47 matches found
makin
I create makin to make initial malware assessment little bit easier for me, I think it's useful for others as well, It helps to reveal a debugger detection techniques used by a sample. Any feedback is greatly appreciated: @qazqaz How does it work? makin opens a sample as a debuggee and injects...
CVE-2026-40369-EXPLOIT
Полный блог - https://pwn2nimron.com/blog CVE-2026-40369: Произвольное увеличение адреса ядра через NtQuerySystemInformation Класс 253 Сводка Тип: Произвольная запись в ядро увеличение — ПРИМИТИВ ПОВЫШЕНИЯ ПРИВИЛЕГИЙ Компонент: ntoskrnl.exe — ExpGetProcessInformation Триггер:...
CVE-2024-20698
CVE-2024-20698 Об этой уязвимости: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-20698 Анализ патча В ntoskrnl.exe есть две исправленные функции: sub1406AE224 и WbAddLookupEntryEx. Уязвимая функция — WbAddLookupEntryEx. Пути к этой функции: Чтобы вызвать эту функцию, нужно вызват...
SpecuCheck
SpecuCheck SpecuCheck — это утилита Windows для проверки состояния программных и аппаратных средств защиты от CVE-2017-5754 Meltdown, CVE-2017-5715 Spectre v2, CVE-2018-3260 Foreshadow и CVE-2018-3639 Spectre v4. Она использует два новых информационных класса, добавленных в вызов API...
CVE-2026-40369
Это переработка и краткое изложение публичного технического анализа VoidSec уязвимости CVE-2026-40369 с добавлением блок-схемы и заметок по защите для моего собственного понимания. Все основные технические детали взяты из его исследования. Я не проводил независимого реверс-инжиниринга этой ошибки...
Exploit for CVE-2026-40369
CVE-2026-40369: Arbitrary Kernel Address Increment via NtQuery...
Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Microsoft
CVE-2024-30090 - LPE PoC CVE-2024-30090https://msrc.mic...
Microsoft Windows CLIPSP.SYS License Update Field Type 0xCC out-of-bounds read vulnerability
Talos Vulnerability Report TALOS-2024-1971 Microsoft Windows CLIPSP.SYS License Update Field Type 0xCC out-of-bounds read vulnerability August 13, 2024 CVE Number None SUMMARY An out-of-bounds read vulnerability exists in the License Update Field Type 0xCC functionality of Microsoft Windows...
Microsoft CLIPSP.SYS License Update out-of-bounds read vulnerability
Talos Vulnerability Report TALOS-2024-1988 Microsoft CLIPSP.SYS License Update out-of-bounds read vulnerability August 13, 2024 CVE Number None SUMMARY An out-of-bounds read vulnerability exists in the License Update functionality of Microsoft CLIPSP.SYS 10.0.22621 Build 22621. A specially crafte...
Microsoft Windows CLIPSP.SYS License Update Field Type 0xC9 out-of-bounds read vulnerability
Talos Vulnerability Report TALOS-2024-1968 Microsoft Windows CLIPSP.SYS License Update Field Type 0xC9 out-of-bounds read vulnerability August 13, 2024 CVE Number CVE-2024-38062 SUMMARY An out-of-bounds read vulnerability exists in the License Update Field Type 0xC9 functionality of Microsoft...
Microsoft Windows CLIPSP.SYS License Update Field Type 0xD3 out-of-bounds read vulnerability
Talos Vulnerability Report TALOS-2024-1970 Microsoft Windows CLIPSP.SYS License Update Field Type 0xD3 out-of-bounds read vulnerability August 13, 2024 CVE Number None SUMMARY An out-of-bounds read vulnerability exists in the License Update Field Type 0xD3 functionality of Microsoft Windows...
Microsoft CLIPSP.SYS License update signature check bypass vulnerability
Talos Vulnerability Report TALOS-2024-1964 Microsoft CLIPSP.SYS License update signature check bypass vulnerability August 13, 2024 CVE Number CVE-2024-38184 SUMMARY A signature check bypass vulnerability exists in the License update functionality of Microsoft CLIPSP.SYS 10.0.22621 Build 22621,...
Microsoft CLIPSP.SYS License update out-of-bounds read vulnerability
Talos Vulnerability Report TALOS-2024-1965 Microsoft CLIPSP.SYS License update out-of-bounds read vulnerability August 13, 2024 CVE Number CVE-2024-38185 SUMMARY Multiple out-of-bounds read vulnerabilities exists in the License update functionality of Microsoft CLIPSP.SYS 10.0.22621 Build 22621,...
Microsoft Windows CLIPSP.SYS License Update Field Type 0x20 out-of-bounds read vulnerability
Talos Vulnerability Report TALOS-2024-1969 Microsoft Windows CLIPSP.SYS License Update Field Type 0x20 out-of-bounds read vulnerability August 13, 2024 CVE Number CVE-2024-38187 SUMMARY An out-of-bounds read vulnerability exists in the License Update Field Type 0x20 functionality of Microsoft...
Microsoft CLIPSP.SYS License update privilege escalation vulnerability
Talos Vulnerability Report TALOS-2024-1966 Microsoft CLIPSP.SYS License update privilege escalation vulnerability August 13, 2024 CVE Number CVE-2024-38186 SUMMARY A privilege escalation vulnerability exists in the License update functionality of Microsoft CLIPSP.SYS 10.0.22621 Build 22621,...
Exploit for Integer Overflow or Wraparound in Microsoft
CVE-2024-20698 About this vulnerability: https://msrc.microsof...
CVE-2023-21768
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability...
CVE-2021-31955
Windows Kernel Information Disclosure Vulnerability Recent assessments: gwillcox-r7 at June 17, 2021 3:23pm UTC reported: Ah good old NtQuerySystemInformation strikes again, never quite going out of style : In this case CVE-2021-31955 is an information disclosure in good old ntoskrnl.exe, aka the...
DELL dbutil_2_3.sys 2.3 Arbitrary Write / Privilege Escalation
Exploit Title: DELL dbutil23.sys 2.3 - Arbitrary Write to Local Privilege Escalation LPE Date: 10/05/2021 Exploit Author: Paolo Stagno aka VoidSec Version: include include include include define IOCTLCODE 0x9B0C1EC8 // IOCTLCODE value, used to reach the vulnerable function taken from IDA define...