CVE-2023-36874

🇮🇱 BringThemHome NeverAgainIsNow 🇮🇱 We demand the safe return of all citizens who have been taken hostage by the terrorist group Hamas. We will not rest until every hostage is released and returns home safely. You can help bring them back home.https://stories.bringthemhomenow.net/ CVE-2023-36874...

Lsass-Shtinkering

Lsass Shtinkering Nuevo método de volcado de LSASS abusando del servicio Windows Error Reporting. Envía un mensaje al servicio mediante el protocolo ALPC para informar de una excepción en LSASS. Este informe hará que el servicio vuelque la memoria de LSASS. Requisitos previos El valor del registr...

DirCreate2System

DirCreate2System Explotando bugs de creación de directorios privilegiados con Windows Error Reporting para obtener NT AUTHORITY\SYSTEM Breve descripción: He descubierto que comctl32.dll que falta en el directorio del sistema que realmente no existe es cargado por wermgr.exe a través del informe d...

CVE-2019-1315

Elevación de privilegios mediante movimiento arbitrario de archivos en el Administrador de informes de errores de Windows Detalles: https://offsec.almond.consulting/windows-error-reporting-arbitrary-file-move-eop.html Necesitará la biblioteca NtApiDotNet para ejecutarlo, así como un archivo...

CVE-2023-36874_BOF

CVE-2023-36874 BOF de LPE de Informe de Errores de Windows Introducción Esta es una implementación BOF de CobaltStrike madura y operativa del exploit de LPE de Informe de Errores de Windows CVE-2023-36874 de Filip Dragovic @filipdragovic. Él hizo el trabajo pesado en cuanto a crear un exploit...

CVE-2023-36874

CVE-2023-36874 For demonstration purposes only. Exploit works on vulnerable Windows clients/servers. Compile code and create c:\test\system32 directories. Place your wermgr.exe in that directory and run compiled PoC...

CVE-2020-0753-and-CVE-2020-0754

Writeup and POC for CVE-2020-0753, CVE-2020-0754 and six fixed Window DOS Vulnerabilities Exploit FileSystem race condition bug - analysis of CVE-2020-0753 and CVE-2020-0754 Windows Error Reporting service has fixed 2 Elevation of Privilege bugs in last Patch Tuesday, the two bugs are assigned wi...

CVE-2020-0753-and-CVE-2020-0754

Writeup y PoC para CVE-2020-0753, CVE-2020-0754 y seis vulnerabilidades DOS sin corregir de Windows Explotación del bug de condición de carrera en el sistema de archivos: análisis de CVE-2020-0753 y CVE-2020-0754 El servicio de Informes de errores de Windows ha corregido 2 bugs de elevación de...

CVE-2026-20817

CVE-2026-20817 - Escalada de Privilegios ALPC en el Informe de Errores de Windows WER Descripción Este repositorio contiene una Prueba de Concepto PoC para CVE-2026-20817 , una vulnerabilidad de escalada de privilegios local en el servicio de Informe de Errores de Windows WER. La vulnerabilidad...

ROS-20261001-73-0043

The vulnerability in rclone is related to deficiencies in the error reporting mechanism. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

CVE-2023-36874

CVE-2023-36874 Prueba de Concepto PoC Una implementación educativa y de investigación defensiva de la vulnerabilidad CVE-2023-36874 , que demuestra una falla de Escalada Local de Privilegios LPE dentro del componente Informe de Errores de Windows WER. ⚠️ Descargo de responsabilidad Este repositori...

Oracle Linux 10 : unbound (ELSA-2026-68291)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-68291 advisory. - Fix CVE-2026-50252: prevent cache poisoning via shared ports - Fix CVE-2026-55973: dns-error-reporting stack buffer overflow - Fix CVE-2026-44690 - Cross-zo...

unbound security update

1.24.2-20 - Backport additional fix of locks during initialization 1.24.2-19 - Fix CVE-2026-50252: prevent cache poisoning via shared ports 1.24.2-18 - Add unit tests for CVE-2026-44690,55973 1.24.2-17 - Fix CVE-2026-55973: dns-error-reporting stack buffer overflow 1.24.2-16 - Fix CVE-2026-44690 ...

Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: btrfs: Always report an error in runonedelayedref. Currently, we have a btrfsdebug function for handling failures in runonedelayedref. However, if end users encounter such problems, there will be no chance that btrfsdebug is...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: PCI/AER: Fixed NULL pointer access via aerinfo. The kzallocGFPKERNEL function may return NULL, resulting in kernel panic when accessing aerinfo-xxx. This issue has been fixed...

CVE-2026-89618

A flaw was found in the Linux kernel's eventfs component. When the eventfscreatedir function fails due to memory pressure, an uninitialized internal data structure can cause the system to issue a misleading warning during the cleanup process. This incorrect error reporting could lead to confusion...

UBUNTU-CVE-2026-89577

In the Linux kernel, the following vulnerability has been resolved: dm-io: report non-retryable errors separatedly The error codes BLKSTSNOTSUPP and BLKSTSINVAL should not cause leg failure on dm-raid1. This patch changes the interface to dm-io, so that it reports two error bitmaps - errorbits an...

CVE-2026-83996

Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally...

CVE-2026-69896

Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally...

CVE-2026-69684

Generation of error message containing sensitive information in Windows Error Reporting allows an authorized attacker to disclose information locally...