190 matches found
CVE-2024-26229
CVE-2024-26229 Windows CSC 서비스 권한 상승 취약점. 프로그램이 버퍼에 처리 능력을 초과하는 데이터를 쓸 때 힙 기반 버퍼 오버플로우가 발생하여, 남는 데이터가 인접 메모리 영역으로 넘쳐흐릅니다. 이 오버플로우는 메모리를 손상시키고 공격자가 임의 코드를 실행하거나 시스템에 무단 액세스할 수 있게 만듭니다. 본질적으로, 공격자는 오버플로우를 유발하는 악성 코드나 입력을 작성하여 영향을 받는 시스템을 제어하고, 임의 명령을 실행하거나, 악성 소프트웨어를 설치하거나, 민감한 데이터에 액세스할 수 있습니다...
cve-2024-26229
cve-2024-26229 CSC를 악용하는 현재는 구식인 Windows LPE 취약점의 Nim 버전입니다. 이는 교육 목적으로만 제공되며, 시스템/대상이 취약한지 여부를 확인하려면 패치 목록을 참조하십시오. https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-26229 사용법 컴파일 root@kitploit: Make sure you have the necessary nim libraries installed This will create a main.exe nim...
CVE-2024-26229-BOF
CVE-2024-26229 BOF CVE-2024-26229의 Beacon Object File 구현 — DKOM 토큰 탈취를 통한 Windows CSC 드라이버 로컬 권한 상승. RalfHacker/CVE-2024-26229-exploit을 기반으로 하여, Cobalt Strike BOF API를 지원하는 C2 프레임워크와 함께 사용할 수 있도록 DFR동적 함수 해석을 적용한 BOF로 변환했습니다. 작동 방식 1. NtCreateFile을 통해 \Device\Mup;Csc..을 열어 CSC 드라이버의 핸들을 얻습니다. 2...
CVE-2025-46018-CSC-Pay-Mobile-App-Payment-Authentication-Bypass
CVE-2025-46018 – CSC Pay 모바일 앱 결제 인증 우회 요약 CSC Pay 모바일 앱에서 결제 인증 우회 취약점 이 발견되었으며, 2.19.4 버전에 영향을 미칩니다. 이 결함으로 인해 공격자는 결제를 시작하고, 프로세스의 특정 시점에서 Bluetooth를 비활성화한 뒤 요금이 청구되지 않은 채 세탁기를 작동시킬 수 있었습니다. 이 문제는 책임 있는 공개 절차를 거쳐 공개되었으며, 현재 CVE-2025-46018 로 추적되고 있습니다. 영향을 받는 제품 제품 : CSC Pay 모바일 앱 버전 : 2.19.4...
Exploit for Heap-based Buffer Overflow in Microsoft
CVE-2024-26229 BOF Beacon Object File implementation of CVE-2...
Microsoft Windows CSC Service 访问控制错误漏洞
Microsoft Windows CSC Service is an application from Microsoft USA. that allows the use of network files while the local computer is offline. An access control error vulnerability exists in Microsoft Windows CSC Service. An attacker exploiting this vulnerability could gain access to sensitive...
CVE-2025-62466
Null pointer dereference in Windows Client-Side Caching CSC Service allows an authorized attacker to elevate privileges locally...
KB5071543: Windows 10 Version 1607 / Windows Server 2016 Security Update (December 2025)
The remote Windows host is missing security update 5071543. It is, therefore, affected by multiple vulnerabilities - Untrusted pointer dereference in Windows Routing and Remote Access Service RRAS allows an unauthorized attacker to execute code over a network. CVE-2025-62549 - Heap-based buffer...
KB5071505: Windows Server 2012 Security Update (December 2025)
The remote Windows host is missing security update 5071505. It is, therefore, affected by multiple vulnerabilities - Untrusted pointer dereference in Windows Routing and Remote Access Service RRAS allows an unauthorized attacker to execute code over a network. CVE-2025-62549 - Heap-based buffer...
Microsoft Windows CSC Service 代码问题漏洞
Microsoft Windows CSC Service is an application from Microsoft Corporation USA. It allows the use of network files while the local computer is offline. A code issue vulnerability exists in Microsoft Windows CSC Service. An attacker exploiting this vulnerability could elevate privileges. The...
KB5071503: Windows Server 2012 R2 Security Update (December 2025)
The remote Windows host is missing security update 5071503. It is, therefore, affected by multiple vulnerabilities - Untrusted pointer dereference in Windows Routing and Remote Access Service RRAS allows an unauthorized attacker to execute code over a network. CVE-2025-62549 - Heap-based buffer...
Barco ClickShare Devices Cross-site Scripting (CVE-2016-3150)
Cross-site scripting XSS vulnerability in wallpaper.php in the Base Unit in Barco ClickShare CSC-1 devices with firmware before 01.09.03, CSM-1 devices with firmware before 01.06.02, and CSE-200 devices with firmware before 01.03.02 allows remote attackers to inject arbitrary web script or HTML v...
Barco ClickShare Devices Exposure of Sensitive Information to an Unauthorized Actor (CVE-2016-3152)
Barco ClickShare CSC-1 devices with firmware before 01.09.03 allow remote attackers to obtain the root password by downloading and extracting the firmware image. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL...
Barco ClickShare Devices Arbitrary Code Execution (CVE-2016-3149)
Barco ClickShare CSC-1 devices with firmware before 01.09.03 and CSM-1 devices with firmware before 01.06.02 allow remote attackers to execute arbitrary code via unspecified vectors. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more...
Barco ClickShare Devices OS Command Injection (CVE-2017-9377)
A command injection was identified on Barco ClickShare Base Unit devices with CSM-1 firmware before 1.7.0.3 and CSC-1 firmware before 1.10.0.10. An attacker with access to the product's web API can exploit this vulnerability to completely compromise the vulnerable device. This plugin only works...
EUVD-2020-2256
Malware in sbrugna...
EUVD-2020-12363
Malware in sbrugna...
EUVD-2020-2258
Malware in sbrugna...