Fuck-Etw

「⚙️」Bypass ETW & Ntdll Unhooking Bypass the Event Trace WindowsETW and unhook ntdll. |\ /| | \ /\ \ /|\ /| | /| || /| \ / /| / | | | | | | || | | / / | | | | | | | | | | | || | | | | | | | | | | | | | || | | \ \ | | | | || || | | | || /| / \ | /\ | | | | |/ /|/ // Made by sorahed v1.0 i...

sysmon-config

sysmon-config | A Sysmon configuration file for everybody to fork This is a Microsoft Sysinternals Sysmon configuration file template with default high-quality event tracing. The file should function as a great starting point for system change monitoring in a self-contained and accessible package...

CVE-2021-34486

CVE-2021-34486 Windows Etw LPE olny tested on windwos 20H2 x64 ed2k://|file|cnwindows10businesseditionsversion20h2updatedmarch2021x64dvdca61aaaa.iso|6074574848|B6741C4E4B09337471B02DC95E953992|/ thanks @yongchuank https://www.pixiepointsecurity.com/blog/advisory-cve-2021-34486.html...

Windows Event Tracing Spoofing

The vulnerability of the Windows Event Tracing service is related to deficiencies in the authentication process. Exploiting this vulnerability allows attackers to carry out spoofing attacks...

CVE-2026-98402

A flaw was found in the Linux kernel. An attacker could cause a Denial of Service DoS or system instability by triggering network error events while kernel event tracing is active. When recording Internet Control Message Protocol ICMP messages, the kernel attempts to read transport header...

CVE-2026-83874

Heap-based buffer overflow in Windows Event Tracing allows an unauthorized attacker to execute code over a network...

CVE-2026-83836

Heap-based buffer overflow in Windows Event Tracing allows an unauthorized attacker to execute code locally...

CVE-2026-83707

Use after free in Windows Event Tracing allows an authorized attacker to elevate privileges locally...

CVE-2026-70235

Improper authentication in Windows Event Tracing allows an authorized attacker to perform spoofing locally...

CVE-2026-70134

Use after free in Windows Event Tracing allows an authorized attacker to elevate privileges locally...

EUVD-2026-100021

Heap-based buffer overflow in Windows Event Tracing allows an unauthorized attacker to execute code over a network...

CVE-2026-83874

A heap-based buffer overflow exists in Windows Event Tracing which could allow an unauthorized attacker to achieve remote code execution over a network. The vulnerability carries a high severity score of 8.8, indicating significant impact on confidentiality, integrity, and availability. While the...

EUVD-2026-99678

Use after free in Windows Event Tracing allows an authorized attacker to elevate privileges locally...

CVE-2026-70134

A Use after free vulnerability exists in Windows Event Tracing . This flaw allows an authorized attacker to perform a local privilege escalation . No specific exploit code or in-the-wild exploitation details are provided in the documents, though the CVSS 3.1 score indicates a High severity (7.0) ...

EUVD-2026-99376

Heap-based buffer overflow in Windows Event Tracing allows an unauthorized attacker to execute code locally...

CVE-2026-83836

A Heap-based buffer overflow exists in Windows Event Tracing which could allow an unauthorized attacker to execute code locally . The vulnerability involves a CWE-122 (Heap-based Buffer Overflow) and CWE-191 (Integer Underflow) condition. The Base Severity is High (7.8), with the attack vector be...

EUVD-2026-99339

Use after free in Windows Event Tracing allows an authorized attacker to elevate privileges locally...

CVE-2026-83707

A Use after free vulnerability exists in Windows Event Tracing . This flaw allows an authorized attacker to achieve local privilege elevation . The vulnerability is characterized by a high CVSS 3.1 base score of 7.0, impacting confidentiality, integrity, and availability. Official remediation is ...

EUVD-2026-99077

Improper authentication in Windows Event Tracing allows an authorized attacker to perform spoofing locally...

CVE-2026-70235

A vulnerability in Windows Event Tracing due to improper authentication allows an authorized attacker to perform spoofing locally . The security impact is categorized as high integrity with a CVSS 3.1 base score of 5.5 . Official remediation is available via Microsoft updates.