CVE-2022-34715-POC

CVE-2022-34715-POC CVE-2022-34715-POC pcap nfssvr.sys versión 10.0.20348.825 0: kd r rax=0000000080000001 rbx=0000000000000000 rcx=ffffde87fe461150 rdx=0000000000000000 rsi=fffff8040811aa50 rdi=0000000000000008 rip=fffff80408067dbb rsp=ffffb400eb3e2630 rbp=ffffb400eb3e26b9 r8=0000001000000020...

CVE-2025-21333-POC

CVE-2025-21333-POC Prueba de concepto que explota CVE-2025-21333 en vkrnlintvsp.sys no muy fiable, véase la sección Requisitos y Limitaciones. En la sección de Referencias se encuentran recursos muy útiles para quienes quieran jugar con el exploit. Un análisis detallado de la vulnerabilidad y el...

CVE-2025-21333

CVE-2025-21333 Hyper-V NT Kernel Integration VSP vkrnlintvsp.sys Paged Pool heap overflow → Local Privilege Escalation LPE. This directory contains lab PoC source code based on MrAle98/CVE-2025-21333-POC, including a local patch. 1. Vulnerability Summary Item| Content ---|--- CVE| CVE-2025-21333...

CVE-2023-36407

CVE-2023-36407 This is poc for CVE-2023-36407, Hyper-V Elevation of Privilege Vulnerability. https://github.com/pwndorei/CVE-2023-36407/assets/96749184/a8ef87d3-e0d0-40e5-9b23-35ab057a9c78 Vulnerability OOB Read/Write from/to Non-paged Pool via winhvr.sys!WinHvGet/SetVpState Reproduction Steps...

Windows-Kernel-Exploitation

1. Non-Paged Pool Overflow Exploitation with Named Pipes Techniques based on named pipes for pool overflow exploitation demonstrated on CVE-2020-17087 and an off-by-one overflow 2. Segment Heap VS Allocator Metadata Abuse Techniques for turning a potentially limited write primitive eg a pool...

Windows-Non-Paged-Pool-Overflow-Exploitation

Índice Índice Introdução Introdução a Named Pipes Exploração Espalhamento do pool não paginado Divulgação de memória/Leitura arbitrária Controle completo sobre os dados de transbordo Controle limitado sobre os dados de transbordo Escrita arbitrária Liberação arbitrária de objetos...

CVE-2026-23764

VB-Audio Voicemeeter, Voicemeeter Banana, and Voicemeeter Potato versions ending in 1.1.1.9, 2.1.1.9, and 3.1.1.9 and earlier, respectively, as well as VB-Audio Matrix and Matrix Coconut versions ending in 1.0.2.2 and 2.0.2.2 and earlier, respectively, contain a vulnerability in their virtual aud...

CVE-2026-23762

VB-Audio Voicemeeter, Voicemeeter Banana, and Voicemeeter Potato versions ending in 1.1.1.9, 2.1.1.9, and 3.1.1.9 and earlier, respectively, as well as VB-Audio Matrix and Matrix Coconut versions ending in 1.0.2.2 and 2.0.2.2 and earlier, respectively, contain a vulnerability in their virtual aud...

CVE-2026-23764

VB-Audio Voicemeeter, Voicemeeter Banana, and Voicemeeter Potato versions ending in 1.1.1.9, 2.1.1.9, and 3.1.1.9 and earlier, respectively, as well as VB-Audio Matrix and Matrix Coconut versions ending in 1.0.2.2 and 2.0.2.2 and earlier, respectively, contain a vulnerability in their virtual aud...

CVE-2026-23762

VB-Audio Voicemeeter, Voicemeeter Banana, and Voicemeeter Potato versions ending in 1.1.1.9, 2.1.1.9, and 3.1.1.9 and earlier, respectively, as well as VB-Audio Matrix and Matrix Coconut versions ending in 1.0.2.2 and 2.0.2.2 and earlier, respectively, contain a vulnerability in their virtual aud...

CVE-2026-23762 VB-Audio Voicemeeter & Matrix Drivers DoS via MmMapLockedPagesSpecifyCache

VB-Audio Voicemeeter, Voicemeeter Banana, and Voicemeeter Potato versions ending in 1.1.1.9, 2.1.1.9, and 3.1.1.9 and earlier, respectively, as well as VB-Audio Matrix and Matrix Coconut versions ending in 1.0.2.2 and 2.0.2.2 and earlier, respectively, contain a vulnerability in their virtual aud...

CVE-2026-23762

CVE-2026-23762 affects VB-Audio Voicemeeter, Voicemeeter Banana, Voicemeeter Potato (and Matrix variants) with vulnerable virtual audio drivers (vbvoicemeetervaio64*.sys, vbmatrixvaio64*.sys, vbaudio_vmauxvaio*.sys, vbaudio_vmvaio*.sys, vbaudio_vmvaio3*.sys). The flaw maps non-paged pool memory i...

CVE-2026-23764 VB-Audio Voicemeeter & Matrix Drivers DoS via Corrupted IoAllocateMdl Length

VB-Audio Voicemeeter, Voicemeeter Banana, and Voicemeeter Potato versions ending in 1.1.1.9, 2.1.1.9, and 3.1.1.9 and earlier, respectively, as well as VB-Audio Matrix and Matrix Coconut versions ending in 1.0.2.2 and 2.0.2.2 and earlier, respectively, contain a vulnerability in their virtual aud...

CVE-2026-23764

CVE-2026-23764 affects VB-Audio Voicemeeter, Voicemeeter Banana, Voicemeeter Potato, and related Matrix drivers (Matrix Coconut) up to specific early 1.x/2.x versions. The issue is a local-privilege vulnerability in their virtual audio drivers where non-paged pool is mapped to user space; an expo...

CVE-2026-23764 VB-Audio Voicemeeter & Matrix Drivers DoS via Corrupted IoAllocateMdl Length

VB-Audio Voicemeeter, Voicemeeter Banana, and Voicemeeter Potato versions ending in 1.1.1.9, 2.1.1.9, and 3.1.1.9 and earlier, respectively, as well as VB-Audio Matrix and Matrix Coconut versions ending in 1.0.2.2 and 2.0.2.2 and earlier, respectively, contain a vulnerability in their virtual aud...

Exploit for Improper Input Validation in Microsoft

CVE-2023-36407 This is poc for CVE-2023-36407, Hyper-V Elevat...

Event 1530 is logged and ProfSvc leaks paged pool memory and handles in Windows 8.1 or Windows Server 2012 R2

Event 1530 is logged and ProfSvc leaks paged pool memory and handles in Windows 8.1 or Windows Server 2012 R2 This article describes an issue in which event 1530 is logged, and user profile service ProfSvc leaks paged pool memory and handles in Windows 8.1, Windows RT 8.1, or Windows Server 2012...

CVE-2018-3666

Driver module in Intel Smart Sound Technology before version 9.21.00.3541 potentially allows a local attacker to execute arbitrary code as administrator via a non-paged pool overflow...

Buffer overflow

Driver module in Intel Smart Sound Technology before version 9.21.00.3541 potentially allows a local attacker to execute arbitrary code as administrator via a non-paged pool overflow...

CVE-2018-3666

Driver module in Intel Smart Sound Technology before version 9.21.00.3541 potentially allows a local attacker to execute arbitrary code as administrator via a non-paged pool overflow...