CVE-2023-36377

Buffer Overflow vulnerability in mtrojnar osslsigncode v.2.3 and before allows a local attacker to execute arbitrary code via a crafted .exe, .sys, and .dll files...

Buffer overflow

Buffer Overflow vulnerability in mtrojnar osslsigncode v.2.3 and before allows a local attacker to execute arbitrary code via a crafted .exe, .sys, and .dll files...

UBUNTU-CVE-2023-36377

Buffer Overflow vulnerability in mtrojnar osslsigncode v.2.3 and before allows a local attacker to execute arbitrary code via a crafted .exe, .sys, and .dll files...

CVE-2023-36377

Buffer Overflow vulnerability in mtrojnar osslsigncode v.2.3 and before allows a local attacker to execute arbitrary code via a crafted .exe, .sys, and .dll files...

osslsigncode 安全漏洞

osslsigncode is a small tool by Michał Trojnara, a personal developer. It implements part of the functionality of the Microsoft tool signtool.exe. A security vulnerability exists in osslsigncode v.2.3 and earlier versions, which stems from the presence of a buffer overflow vulnerability that coul...

CVE-2023-36377

Buffer Overflow vulnerability in mtrojnar osslsigncode v.2.3 and before allows a local attacker to execute arbitrary code via a crafted .exe, .sys, and .dll files...

CVE-2023-36377

CVE-2023-36377 affects osslsigncode, a signing tool. A Buffer Overflow in osslsigncode v2.3 and earlier can allow local arbitrary code execution when signing crafted files (.exe/.sys/.dll). Multiple Debian LTS advisories document affected package osslsigncode and fixes via upgraded versions: Debi...

CVE-2023-36377

Buffer Overflow vulnerability in mtrojnar osslsigncode v.2.3 and before allows a local attacker to execute arbitrary code via a crafted .exe, .sys, and .dll files...

PT-2023-25562

Name of the Vulnerable Software and Affected Versions mtrojnar osslsigncode versions 2.3 and earlier Description The issue allows a local attacker to execute arbitrary code via crafted .exe, .sys, and .dll files. This is due to a Buffer Overflow vulnerability. Recommendations For mtrojnar...

Kaiten - A Undetectable Payload Generation

A Undetectable Payload Generation. This tool is for educational purpose only, usage of Kaiten for attacking targets without prior mutual consent is illegal. Developers assume no liability and are not responsible for any misuse or damage cause by this program. Official Kaiten Repository. What is i...

Exploit for Improper Certificate Validation in Microsoft

CVE-2020-0601 PoC for CVE-2020-0601 – Windows CryptoAPI Cry...