CVE-2023-28218

Reporte CVE-2023-28218 Resumen del error Error que conduce a una escalada de privilegios en el kernel de Windows. El error aparece en el controlador Windows Ancrillary Function Driver for WinSock AFD.sys. El error fue publicado en el parche del 11/04/2023. Tiene una puntuación CVSS:3.1 7.0 / 6.1 ...

CVE-2023-36424

Información ============== Corrupción del Pool del Kernel de Windows clfs.sys para Escalada de Privilegios. CVE-2023-36424 Este repositorio contiene análisis técnico y exploit funcional. Autor: Nassim Asrir @p1k4l4 || https://www.linkedin.com/in/nassim-asrir-b73a57122/ Vulnerabilidad...

Pool-Overflow-CVE-2021-31956

Pool-Overflow-CVE-2021-31956...

CVE-2025-21333-POC

CVE-2025-21333-POC Prueba de concepto que explota CVE-2025-21333 en vkrnlintvsp.sys no muy fiable, véase la sección Requisitos y Limitaciones. En la sección de Referencias se encuentran recursos muy útiles para quienes quieran jugar con el exploit. Un análisis detallado de la vulnerabilidad y el...

Exploit-CVE-2017-6008

Exploit-CVE-2017-6008 CVE-2017-6008 es una vulnerabilidad en el escáner de HitmanPro que permite la escalada de privilegios explotando un desbordamiento de búfer del pool del kernel. Los exploits aquí incluidos utilizan el ataque Quota Process Pointer Overwrite como se describe en el documento de...

Windows-Kernel-Exploitation

1. Non-Paged Pool Overflow Exploitation with Named Pipes Techniques based on named pipes for pool overflow exploitation demonstrated on CVE-2020-17087 and an off-by-one overflow 2. Segment Heap VS Allocator Metadata Abuse Techniques for turning a potentially limited write primitive eg a pool...

CVE-2016-3309_Reloaded

Kernel Exploitation Case Study - "Wild" Pool Overflow on Win10 x64 RS2 CVE-2016-3309 Reloaded This Github repo contains exploits for the recently-patched win32kfull!bFill vulnerability. Executing the Palette or Bitmap exploit will give you SYSTEM privileges on the affected system. The exploits...

CVE-2026-16174 Netskope Endpoint DLP Driver Integer Overflow Leading to Kernel Pool Overflow

Netskope was notified about a potential gap in Netskope Endpoint DLP EPDLP running on Windows systems. Successful exploitation of the gap could potentially allow a privileged user to send a crafted message to the EPDLP process port to trigger an integer overflow, leading to memory corruption...

CVE-2026-16174 Netskope Endpoint DLP Driver Integer Overflow Leading to Kernel Pool Overflow

Netskope was notified about a potential gap in Netskope Endpoint DLP EPDLP running on Windows systems. Successful exploitation of the gap could potentially allow a privileged user to send a crafted message to the EPDLP process port to trigger an integer overflow, leading to memory corruption...

Windows-Non-Paged-Pool-Overflow-Exploitation

Índice Índice Introdução Introdução a Named Pipes Exploração Espalhamento do pool não paginado Divulgação de memória/Leitura arbitrária Controle completo sobre os dados de transbordo Controle limitado sobre os dados de transbordo Escrita arbitrária Liberação arbitrária de objetos...

SecureAgeExploit

SecureAge Responsible Disclosure PoCs This repository contain...

CVE-2025-13032

Double fetch in sandbox kernel driver in Avast/AVG Antivirus 25.3 on windows allows local attacker to escalate privelages via pool overflow...

EUVD-2025-93542

Double fetch in sandbox kernel driver in Avast/AVG Antivirus 25.3 on windows allows local attacker to escalate privelages via pool overflow...

CVE-2025-13032

Double fetch in sandbox kernel driver in Avast/AVG Antivirus 25.3 on windows allows local attacker to escalate privelages via pool overflow...

CVE-2025-13032

Double fetch in sandbox kernel driver in Avast/AVG Antivirus 25.3 on windows allows local attacker to escalate privelages via pool overflow...

CVE-2025-13032

Double fetch in sandbox kernel driver in Avast/AVG Antivirus 25.3 on windows allows local attacker to escalate privelages via pool overflow...

CVE-2025-13032

Double fetch in sandbox kernel driver in Avast/AVG Antivirus 25.3 on windows allows local attacker to escalate privelages via pool overflow...

CVE-2025-13032

CVE-2025-13032 affects Avast/AVG Antivirus on Windows prior to version 25.3. A double-fetch race condition in the sandbox kernel driver can allow a local attacker to escalate privileges via a pool overflow. Public sources in connected documents corroborate a kernel-driver vulnerability leading to...

CVE-2025-13032: Time-of-check Time-of-use (TOCTOU) Race Condition

Double fetch in sandbox kernel driver in Avast/AVG Antivirus 25.3 on windows allows local attacker to escalate privelages via pool overflow...

PT-2025-46368

Name of the Vulnerable Software and Affected Versions Avast/AVG Antivirus versions prior to 25.3 Description A double fetch race condition exists in the Avast/AVG kernel sandbox driver on Windows. This condition allows a local attacker to escalate privileges through a pool overflow. The issue...