47 matches found
CVE-2026-40369-EXPLOIT
ブログ全文 - https://pwn2nimron.com/blog CVE-2026-40369: NtQuerySystemInformation を介した任意のカーネルアドレス加算 クラス 253 概要 種類: 任意のカーネル書き込み（加算） — 権限昇格プリミティブ コンポーネント: ntoskrnl.exe — ExpGetProcessInformation トリガー: NtQuerySystemInformationSystemProcessInformationExtension, kernelAddr, 0, &needed 影響:...
SpecuCheck
SpecuCheck SpecuCheck は、CVE-2017-5754 Meltdown、CVE-2017-5715 Spectre v2、CVE-2018-3260 Foreshadow、CVE-2018-3639 Spectre v4 に対するソフトウェアおよびハードウェアの緩和策の状態を確認するための Windows ユーティリティです。これは、2018 年 1 月に導入された最近のパッチの一部として NtQuerySystemInformation API 呼び出しに追加された 2 つの新しい情報クラスを使用し、Windows カーネルから見たデータを報告します。...
CVE-2024-20698
CVE-2024-20698 この脆弱性について: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-20698 パッチの分析 ntoskrnl.exe には、パッチが適用された2つの関数があります: sub1406AE224 と WbAddLookupEntryEx。脆弱な関数は WbAddLookupEntryEx です。この関数へのパス: この関数を呼び出すには、最初の引数 0xb9 を指定して NtQuerySystemInformation...
CVE-2026-40369
هذه إعادة صياغة وملخص للتحليل الفني العام الذي نشره VoidSec حول CVE-2026-40369، مع إضافة مخطط انسيابي وملاحظات دفاعية لفهمي الشخصي. جميع التفاصيل التقنية الأساسية مأخوذة من بحثه. لم أجري هندسة عكسية مستقلة على هذا الخطأ البرمجي. CVE-2026-40369: تحليل دفاعي لبدائية الزيادة ذات الـ12 بايت في نواة...
makin
I create makin to make initial malware assessment little bit easier for me, I think it's useful for others as well, It helps to reveal a debugger detection techniques used by a sample. Any feedback is greatly appreciated: @qazqaz How does it work? makin opens a sample as a debuggee and injects...
Exploit for CVE-2026-40369
CVE-2026-40369: Arbitrary Kernel Address Increment via NtQuery...
Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Microsoft
CVE-2024-30090 - LPE PoC CVE-2024-30090https://msrc.mic...
Microsoft CLIPSP.SYS License Update out-of-bounds read vulnerability
Talos Vulnerability Report TALOS-2024-1988 Microsoft CLIPSP.SYS License Update out-of-bounds read vulnerability August 13, 2024 CVE Number None SUMMARY An out-of-bounds read vulnerability exists in the License Update functionality of Microsoft CLIPSP.SYS 10.0.22621 Build 22621. A specially crafte...
Microsoft Windows CLIPSP.SYS License Update Field Type 0xCC out-of-bounds read vulnerability
Talos Vulnerability Report TALOS-2024-1971 Microsoft Windows CLIPSP.SYS License Update Field Type 0xCC out-of-bounds read vulnerability August 13, 2024 CVE Number None SUMMARY An out-of-bounds read vulnerability exists in the License Update Field Type 0xCC functionality of Microsoft Windows...
Microsoft Windows CLIPSP.SYS License Update Field Type 0xD3 out-of-bounds read vulnerability
Talos Vulnerability Report TALOS-2024-1970 Microsoft Windows CLIPSP.SYS License Update Field Type 0xD3 out-of-bounds read vulnerability August 13, 2024 CVE Number None SUMMARY An out-of-bounds read vulnerability exists in the License Update Field Type 0xD3 functionality of Microsoft Windows...
Microsoft Windows CLIPSP.SYS License Update Field Type 0xC9 out-of-bounds read vulnerability
Talos Vulnerability Report TALOS-2024-1968 Microsoft Windows CLIPSP.SYS License Update Field Type 0xC9 out-of-bounds read vulnerability August 13, 2024 CVE Number CVE-2024-38062 SUMMARY An out-of-bounds read vulnerability exists in the License Update Field Type 0xC9 functionality of Microsoft...
Microsoft CLIPSP.SYS License update out-of-bounds read vulnerability
Talos Vulnerability Report TALOS-2024-1965 Microsoft CLIPSP.SYS License update out-of-bounds read vulnerability August 13, 2024 CVE Number CVE-2024-38185 SUMMARY Multiple out-of-bounds read vulnerabilities exists in the License update functionality of Microsoft CLIPSP.SYS 10.0.22621 Build 22621,...
Microsoft CLIPSP.SYS License update privilege escalation vulnerability
Talos Vulnerability Report TALOS-2024-1966 Microsoft CLIPSP.SYS License update privilege escalation vulnerability August 13, 2024 CVE Number CVE-2024-38186 SUMMARY A privilege escalation vulnerability exists in the License update functionality of Microsoft CLIPSP.SYS 10.0.22621 Build 22621,...
Microsoft CLIPSP.SYS License update signature check bypass vulnerability
Talos Vulnerability Report TALOS-2024-1964 Microsoft CLIPSP.SYS License update signature check bypass vulnerability August 13, 2024 CVE Number CVE-2024-38184 SUMMARY A signature check bypass vulnerability exists in the License update functionality of Microsoft CLIPSP.SYS 10.0.22621 Build 22621,...
Microsoft Windows CLIPSP.SYS License Update Field Type 0x20 out-of-bounds read vulnerability
Talos Vulnerability Report TALOS-2024-1969 Microsoft Windows CLIPSP.SYS License Update Field Type 0x20 out-of-bounds read vulnerability August 13, 2024 CVE Number CVE-2024-38187 SUMMARY An out-of-bounds read vulnerability exists in the License Update Field Type 0x20 functionality of Microsoft...
Exploit for Integer Overflow or Wraparound in Microsoft
CVE-2024-20698 About this vulnerability: https://msrc.microsof...
CVE-2023-21768
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability...
CVE-2021-31955
Windows Kernel Information Disclosure Vulnerability Recent assessments: gwillcox-r7 at June 17, 2021 3:23pm UTC reported: Ah good old NtQuerySystemInformation strikes again, never quite going out of style : In this case CVE-2021-31955 is an information disclosure in good old ntoskrnl.exe, aka the...
DELL dbutil_2_3.sys 2.3 Arbitrary Write / Privilege Escalation
Exploit Title: DELL dbutil23.sys 2.3 - Arbitrary Write to Local Privilege Escalation LPE Date: 10/05/2021 Exploit Author: Paolo Stagno aka VoidSec Version: include include include include define IOCTLCODE 0x9B0C1EC8 // IOCTLCODE value, used to reach the vulnerable function taken from IDA define...