CVE-2026-50416-writeup-and-poc

CVE-2026-50416: Un QWORD de más en el montón del escritorio En la compilación Insider de Windows 11 10.0.28020.2149, la asignación en modo usuario del montón del escritorio de Win32k exponía un puntero sin procesar del grupo del kernel de sesión en el desplazamiento 0x100. La lectura en sí es cas...

March 8, 2022—KB5011560 (Security-only update)

None None...

Flash Broker-Based - Sandbox Escape via Timing Attack Against File Moving

Flash Broker-Based - Sandbox Escape via Timing Attack Against File Moving Source: https://code.google.com/p/google-security-research/issues/detail?id=280&can=1&q=label%3AProduct-Flash%20modified-after%3A2015%2F8%2F17&sort=id FlashBroker - BrokerMoveFileEx TOCTOU IE PM Sandbox Escape 1. Windows 8....

Flash Broker-Based - Sandbox Escape via Forward Slash Instead of Backslash

Source: https://code.google.com/p/google-security-research/issues/detail?id=278&can=1&q=label%3AProduct-Flash%20modified-after%3A2015%2F8%2F17&sort=id FlashBroker - Junction Check Bypass With Forward Slash IE PM Sandbox Escape 1. Windows 8.1 Internet Explorer Protected Mode Bypass in FlashBroker...

Microsoft Windows - HWND_BROADCAST (PoC) (MS13-005)

/ ms13-005-funz-poc.cpp - Drive a Medium IL cmd.exe via a Low IL process and message broadcasted Copyright C 2013 Axel "0vercl0k" Souchet - http://www.twitter.com/0vercl0k This program is free software: you can redistribute it and/or modify it under the terms of the GNU General Public License as...

MS13-005 Proof Of Concept

MS13-005 proof of concept exploit to drive a medium IL cmd.exe via a low IL process and message broadcasted. / ms13-005-funz-poc.cpp - Drive a Medium IL cmd.exe via a Low IL process and message broadcasted Copyright C 2012 Axel "0vercl0k" Souchet - http://www.twitter.com/0vercl0k This program is...