windows Cloud Files Mini Filter Driver allows an authorized attacker to disclose information locally...
CVE-2026-112763
Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally...
CVE-2026-105569
Out-of-bounds read in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally...
CVE-2026-119974
A time-of-check time-of-use (TOCTOU) race condition exists in the Windows Cloud Files Mini Filter Driver . This vulnerability allows an authorized attacker to achieve local privilege escalation . Remediation is provided via Microsoft security updates, such as KB5132043 for Windows 11 (versions 26...
EUVD-2026-122464
Time-of-check time-of-use toctou race condition in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally...
EUVD-2026-122049
Out-of-bounds read in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally...
CVE-2026-105569
An out-of-bounds read vulnerability exists in the Windows Cloud Files Mini Filter Driver . This flaw allows an authorized attacker to perform a local privilege escalation . While the documents confirm the vulnerability exists and provide a CVSS score of 7.8 (High) , specific technical details reg...
CVE-2026-112810
A Time-of-check time-of-use (TOCTOU) race condition exists in the Windows Cloud Files Mini Filter Driver . This vulnerability allows an authorized attacker to achieve local privilege escalation . No specific exploit details are provided in the documentation, but the issue has been addressed in se...
EUVD-2026-121884
Time-of-check time-of-use toctou race condition in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally...
CVE-2026-112803
A vulnerability exists in the Windows Cloud Files Mini Filter Driver due to improper access control . This flaw allows an authorized attacker to perform a local information disclosure , potentially revealing sensitive data. Remediation is available through official security updates, such as Hotpa...
EUVD-2026-121877
Improper access control in Windows Cloud Files Mini Filter Driver allows an authorized attacker to disclose information locally...
EUVD-2026-121858
Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally...
CVE-2026-112763
A use after free vulnerability exists in the Windows Cloud Files Mini Filter Driver . This flaw allows an authorized attacker to achieve local privilege escalation . Remediation is available via official security updates; for example, the November 10, 2026 updates (such as KB5132043 or KB5132059 ...
