120 matches found
CVE-2025-21333-POC
CVE-2025-21333-POC Prueba de concepto que explota CVE-2025-21333 en vkrnlintvsp.sys no muy fiable, véase la sección Requisitos y Limitaciones. En la sección de Referencias se encuentran recursos muy útiles para quienes quieran jugar con el exploit. Un análisis detallado de la vulnerabilidad y el...
Exploit-CVE-2017-6008
Exploit-CVE-2017-6008 The CVE-2017-6008 is a vulnerability in the HitmanPro scan that allows privilege escalation by exploiting a kernel pool buffer overflow. The exploits here use the Quota Process Pointer Overwrite attack as described in the Tarjei Mandt's paper Also, the exploits use my Pool...
CVE-2023-36424
Información ============== Corrupción del Pool del Kernel de Windows clfs.sys para Escalada de Privilegios. CVE-2023-36424 Este repositorio contiene análisis técnico y exploit funcional. Autor: Nassim Asrir @p1k4l4 || https://www.linkedin.com/in/nassim-asrir-b73a57122/ Vulnerabilidad...
Pool-Overflow-CVE-2021-31956
Pool-Overflow-CVE-2021-31956...
CVE-2023-28218
报告 CVE-2023-28218 漏洞概述 导致 Windows 内核权限提升的漏洞。该漏洞出现在驱动程序 Windows Ancillary Function Driver for WinSock AFD.sys 中。该漏洞在 2023 年 4 月 11 日的补丁中修复。CVSS 评分为 3.1，为 7.0 / 6.1，被评为 Important。 漏洞描述 漏洞类型：Double fetch 和 Integer overflow 导致 pool overflow。 漏洞发生在函数 Afd!AfdComputeCMSGLength 和 Afd!AfdCopyCMSGBuffer 中。...
Windows-Kernel-Exploitation
1. Non-Paged Pool Overflow Exploitation with Named Pipes Techniques based on named pipes for pool overflow exploitation demonstrated on CVE-2020-17087 and an off-by-one overflow 2. Segment Heap VS Allocator Metadata Abuse Techniques for turning a potentially limited write primitive eg a pool...
CVE-2016-3309_Reloaded
Estudio de Caso de Explotación del Kernel - Desbordamiento de Pool "Salvaje" en Win10 x64 RS2 CVE-2016-3309 Recargado Este repositorio de Github contiene exploits para la vulnerabilidad win32kfull!bFill recientemente parcheada. Ejecutar el exploit de Palette o de Bitmap te otorgará privilegios de...
Windows-Non-Paged-Pool-Overflow-Exploitation
Índice Índice Introdução Introdução a Named Pipes Exploração Espalhamento do pool não paginado Divulgação de memória/Leitura arbitrária Controle completo sobre os dados de transbordo Controle limitado sobre os dados de transbordo Escrita arbitrária Liberação arbitrária de objetos...
SecureAgeExploit
SecureAge Responsible Disclosure PoCs This repository contain...
CVE-2025-13032
Double fetch in sandbox kernel driver in Avast/AVG Antivirus 25.3 on windows allows local attacker to escalate privelages via pool overflow...
EUVD-2025-93542
Double fetch in sandbox kernel driver in Avast/AVG Antivirus 25.3 on windows allows local attacker to escalate privelages via pool overflow...
CVE-2025-13032
Double fetch in sandbox kernel driver in Avast/AVG Antivirus 25.3 on windows allows local attacker to escalate privelages via pool overflow...
CVE-2025-13032
Double fetch in sandbox kernel driver in Avast/AVG Antivirus 25.3 on windows allows local attacker to escalate privelages via pool overflow...
CVE-2025-13032
Double fetch in sandbox kernel driver in Avast/AVG Antivirus 25.3 on windows allows local attacker to escalate privelages via pool overflow...
CVE-2025-13032
Double fetch in sandbox kernel driver in Avast/AVG Antivirus 25.3 on windows allows local attacker to escalate privelages via pool overflow...
CVE-2025-13032
CVE-2025-13032 affects Avast/AVG Antivirus on Windows prior to version 25.3. A double-fetch race condition in the sandbox kernel driver can allow a local attacker to escalate privileges via a pool overflow. Public sources in connected documents corroborate a kernel-driver vulnerability leading to...
PT-2025-46368
Name of the Vulnerable Software and Affected Versions Avast/AVG Antivirus versions prior to 25.3 Description A double fetch race condition exists in the Avast/AVG kernel sandbox driver on Windows. This condition allows a local attacker to escalate privileges through a pool overflow. The issue...
Gen Digital Antivirus 安全漏洞
Gen Digital Antivirus is an antivirus software from Gen Digital, Inc. A security vulnerability exists in Gen Digital Antivirus versions prior to 25.3, which stems from a double-acquisition issue in the Windows Sandbox kernel driver that could lead to a local attacker achieving elevation of...