25 matches found
CVE
CVE STAR Labs チームが発見した、または他の研究者が発見したさまざまな CVE に対する概念実証（PoC）エクスプロイトスクリプト集です。 CVE-2026-53264 対象: Linux カーネル バージョン: CentOS 9 カーネル バージョン 5.14.0-721 エクスプロイト作成者: Lee Jia Jie CVE-2025-29824 対象: Windows 共通ログ ファイル システム ドライバー バージョン: Windows 11 23H2 エクスプロイト作成者: Ong How Chong CVE-2024-26230 対象: Windows テレフォニ...
CVE-2023-36900
CVE-2023-36900 이 취약점에 대해: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36900. 분석 보고서 .blf 확장자를 위한 Imhex 패턴 CLFS 구조체 선언 헤더 서비스 거부 개념 증명 blf 확장자를 위한 Imhex 패턴 이전: 이후: 패턴이 이상적이지는 않지만, 유용할 수 있습니다. 링크 사용 방법: root@kitploit: File-Import-Pattern File...
CVE-2025-29824
🔥 CVE-2025-29824 제로데이 익스플로잇 🔥 사이버 공간의 어두운 심장에 오신 것을 환영합니다. 여기서 윤리적 경계는 금지된 지식의 무게 아래 휘어집니다. 이 저장소는 2025년 4월 8일 Microsoft가 패치한 Windows CLFS공통 로그 파일 시스템 커널 드라이버의 UAF사용 후 해제 취약점인 CVE-2025-29824 에 대한 개념 증명PoC 익스플로잇을 포함합니다. 이 익스플로잇은 W32PROCESS 처리의 경쟁 조건을 이용하여 일반 사용자에서 SYSTEM으로 권한을 상승시킵니다. 최고 수준의 사이버 보...
CVE-2021-43224-POC
CVE-2021-43224-POC Windows 共通ログ ファイル システム ドライバー POC おそらく CVE-2021-43226 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-43226 単なるBSODです !!! windows 20H2 ver 19042.1387 でテスト済み...
CVE-2025-29824-Exploit
🚨 CVE-2025-29824 익스플로잇: PipeMagic 랜섬웨어 체인 📌 중요 취약점 개요 Windows CLFS 권한 상승 결함 → SYSTEM 권한 탈취 활성 랜섬웨어 공격에서 Storm-2460 위협 그룹에 의해 악용됨 🖥️ 영향을 받는 시스템 시스템 목록 펼치기 🧩 익스플로잇 체인 워크플로 graph LR A초기 접근 --|certutil| B악성 MSBuild 페이로드 B -- CPipeMagic 트로이목마 C --|CVE-2025-29824| DCLFS 커널 익스플로잇 D --|RtlSetAllBits| E토큰...
SOC335-CVE-2024-49138-Exploitation-Detected
CVE-2024-49138 エクスプロイト検出 このプロジェクトでは、LetsDefendプラットフォーム上のシミュレートされたセキュリティインシデントを調査しました。このインシデントでは、Windows Common Log File System CLFS ドライバーの特権昇格脆弱性であるCVE-2024-49138の悪用によりWindowsマシンが侵害されました。攻撃者はこの脆弱性を利用して特権を昇格させ、RDP経由でリモートアクセスを確立しました。 主な成果 特定した 異常なプロセス動作を通じてCVE-2024-49138の悪用を。 分析した 検出を回避するための偽装プロセス...
letsdefend-cve-2024-49138-investigation
LetsDefend 調査: CVE-2024-49138 🔍 概要 LetsDefend を使用した実践的な SOC 調査およびインシデントレスポンスシミュレーション — Windows CLFS ドライバーにおける特権昇格の脆弱性である CVE-2024-49138 の実世界での悪用に焦点を当てています。 📅 イベント詳細 イベント ID : 313 インシデントタイプ : 特権昇格 イベント時間 : 2025年1月22日 ホスト名 : Victor IP アドレス : 172.16.17.207 悪意のあるバイナリ : svohost.exe 親プロセス :...
PT-2026-70490
Name of the Vulnerable Software and Affected Versions Windows Common Log File System Driver affected versions not specified Description A time-of-check time-of-use toctou race condition exists in the Windows Common Log File System Driver. This occurs when a system checks a condition such as a...
CVE-2026-40397
Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally...
Microsoft Windows Common Log File System Driver 数字错误漏洞
The Microsoft Windows Common Log File System Driver is a high-performance, general-purpose log file system API provided by Microsoft. It allows specialized client applications to utilize this subsystem, enabling multiple clients to share it for optimized log access. The Microsoft Windows Common L...
Exploit for Out-of-bounds Read in Microsoft
!CVEhttps://img.shields.io/badge/CVE-2025--60709-FF0000?styl...
EUVD-2020-2151
Malware in sbrugna...
EUVD-2017-17573
Malware in sbrugna...
Dissecting PipeMagic: Inside the architecture of a modular backdoor framework
Among the plethora of advanced attacker tools that exemplify how threat actors continuously evolve their tactics, techniques, and procedures TTPs to evade detection and maximize impact, PipeMagic, a highly modular backdoor used by Storm-2460 masquerading as a legitimate open-source ChatGPT Deskto...
Exploit for Use After Free in Microsoft
🚨 CVE-2025-29824 Exploit: PipeMagic Ransomware Chain 📌 Critical...
VulnCheck KEV: CVE-2025-32706
Microsoft Windows Common Log File System CLFS Driver contains a heap-based buffer overflow vulnerability that allows an authorized attacker to elevate privileges locally...
Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability
Microsoft Windows Common Log File System CLFS Driver contains a heap-based buffer overflow vulnerability that allows an authorized attacker to elevate privileges locally...
Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability
Microsoft Windows Common Log File System CLFS Driver contains a use-after-free vulnerability that allows an authorized attacker to elevate privileges locally...
The vulnerability of the Windows Common Log File System (CLFS) driver in Windows operating systems allows a hacker to elevate their privileges to the SYSTEM level.
The vulnerability of the Windows Common Log File System CLFS driver in Windows operating systems is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow an attacker to elevate their privileges to the SYSTEM level...
The vulnerability of the Windows Common Log File System (CLFS) driver in Windows operating systems allows a hacker to gain elevated privileges.
The vulnerability of the Windows Common Log File System CLFS driver in Windows operating systems is related to incorrect handling of symbolic links before accessing the file. Exploiting this vulnerability can allow an attacker to gain increased privileges...