letsdefend-cve-2024-49138-investigation

LetsDefend 조사: CVE-2024-49138 🔍 개요 LetsDefend를 활용한 실습형 SOC 조사 및 침해 대응 시뮬레이션 — Windows CLFS 드라이버의 권한 상승 취약점인 CVE-2024-49138 의 실제 악용 사례에 초점을 맞췄습니다. 📅 이벤트 세부 정보 이벤트 ID : 313 인시던트 유형 : 권한 상승 이벤트 시간 : 2025년 1월 22일 호스트명 : Victor IP 주소 : 172.16.17.207 악성 바이너리 : svohost.exe 부모 프로세스 : powershell.exe 의심스러운...

AmdRyzenMasterCheat

ECPRO-LAN 안티 치트: FACEIT, ESEA 커스텀 버전 2019년 초 - 2020년 후반. R.I.P. https://h0mbre.github.io/RyzenMasterCVE/ 요구사항: 모든 업데이트가 적용된 Windows 10 Enterprise 1607 LTSB AMD Ryzen CPU 마더보드 B350-B450 B550 클라이언트는 버그가 있음 Logitech GHUB 설치 마우스 입력용 구세대 Ryzen 프로세서는 AmdRyzenMaster 드라이버 버전이 다를 수 있습니다 1.3.0.0 그런 다음 다음을...

cve-2023-29360

CVE-2023-29360 の PoC MSKSSRV.SYS ドライバを標的としたエクスプロイト 注意 このエクスプロイトをより良くするためのクールなトリックやヒントがあれば、いつでも提案を受け付けています : クレジット Thomas Imbert @masthoon from Synacktiv @Synacktiv...

EDRKiller

EDRKiller cve-2026-36425 킬러 EDR 사용, 360 킬러 가능 360 보안 및 화웨이 보안을 포함하되 이에 국한되지 않는 모든 안티바이러스 프로세스를 종료합니다. 프로세스 조작을 위해 드라이버 취약점을 악용하고 있으며, NT 함수를 통해 드라이버를 등록합니다. 은닉 기능은 구현되어 있지 않습니다. Clang으로 컴파일되어 정적 안티바이러스 탐지를 우회할 수 있습니다. 프로세스 조작을 위해 드라이버 취약점을 악용하고 있으며, NT 함수를 통해 드라이버를 등록합니다. 은닉 기능은 구현되어 있지 않습니다...

CVE-2017-13672

CVE-2017-13672 PoCs para CVE-2017-13672 lectura fuera de límites en el controlador VGA Cirrus de QEMU, causando denegación de servicio...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: can: ucan: Fix infinite loop caused by zero-length messages. If a faulty ucan device receives a message where the message length field is set to 0, the driver will enter an infinite loop in ucanreadbulkcallback, causing the syste...

Astra Linux – Vulnerability in opensc

The TCOS smart card software driver in OpenSC before version 0.21.0-rc1 has a stack-based buffer overflow in the tcosdecipher function...

The vulnerability in the drivers/hid/hid-pl.c component of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the drivers/hid/hid-pl.c component in the Linux operating system is related to access to an uninitialized pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the drivers/video/fbdev/vt8500lcdfb.c component of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the drivers/video/fbdev/vt8500lcdfb.c component of the Linux operating system is related to the failure to release resources after the expiration of their useful life. Exploiting this vulnerability can allow an attacker to cause service failures...

CVE-2026-74505

In the Linux kernel, the following vulnerability has been resolved: ALSA: 6fire: Fix UAF at error handling during probe Although 6fire driver had a few fixes for dealing with the early error handling during the probe phase, it forgot a pending URB before freeing the resources, which may lead to a...

EUVD-2026-59032

In the Linux kernel, the following vulnerability has been resolved: Input: ims-pcu - fix type confusion in CDC union descriptor parsing The driver currently trusts the bMasterInterface0 from the CDC union descriptor without verifying that it matches the interface being probed. This could lead to...

CVE-2026-0465

A Use‑After‑Free UAF vulnerability in the AMD Ryzen™ Master Utility Driver could allow a local attacker to access kernel memory, potentially resulting in loss of availability...

CVE-2026-0465

A Use‑After‑Free (UAF) in the AMD Ryzen Master Utility Driver is described as allowing a local attacker to access kernel memory, potentially causing a loss of availability. The affected component is the AMD Ryzen Master Utility Driver; the vulnerability is local, requires high privileges, and exe...

CVE-2026-0465

A Use‑After‑Free UAF vulnerability in the AMD Ryzen™ Master Utility Driver could allow a local attacker to access kernel memory, potentially resulting in loss of availability...

EUVD-2026-56781

A Use‑After‑Free UAF vulnerability in the AMD Ryzen™ Master Utility Driver could allow a local attacker to access kernel memory, potentially resulting in loss of availability...

CVE-2026-19381

A security flaw has been discovered in Kingston FURY CTRL RGB Control Software 2.0.65.0. The impacted element is an unknown function in the library NTIOLibKSFX.sys of the component Driver. Performing a manipulation results in improper privilege management. The attack needs to be approached locall...

Linux Distros Unpatched Vulnerability : CVE-2026-68245

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amdgpu: fix lifetime issue of amdgpuvmgettaskinfopasid The vm pointer returned from amdgpuvmgetvmfrompasid is only valid while the lock is still being held...

CVE-2026-45204 GPU DDK - Out of bounds memory access and kernel NULL pointer dereference in DmaTransfer when pui64Address is a pointer to device memory

Software installed and run as a non-privileged user may conduct improper GPU system calls to trigger OOB access and kernel null pointer dereference in an error path. Null pointer dereference occurs in an error path of a function running in kernel thread of execution leading to kernel exceptions,...

The vulnerability of the atmel_hlcdc_plane_atomic_duplicate_state() function in the driver/gpu/drm/atmel-hlcdc/atmel_hlcdc_plane.c driver of the Direct Rendering Infrastructure (DRI) infrastructure of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the atmelhlcdcplaneatomicduplicatestate function in the drivers/gpu/drm/atmel-hlcdc/atmelhlcdcplane.c driver of the Direct Rendering Infrastructure DRI infrastructure of the Linux operating system is related to the reutilization of previously freed memory. Exploiting this...

The vulnerability of the acpi_processor_errata_piix4() function in the drivers/acpi/acpi_processor.c driver of the ACPI driver module for the Linux kernel allows a attacker to cause a system failure.

The vulnerability of the acpiprocessorerratapiix4 function in the drivers/acpi/acpiprocessor.c file of the ACPI driver for the Linux kernel is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a system failure...