CVE-2023-36424

信息 ============== Windows 内核池（clfs.sys）损坏权限提升。（CVE-2023-36424） 本仓库包含技术分析与有效利用代码。 作者：Nassim Asrir @p1k4l4 || https://www.linkedin.com/in/nassim-asrir-b73a57122/ 漏洞 ================ clfs.sys 微过滤器驱动程序中存在池溢出。相关信息可参阅： 1 -...

symboliclink-testing-tools

symboliclink-testing-tools c Google Inc. 2015 由 James Forshaw 开发 这是一套用于测试 Windows 各种符号链接类型的小型工具套件，包含以下工具： BaitAndSwitch：创建一个符号链接，并使用 OPLOCK 赢得 TOCTOU（检查时间到使用时间）竞争 CreateDosDeviceSymlink：使用 csrss 创建对象管理器符号链接 CreateMountPoint：创建任意文件挂载点 CreateNtfsSymlink：创建 NTFS 符号链接 CreateObjectDirectory：创建新的对象管理器目...

EUVD-2026-66979

cmu.exe --create-io --file C: creates a predictable temporary file under C:\CM-Stick. The directory and file paths are not properly checked for NTFS reparse points, such as junctions or symbolic links, before file operations are performed. A local attacker can create a junction at the temporary...

CVE-2025-61037

A local privilege escalation vulnerability exists in SevenCs ORCA G2 2.0.1.35 EC2007 Kernel v5.22. The flaw is a Time-of-Check Time-of-Use TOCTOU race condition in the license management logic. The regService process, which runs with SYSTEM privileges, creates a fixed directory and writes files...

CVE-2025-61037

A local privilege escalation vulnerability exists in SevenCs ORCA G2 2.0.1.35 EC2007 Kernel v5.22. The flaw is a Time-of-Check Time-of-Use TOCTOU race condition in the license management logic. The regService process, which runs with SYSTEM privileges, creates a fixed directory and writes files...

CVE-2025-61037

A local privilege escalation vulnerability exists in SevenCs ORCA G2 2.0.1.35 EC2007 Kernel v5.22. The flaw is a Time-of-Check Time-of-Use TOCTOU race condition in the license management logic. The regService process, which runs with SYSTEM privileges, creates a fixed directory and writes files...