HPHardwareDiagnostics-PoC

HPHardwareDiagnostics-PoC 针对 HP Hardware Diagnostics 的 EtdSupp 驱动程序的 PoC 漏洞利用 CVE-2023-32673/PSR-2022-0209 构建 在 Visual Studio 2019 中打开 以 Release 模式构建 欣赏（或者不） 摘要 一个非常简单的小驱动程序，具备虚拟内存读写功能，没有 MmMapIoSpace 等。 免责声明 无糖汽水很难喝。...

Windows Exploitation Tricks: Trapping Virtual Memory Access (2025 Update)

Posted by James Forshaw, Google Project Zero Back in 2021 I wrote a blog post about various ways you can build a virtual memory access trap primitive on Windows. The goal was to cause a reader or writer of a virtual memory address to halt for a significant e.g. 1 or more seconds amount of time,...

PT-2024-32204

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the Linux kernel, where the raw copy to,from user functions do not call access ok, allowing userspace to access any virtual memory address. This vulnerability is...

Windows Exploitation Tricks: Trapping Virtual Memory Access

Posted by James Forshaw, Project Zero This blog is a continuation of my series of Windows exploitation tricks. This one describes an exploitation trick I’ve been trying to develop for years, succeeding mostly, more on that later on the latest versions of Windows 10. It’s a trick to trap access to...

SUSE-SU-2019:1769-1 Security update for the Linux Kernel (Live Patch 1 for SLE 15 SP1)

This update for the Linux Kernel 4.12.14-1974 fixes one issue. The following security issue was fixed: - CVE-2019-12817: arch/powerpc/mm/mmucontextbook3s64.c in the Linux kernel for powerpc had a bug where unrelated processes may be able to read/write to one another's virtual memory under certain...

CVE-2019-12817

arch/powerpc/mm/mmucontextbook3s64.c in the Linux kernel before 5.1.15 for powerpc has a bug where unrelated processes may be able to read/write to one another's virtual memory under certain conditions via an mmap above 512 TB. Only a subset of powerpc systems are affected...