Authentication flaw

PCManager 9.1.3.1 has an improper authentication vulnerability. The certain driver interface of the software does not perform a validation of user-mode data properly, successful exploit could result in malicious code execution...

USB Accessory Can Defeat iOS's New "USB Restricted Mode" Security Feature

With the release of iOS 11.4.1, Apple has finally rolled out a new security feature designed to protect your devices against USB accessories that connect to the data port, making it harder for law enforcement and hackers to break into your iPhone or iPad without your permission. Dubbed USB...

CVE-2011-5087

Summary: CVE-2011-5087 is described as an unspecified vulnerability in AdAstrA TRACE MODE Data Center that allows remote attackers to read arbitrary files through unknown vectors, with demonstration tied to the GLEG Agora SCADA+ Exploit Pack for Immunity CANVAS. Affected product (per documents): ...

CVE-2010-1895

The Windows kernel-mode drivers in win32k.sys in Microsoft Windows XP SP2 and SP3, and Windows Server 2003 SP2, do not properly perform memory allocation before copying user-mode data to kernel mode, which allows local users to gain privileges via a crafted application, aka "Win32k Pool Overflow...

CVE-2010-1893

Integer overflow in the TCP/IP stack in Microsoft Windows Vista SP1, Windows Server 2008 Gold and R2, and Windows 7 allows local users to gain privileges via a buffer of user-mode data that is copied to kernel mode, aka "Integer Overflow in Windows Networking Vulnerability."...

CVE-2010-1895

The Windows kernel-mode drivers in win32k.sys in Microsoft Windows XP SP2 and SP3, and Windows Server 2003 SP2, do not properly perform memory allocation before copying user-mode data to kernel mode, which allows local users to gain privileges via a crafted application, aka "Win32k Pool Overflow...

CVE-2009-3678

Integer overflow in cdd.dll in the Canonical Display Driver CDD in Microsoft Windows Server 2008 R2 and Windows 7 on 64-bit platforms, when the Windows Aero theme is installed, allows context-dependent attackers to cause a denial of service reboot or possibly execute arbitrary code via a crafted...

PT-2009-4923 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Microsoft Windows versions prior to the fixed version Description: The issue arises from insufficient validation of data sent from user mode, allowing local users to gain privileges via a crafted PE .exe file. This could lead to a NULL pointe...

Exploit for MS08-066 - AFD.sys kernel memory overwrite.

Hi, I have just uploaded a k-plugin for Kartoffel, which exploits a flaw patched in the recent MS08-066 bulletin. http://kartoffel.reversemode.com/downloads.php For those researchers interesting in digging a little bit more into this flaw, just take a look at afd!AfdGetRemoteAddress and/or check...

MS Windows XP/2003 AFD.sys Privilege Escalation Exploit (K-plugin)

No description provided by source. Hi, I have just uploaded a k-plugin for Kartoffel, which exploits a flaw patched in the recent MS08-066 bulletin. http://kartoffel.reversemode.com/downloads.php backup: http://milw0rm.com/sploits/2008-afdplugin.zip For those researchers interesting in digging a...