CVE-2019-0708

CVE-2019-0708 BlueKeep 目前，我只公开了针对Windows 7 x64的利用说明。 参见 NOTE.md 注意： 默认配置（fDisableCam=1）下的Windows 2008 R2可以被利用。可靠性同Windows 7一样。 更新（2020年7月） 为 NOTE.md 添加了针对Windows Server 2008的信息 添加了用于填充目标内核非分页池的PoC 添加了用于检测目标信息的脚本 添加了Windows 7 x86上的PoC代码执行 文件 myrdp.py 我的RDP库（杂乱） myasn1.py 我的RDP ASN.1（被myrdp.py使用）...

CVE-2026-23762

VB-Audio Voicemeeter, Voicemeeter Banana, and Voicemeeter Potato versions ending in 1.1.1.9, 2.1.1.9, and 3.1.1.9 and earlier, respectively, as well as VB-Audio Matrix and Matrix Coconut versions ending in 1.0.2.2 and 2.0.2.2 and earlier, respectively, contain a vulnerability in their virtual aud...

VB-Audio Voicemeeter and VB-Audio Matrix security vulnerabilities

VB-Audio Voicemeeter and VB-Audio Matrix are products of the French company VB-Audio. VB-Audio Voicemeeter is a virtual audio mixer software. VB-Audio Matrix is a real-time audio routing software. Both VB-Audio Voicemeeter and VB-Audio Matrix have security vulnerabilities. These vulnerabilities...

Nonpaged pool memory leak occurs in a Windows Server 2012 R2-based failover cluster

Nonpaged pool memory leak occurs in a Windows Server 2012 R2-based failover cluster This article describes a memory leak issue that occurs in the svhdxflt.sys filter driver in Windows Server 2012 R2. The leak occurs against nonpaged pool with the svxp tag. You can fix this issue by using the upda...

System becomes unresponsive because filter manager leaks nonpaged pool allocations in Windows Server 2012

System becomes unresponsive because filter manager leaks nonpaged pool allocations in Windows Server 2012 This article describes a memory leak issue that's found within FltpGetTargetInfo function in IoSup.c and FltMgr.sys filter manager code in Windows Server 2012. You can fix this issue by using...

Microsoft Windows - BlueKeep RDP Remote Windows Kernel Use After Free (Metasploit)

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework Exploitation and Caveats from zerosum0x0: 1. Register with channel MST120 and others such as RDPDR/RDPSND nominally. 2. Perform a full RDP handshake, I like to wait for...

Microsoft Windows - BlueKeep RDP Remote Windows Kernel Use After Free Exploit

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework Exploitation and Caveats from zerosum0x0: 1. Register with channel MST120 and others such as RDPDR/RDPSND nominally. 2. Perform a full RDP handshake, I like to wait for...

MS17-010 EternalBlue SMB Remote Windows Kernel Pool Corruption for Win8+

EternalBlue exploit for Windows 8, Windows 10, and 2012 by sleepya The exploit might FAIL and CRASH a target system depended on what is overwritten The exploit support only x64 target Tested on: - Windows 2012 R2 x64 - Windows 8.1 x64 - Windows 10 Pro Build 10240 x64 - Windows 10 Enterprise...

Microsoft Windows 8/8.1/2012 R2 (x64) - 'EternalBlue' SMB Remote Code Execution (MS17-010)

!/usr/bin/python from impacket import smb, ntlm from struct import pack import sys import socket ''' EternalBlue exploit for Windows 8 and 2012 by sleepya The exploit might FAIL and CRASH a target system depended on what is overwritten The exploit support only x64 target EDB Note: Shellcode - x64...

Microsoft Windows 88.12012 R2 (x64) - EternalBlue SMB Remote Code Execution (MS17-010)

Microsoft Windows 88.12012 R2 x64 - EternalBlue SMB Remote Code Execution MS17-010 !/usr/bin/python from impacket import smb, ntlm from struct import pack import sys import socket ''' EternalBlue exploit for Windows 8 and 2012 by sleepya The exploit might FAIL and CRASH a target system depended o...

Microsoft Windows WRITE_ANDX SMB command handling Kernel DoS

Some days ago i have discovered a DoS in Windows Vista. Here is the advisory with a detailed description about the vulnerability that will help to Microsoft they have been already notified about the bug to correct it as soon as possible, and it will help you if you need to add any rule for your...