4416 matches found
CVE-2026-13216 Out-of-bounds stack write in Zephyr virtio PCI driver from unvalidated device-supplied capability length
The virtio PCI driver drivers/virtio/virtiopci.c parses a device's PCI capability list during driver initialization. In virtiopcireadcap the device-supplied capability length byte caplen read from PCI config space via pcieconfread was only checked with asserttmp.caplen == capstructsize. That asse...
PINKPANTHER
PINKPANTHER Kurzbeschreibung Windows x64 handgefertigter Kernel-Mode-Shellcode, um das primäre Zugriffstoken des ausgeführten Prozesses durch das SYSTEM-Prozesstoken zu ersetzen, zur Elevation of PrivilegeEoP. Unterstützte Betriebssystemversionen Windows 7/Windows Server 2008 R2 Build 7601 Window...
EATGuard
EATGuard Implementazione di una mitigazione per la protezione della Export Address Table, come l'Export Address Filtering EAF Come Funziona Questo progetto è composto da tre binari che, una volta compilati, si trovano in EATGuard\bin. Essi sono: 1. EATGuardApplication.exe - Applicazione...
AV_Kernel_Vulns
AVKernelVulns POC per le vulnerabilità del kernel di software antivirus trovate da me...
CVE-2026-40144
A memory-corruption vulnerability exists in a kernel-mode component of BeyondTrust Endpoint Privilege Management Windows deployments prior to version 26.1.2. Insufficient validation of input processed by the component may result in memory being accessed outside its intended bounds...
CVE-2026-40144
A memory-corruption flaw in the kernel-mode driver of BeyondTrust Endpoint Privilege Management for Windows (versions before 26.1.2) allows insufficiently validated input to trigger out-of-bounds memory access, yielding HIGH confidentiality, integrity, and availability impact. Exploitation requir...
CVE-2026-40144 Memory corruption vulnerability in Endpoint Privilege Management (Windows deployments)
A memory-corruption vulnerability exists in a kernel-mode component of BeyondTrust Endpoint Privilege Management Windows deployments prior to version 26.1.2. Insufficient validation of input processed by the component may result in memory being accessed outside its intended bounds...
EUVD-2026-60260
A memory-corruption vulnerability exists in a kernel-mode component of BeyondTrust Endpoint Privilege Management Windows deployments prior to version 26.1.2. Insufficient validation of input processed by the component may result in memory being accessed outside its intended bounds...
CVE-2026-40144
A memory-corruption vulnerability exists in a kernel-mode component of BeyondTrust Endpoint Privilege Management Windows deployments prior to version 26.1.2. Insufficient validation of input processed by the component may result in memory being accessed outside its intended bounds...
Mustang Panda Adds Signed Windows Rootkit to CoolClient Backdoor for Stealth
The threat actor known as HoneyMyteaka Mustang Panda has been observed deploying an updated version of the CoolClient backdoor with a signed Windows kernel-mode rootkit that can hide and protect malicious processes, files, registry objects, and command-and-control C2 network information. Russian...
APT group HoneyMyte upgrades CoolClient: the backdoor gets a kernel-level Windows rootkit
Introduction CoolClient is a backdoor family attributed to the HoneyMyte APT group also known as Mustang Panda that has been used in their cyber-espionage campaigns targeting organizations across Asia and Russia. It supports such capabilities as keylogging, clipboard theft, credential harvesting,...
CVE-2026-62917
creationtimestamp| type| source ---|---|--- 2026-08-11 19:01:19+00:00| seen| https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review 2026-08-11 22:01:24+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0286 2026-08-12 01:01:15+00:00| seen|...
CVE-2026-62888
Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally...
CVE-2026-20778
Out-of-bounds read for some IntelR PROSet/Wireless WiFi Software for Windows within Ring 0: Kernel may allow a denial of service. Unprivileged software adversary with an unauthenticated user combined with a high complexity attack may enable denial of service. This result may potentially occur via...
CVE-2026-65794 Windows SMB Client Information Disclosure Vulnerability
...
CVE-2026-65773 Windows Kernel Elevation of Privilege Vulnerability
...
EUVD-2026-56673
Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges locally...
CVE-2026-62799 Windows SMB Client Elevation of Privilege Vulnerability
...
CVE-2026-62772
The CVE-2026-62772 entry describes a heap-based buffer overflow in the Windows Container Isolation FS Filter Driver (unionfs.sys) that enables an authorized local attacker to elevate privileges. Affected component: Windows container isolation FS filter driver (unionfs.sys). Root cause: heap-based...