103 matches found
CVE-2015-1769
CVE-2015-1769 PoC pour CVE-2015-1769 Fichier VHD pour reproduire CVE-2015-1769. Le VHD ne contient pas de payload réel, seulement notepad.exe. Lors du montage, inspectez le journal système pour l'erreur de blocage signalée si le dernier correctif est installé. Le script batch montre comment le li...
Volumiser
Volumiser Введение Volumiser — это инструмент командной строки и интерактивный консольный интерфейс для перечисления, просмотра и извлечения файлов из распространённых форматов образов жёстких дисков виртуальных машин. Инструмент был написан для решения распространённой проблемы, когда массивные...
cve-2025-24985
cve-2025-24985 计算 VHD 文件的簇数量以检测溢出。 支持的引导扇区： MBR GPT 用法 root@kitploit: python -m cve202524985 -f 安装 Nix root@kitploit: 使用 direnv： direnv allow 或不用 direnv： nix develop Peotry 进行中 Docker 进行中 待办事项： 使用 poetry 自动构建 libvhdi...
frostbyte
FrostByte Progolue: In the past few days I've been experimenting with the AppDomain manager injection technique had a decent success with it in my previous Red Team engagements against certain EDRs. Although, this is really good for initial access vector, I wanted to release a POC which will help...
libvhdi
libvhdi는 Virtual Hard Disk VHD 이미지 형식에 접근하기 위한 라이브러리입니다. 프로젝트 정보: 상태: alpha 라이선스: LGPL-3.0-or-later 읽기 지원 형식: Virtual Hard Disk 버전 1 VHD Virtual Hard Disk 버전 2 VHDX 지원되는 이미지 유형: 고정 크기 하드 디스크 이미지 동적 크기또는 스파스 하드 디스크 이미지 차등또는 differencing 하드 디스크 이미지 실행 취소 디스크 이미지.vud도 차등 이미지라는 점에 유의하세요. 자세한 정보는 다음을...
CVE-2026-59125
Use after free in Virtual Hard Disk VHD Miniport Driver allows an authorized attacker to elevate privileges locally...
CVE-2026-59125
Use after free in Virtual Hard Disk VHD Miniport Driver allows an authorized attacker to elevate privileges locally...
CVE-2026-59125 Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability
...
EUVD-2026-56610
Use after free in Virtual Hard Disk VHD Miniport Driver allows an authorized attacker to elevate privileges locally...
CVE-2026-59125
Use-after-free in the Virtual Hard Disk (VHD) Miniport Driver can allow an authorized local attacker to elevate privileges. The vulnerability is described as a local privilege escalation with high impact to confidentiality, integrity, and availability. The CVSS vector indicates LOCAL access, user...
CVE-2026-59125 Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability
...
Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability
Use after free in Virtual Hard Disk VHD Miniport Driver allows an authorized attacker to elevate privileges locally...
PT-2026-70405
Name of the Vulnerable Software and Affected Versions Virtual Hard Disk VHD Miniport Driver affected versions not specified Description A use-after-free issue exists in the Virtual Hard Disk VHD Miniport Driver. This allows an authorized attacker to elevate privileges locally on the system...
Command Injection
Overview Affected versions of this package are vulnerable to Command Injection via the Resize-VHD PowerShell command construction process. An attacker can execute arbitrary PowerShell commands with the privileges of the affected process by supplying a crafted VM image path containing malicious...
PowerShell Command Injection in Podman HyperV Machine
Summary A command injection vulnerability exists in Podman's HyperV machine backend. The VM image path is inserted into a PowerShell double-quoted string without sanitization, allowing $ subexpression injection. Affected Code File: pkg/machine/hyperv/stubber.go:647 go resize :=...
Command Injection
Overview Affected versions of this package are vulnerable to Command Injection via the Resize-VHD PowerShell command construction process. An attacker can execute arbitrary PowerShell commands with the privileges of the affected process by supplying a crafted VM image path containing malicious...
Command Injection
Overview Affected versions of this package are vulnerable to Command Injection via the Resize-VHD PowerShell command construction process. An attacker can execute arbitrary PowerShell commands with the privileges of the affected process by supplying a crafted VM image path containing malicious...
GHSA-HC8W-H2MF-HP59 PowerShell Command Injection in Podman HyperV Machine
Summary A command injection vulnerability exists in Podman's HyperV machine backend. The VM image path is inserted into a PowerShell double-quoted string without sanitization, allowing $ subexpression injection. Affected Code File: pkg/machine/hyperv/stubber.go:647 go resize :=...