3839 matches found
CVE-2024-27518
CVE-2024-27518 - SUPERAntiSpyware Professional X LPE PoC This vulnerability was discovered and disclosed by M. Akil Gündoğan from Secunnix Vulnerability Research Team. This repository will hold the proof-of concept and advisories. Details: Product: SUPERAntiSpyware Professional X and all editions...
process-enumeration-stealth
🚴 process-enumeration-stealth What is this? This is a simple PoC which allows you to return a list of PIDs currently using NTFS, by querying the \ntfs\ base device the Windows filesystem base object. Using this method circumvents the need to use typical APIs, such as NtQuerySystemInformation or t...
symboliclink-testing-tools
symboliclink-testing-tools c Google Inc. 2015 開発者: James Forshaw これは、Windowsのさまざまなシンボリックリンクの種類をテストするための小さなツール群です。以下のツールで構成されています： root@kitploit: BaitAndSwitch : シンボリックリンクを作成し、OPLOCKを使用してTOCTOU競合に勝利します CreateDosDeviceSymlink: csrssを使用してオブジェクトマネージャのシンボリックリンクを作成します CreateMountPoint:...
PT-2026-90326
In the Linux kernel, the following vulnerability has been resolved: ntfs: verify run length exceeding volume boundary The mapping pairs decoder validates that the starting LCN is within the volume but does not check if the run extends beyond the volume boundary. A malformed NTFS image with a...
PT-2026-90328
In the Linux kernel, the following vulnerability has been resolved: ntfs: reject invalid MFT LCNs from boot sector The NTFS boot sector stores the MFT and MFTMirr locations as unsigned 64-bit LCNs, but parse ntfs boot sector decoded them into an s64. A crafted high-bit value could therefore becom...
PT-2026-90329
In the Linux kernel, the following vulnerability has been resolved: ntfs: reject invalid empty mapping pairs Reject an attribute with empty mapping pairs if it has inconsistent highest VCN and size...
PT-2026-90327
In the Linux kernel, the following vulnerability has been resolved: ntfs: validate non-resident attribute offsets ntfs attr update meta shifts the attribute name when converting between non-sparse and sparse attributes. Converting to sparse also adds the compressed size field before the name and...
PT-2026-90330
In the Linux kernel, the following vulnerability has been resolved: ntfs: bound the free-cluster bitmap scan to the volume vol-lcn empty bits per page is sized from vol-nr clusters at mount, but ntfs cluster alloc bounds its scan of that array by the size of $Bitmap. Those are independent on-disk...
BlockGuard
🛡️ BlockGuard — Process-Based File Access Security Agent BlockGuard is a Windows Data Loss Prevention DLP agent that intercepts and controls file access at the process level. It ensures that only authorized processes — identified by executable path, cryptographic hash, Authenticode signature, and...
RAR-Anomaly-Inspector
RAR Anomaly Inspector RAR Anomaly Inspector is a read-only PowerShell tool for static inspection of RAR archives , designed to detect path traversal anomalies related to CVE-2025-8088 WinRAR RAR5 Path Traversal. The tool does not extract or execute archive contents. Features Static, read-only...
CVE-2026-33825
🔨 CVE-2026-33825: BlueHammer Microsoft Defender Elevation of Privilege 📌 General Description The CVE-2026-33825 vulnerability, nicknamed "BlueHammer" , is a critical Local Privilege Escalation EoP flaw in the Microsoft Defender threat remediation engine. 🚨 Critical Impact: It allows a user with...
WinRAR-CVE-2025-8088-Exploitation-Toolkit
☠️ CVE-2025-8088 WinRAR Exploit Tool ☠️ SYSTEM ACCESS: GRANTED TARGET: WINRAR VULNERABILITY A sophisticated, military-grade GUI tool designed for creating malicious RAR archives that exploit the WinRAR path traversal vulnerability CVE-2025-8088. This tool leverages advanced NTFS Alternate Data...
CVE-2026-83995
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally...
CVE-2026-77503
Out-of-bounds read in Windows NTFS allows an unauthorized attacker to elevate privileges locally...
CVE-2026-72935
Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally...
CVE-2026-71329
Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code with a physical attack...
CVE-2026-69875
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges over a network...
CVE-2026-69709
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally...