CallMeWin32kDriver

CallMeWin32kDriver Laden Sie Ihren Treiber wie win32k.sys Motivation Diese Funktion wurde anhand eines bestimmten PUBG-Cheat-Treibers analysiert. Was kann es tun? Schutz gegen direktes Dumping durch Anti-Rootkit-Tools MmCopyMemory umgehen Welt verstecken, ohne PG auszulösen Wie erkennt man es?...

VortexCry-Ransomware-Release

VortexCry-Ransomware VortexCry è un ransomware avanzato che utilizza iniezione di processo multi-stadio come Process Hollowing e APC Injection e caricamento di driver kernel tramite la vulnerabilità CVE-2019-16098. È in grado di crittografare file, distruggere le funzionalità di ripristino del...

masm32-kernel-programming

masm32-kernel-programming Repositório do Dreg para as suas próprias necessidades programação de kernel masm32, drivers, tutoriais, exemplos e ferramentas créditos Four-F Instruções baixe/clone este repositório execute masm32v11rinstall.exe clique na imagem de instalação terra instale o masm32 em...

HotLoad-Driver

अपने ड्राइवर को हॉट-लोड करें C++ का उपयोग करते हुए, यह प्रोजेक्ट Bsides Augusta में RAT वार्ता के लिए था। स्लाइड्स नीचे देखी जा सकती हैं और निष्पादन प्रवाह को समझने में अत्यंत सहायक हैं। इन दो विधियों के अलग-अलग प्रोजेक्ट हैं। डेमो / स्लाइड्स:...

GDRVLoader

GDRVLoader - Carregar Drivers Não Assinados Windows 10-11 Originalmente baseado em https://github.com/fengjixuchui/gdrv-loader mas com melhorias e suporte para as versões mais recentes do Windows. Funcionalidades Adicionadas Carregar drivers não assinados no Windows 10-11 sem ser detectado pelo...

CVE-2024-7479_CVE-2024-7481

CVE-2024-7479 & CVE-2024-7481 TeamViewer Elevação de Privilégio de Usuário para Kernel Este repositório contém a prova de conceito do exploit de uma vulnerabilidade no TeamViewer que permite que um usuário não privilegiado carregue um Driver de Kernel arbitrário no sistema. Gostaria de agradecer ...

breakcyserver

breakcyserver Vollständiger Beitrag unter: https://waawaa.github.io/ 1. Töte EDR-Dienste, indem du alle geöffneten Handles des EDR-Prozesses schließt. 2. Umgehe PPL, indem du einige Treiberfunktionen des Process Explorers missbrauchst. 3. Umgehe die ObRegisterCallbacks-Implementierung, indem du...

DriverJack

DriverJack परिचय DriverJack एक ऐसा उपकरण है जो कम-ज्ञात NTFS तकनीकों का दुरुपयोग करके एक कमजोर ड्राइवर को लोड करने के लिए डिज़ाइन किया गया है। ये विधियाँ मौजूदा सेवा को हाईजैक करके सिस्टम पर ड्राइवर सेवा के पंजीकरण को बायपास करती हैं, और ड्राइवर लोड इवेंट में प्रस्तुत इमेज पथ को भी स्पूफ करती हैं...

CVE-2025-71313

In the Linux kernel, the following vulnerability has been resolved: PCI: endpoint: Add missing NULL check for allocworkqueue allocworkqueue can return NULL on memory allocation failure. Without proper error checking, this may lead to a NULL pointer dereference when queuework is later called with...

CVE-2025-11156

CVE-2025-11156 affects the Netskope NS Client on Windows. A local, authenticated user with Administrator privileges can improperly load the NS Client driver as a generic kernel service, triggering a system crash (Blue Screen of Death) and a Denial of Service on the affected machine. The descripti...

CVE-2023-53563

In the Linux kernel, the following vulnerability has been resolved: cpufreq: amd-pstate-ut: Fix kernel panic when loading the driver After loading the amd-pstate-ut driver, amdpstateutcheckperf and amdpstateutcheckfreq use cpufreqcpuget to get the policy of the CPU and mark it as busy. In these...

CVE-2023-53563

CVE-2023-53563 relates to the Linux kernel amd-pstate-ut driver. The root cause is that after calling amd_pstate_ut_check_perf() and amd_pstate_ut_check_freq(), the code uses cpufreq_cpu_get() to obtain the CPU policy but fails to release it with cpufreq_policy_put, causing the policy to remain b...

The vulnerability of the smp_processor_id() function in the drivers/vfio/pci/hisilicon/hisi_acc_vfio_pci.c kernel of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the smpprocessorid function in the drivers/vfio/pci/hisilicon/hisiaccvfiopci.c module of the Linux operating system is related to the assignment of the NUL address value due to incorrect loading of drivers in the guest operating system. Exploiting this vulnerability can allow...

CLSA-2025-1744782967 ghostscript: Fix of 3 CVEs

CVE-2024-33871: fix arbitrary code execution by restricting Driver parameter to load only known dynamic libraries in gdevopvp.c - CVE-2023-38559: fix buffer overflow flaw in devnpcxwriterle function by adding input validation checks - CVE-2024-29510: fix memory corruption and SAFER sandbox bypass...

Linux Distros Unpatched Vulnerability : CVE-2022-48868

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Let probe fail when workqueue cannot be enabled The workqueue is enabled wh...

Siemens SIMATIC IPC DiagBase 安全漏洞

Siemens SIMATIC IPC DiagBase is a diagnostic software from Siemens, Germany, used to monitor and diagnose the hardware and system status of SIMATIC IPCs industrial computers. A security vulnerability exists in Siemens SIMATIC IPC DiagBase that stems from affected devices not properly restricting...

PT-2025-6202 · Siemens · Simatic Ipc Diagmonitor +1

Name of the Vulnerable Software and Affected Versions: SIMATIC IPC DiagBase All versions SIMATIC IPC DiagMonitor All versions Description: A vulnerability has been identified where the affected devices do not properly restrict user permissions for the registry key. This could allow an authenticat...

OESA-2024-2454 ghostscript security update

Ghostscript is an interpreter for PostScript™ and Portable Document Format PDF files. Ghostscript consists of a PostScript interpreter layer, and a graphics library. Security Fixes: Artifex Ghostscript before 10.03.0 sometimes has a stack-based buffer overflow via the CIDFSubstPath and...

The vulnerability of the tipc component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the tipc component in the Linux operating system’s kernel is related to kernel panic that occurs when a device driver is loaded at a node. Exploiting this vulnerability can allow an attacker to cause service failures...

CVE-2022-48868

In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Let probe fail when workqueue cannot be enabled The workqueue is enabled when the appropriate driver is loaded and disabled when the driver is removed. When the driver is removed it assumes that the workqueue was...