Exploit-CVE-2017-6008

Exploit-CVE-2017-6008 CVE-2017-6008은 HitmanPro 스캔에서 커널 풀 버퍼 오버플로우를 악용하여 권한 상승을 가능하게 하는 취약점입니다. 여기에 있는 익스플로잇은 Tarjei Mandt의 논문에 설명된 Quota Process Pointer Overwrite 공격을 사용합니다. 또한, 익스플로잇은 제 Pool sprayer 라이브러리를 사용합니다. Windows 7 익스플로잇에 대한 상세 논문은 여기에서 찾을 수 있습니다. Windows 10 버전 이 버전은 hitmanpro37.sys 드라이버...

SecDrvPoolLeak

SecDrvPoolLeak - CVE-2018-7250 の PoC 説明 Microsoft Windows Vista、Windows 7、Windows 8、Windows 8.1 KB3086255 より前 および Macrovision SafeDisc に含まれていた secdrv.sys に問題が見つかりました。IOCTL 0xCA002813 における未初期化のカーネルプール割り当てにより、ローカルの非特権攻撃者が未初期化のカーネル PagedPool データの 16 ビットを漏洩する可能性があります。 この脆弱性は Microsoft に報告されましたが、最新の...

CVE-2021-32537

CVE-2021-32537: RTKVHD64의 범위를 벗어난 접근으로 인한 풀 손상 이 버그는 2021년 4월 초 Realtek에 제보한 내용입니다. 영향을 받는 드라이버는 RTKVHD64.sys이며, 다양한 주류 하드웨어에서 사용 가능한 것으로 보입니다 아래 하드웨어 구성에서 테스트했지만 더 많은 장치가 취약할 수 있습니다: Microsoft Surface Laptop, Microsoft Surface Book, Microsoft Surface Pro, Lenovo Thinkpad, Dell XPS 13. Realtek으로부...

EternalBlue-Exploit-Demonstration

EternalBlue 익스플로잇 데모 MS17-010 CVE-2017-0144 EternalBlue를 Metasploit을 사용하여 취약한 Windows 7 시스템에서 익스플로잇하고 Meterpreter를 통해 SYSTEM 수준 접근을 달성하는 사이버 보안 실습입니다. 이 프로젝트는 또한 WannaCry 스타일의 랜섬웨어 공격안전 데모을 시뮬레이션하고 MS17-010 보안 패치를 사용한 완화 방법을 보여줍니다. 모듈 정보 모듈: CSCM828 보안 취약점 및 침투 테스팅 학생: Daniel Nicolas Rentapalli...

EternalBlue-Exploit-Demonstration-MS17-010

EternalBlue 익스플로잇 데모 MS17-010 Metasploit을 사용하여 취약한 Windows 7 시스템에서 CVE-2017-0144 EternalBlue를 익스플로잇하고 Meterpreter를 통해 SYSTEM 수준의 접근을 달성하는 사이버 보안 실습입니다. 이 프로젝트는 WannaCry 스타일의 랜섬웨어 공격안전 데모도 시뮬레이션하며 MS17-010 보안 패치를 사용한 완화 방법을 보여줍니다. 모듈 정보 모듈: CSCM828 보안 취약점 및 침투 테스트 학생: Daniel Nicolas Rentapalli...

CVE-2026-15710

An information leakage vulnerability exists in the Endpoint DLP component epdlpdrv.sys of Netskope Client for Windows prior to version R141. An internal communication channel used by the user-space hook DLL to pass messages through the kernel driver to the daemon lacked proper token-based message...

EUVD-2026-76108

An information leakage vulnerability exists in the Endpoint DLP component epdlpdrv.sys of Netskope Client for Windows prior to version R141. An internal communication channel used by the user-space hook DLL to pass messages through the kernel driver to the daemon lacked proper token-based message...

PT-2026-89873

An information leakage vulnerability exists in the Endpoint DLP component epdlpdrv.sys of Netskope Client for Windows prior to version R141. An internal communication channel used by the user-space hook DLL to pass messages through the kernel driver to the daemon lacked proper token-based message...

CVE-2026-16174 Netskope Endpoint DLP Driver Integer Overflow Leading to Kernel Pool Overflow

Netskope was notified about a potential gap in Netskope Endpoint DLP EPDLP running on Windows systems. Successful exploitation of the gap could potentially allow a privileged user to send a crafted message to the EPDLP process port to trigger an integer overflow, leading to memory corruption...

CVE-2026-16174 Netskope Endpoint DLP Driver Integer Overflow Leading to Kernel Pool Overflow

Netskope was notified about a potential gap in Netskope Endpoint DLP EPDLP running on Windows systems. Successful exploitation of the gap could potentially allow a privileged user to send a crafted message to the EPDLP process port to trigger an integer overflow, leading to memory corruption...

CVE-2026-15419

In the silabser.sys driver for CP210x devices v11.5.0 and earlier, a local unprivileged user with a malicious device can use malformed packets to corrupt kernel pool memory, resulting in arbitrary code execution with escalated privileges...

EUVD-2026-75626

In the silabser.sys driver for CP210x devices v11.5.0 and earlier, a local unprivileged user with a malicious device can use malformed packets to corrupt kernel pool memory, resulting in arbitrary code execution with escalated privileges...

CVE-2026-15419

The silabser.sys driver for Silicon Labs CP210x devices (v11.5.0 and earlier) is vulnerable to kernel pool memory corruption caused by malformed packets from a malicious device. A local unprivileged user with physical access can trigger the flaw to achieve arbitrary code execution with escalated ...

CVE-2026-15419 CP210x Driver Memory Corruption results in Arbitrary Code Execution

In the silabser.sys driver for CP210x devices v11.5.0 and earlier, a local unprivileged user with a malicious device can use malformed packets to corrupt kernel pool memory, resulting in arbitrary code execution with escalated privileges...

CVE-2026-15419 CP210x Driver Memory Corruption results in Arbitrary Code Execution

In the silabser.sys driver for CP210x devices v11.5.0 and earlier, a local unprivileged user with a malicious device can use malformed packets to corrupt kernel pool memory, resulting in arbitrary code execution with escalated privileges...

CVE-2026-15418 CP210x Memory Leakage

In the silabser.sys driver for CP210x devices v11.5.0 and earlier, a local unprivileged user with a malicious device can use malformed packets to leak up to 145 bytes of uninitialized kernel pool memory. This vulnerability affects Windows 10 and earlier...

CVE-2026-15418 CP210x Memory Leakage

In the silabser.sys driver for CP210x devices v11.5.0 and earlier, a local unprivileged user with a malicious device can use malformed packets to leak up to 145 bytes of uninitialized kernel pool memory. This vulnerability affects Windows 10 and earlier...

CVE-2026-15418

CVE-2026-15418 affects the silabser.sys driver for CP210x devices in versions 11.5.0 and earlier . A local unprivileged user with physical access can connect a malicious device and use malformed packets to leak up to 145 bytes of uninitialized kernel pool memory . The vulnerability is limited to ...

EUVD-2026-75625

In the silabser.sys driver for CP210x devices v11.5.0 and earlier, a local unprivileged user with a malicious device can use malformed packets to leak up to 145 bytes of uninitialized kernel pool memory. This vulnerability affects Windows 10 and earlier...

PT-2026-89509

In the silabser.sys driver for CP210x devices v11.5.0 and earlier, a local unprivileged user with a malicious device can use malformed packets to leak up to 145 bytes of uninitialized kernel pool memory. This vulnerability affects Windows 10 and earlier...