The Basics of Exploit Development 1: Win32 Buffer Overflows

In this article we will cover the creation of an exploit for a 32-bit Windows application vulnerable to a buffer overflow using X64dbg and the associated ERC plugin. As this is the first article in this series, we will be looking at an exploit where we have a complete EIP overwrite and ESP points...

The vulnerability of the Windows operating system’s search indexer allows a hacker to enhance their privileges.

The vulnerability of the Windows Search Indexer exists due to errors in memory object handling. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...

The vulnerability of Windows operating systems, related to errors in handling hard links, allows a perpetrator to trigger a service failure.

The vulnerability of Windows operating systems is related to errors in handling hard links. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the Hyper-V hardware virtualization system in the Windows operating system allows a hacker to trigger a service failure.

The vulnerability of the Hyper-V hardware virtualization technology in the Windows operating system exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2019-14601

Improper permissions in the installer for IntelR RWC 3 for Windows before version 7.010.009.000 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2020-0639

An information disclosure vulnerability exists in the Windows Common Log File System CLFS driver when it fails to properly handle objects in memory, aka 'Windows Common Log File System Driver Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-0615...

The vulnerability of the Hyper-V hardware virtualization system and the Windows operating system allows a perpetrator to execute arbitrary code.

The vulnerability of the Hyper-V hardware virtualization technology in the Windows operating system is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of the Windows Printer Service in the Windows operating system allows a hacker to increase their privileges.

The vulnerability of the Windows Printer Service in the Windows operating system arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...

The vulnerability of the Netlogon service in the Windows operating system allows a perpetrator to circumvent existing security restrictions and execute a “man-in-the-middle” attack.

The vulnerability of the Netlogon service in the Windows operating system exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions and execute a “man-in-the-middle” type attack...

Microsoft Windows GDI Information Leakage Vulnerability (CNVD-2020-02185)

Microsoft Windows is a family of operating systems from Microsoft. An information leakage vulnerability exists in Microsoft Windows GDI. An attacker could exploit this vulnerability by obtaining information through a variety of methods, including tricking a user into opening a specially crafted...

Microsoft Windows Remote Desktop Protocol Information Disclosure Vulnerability

Microsoft Windows XP is a suite of operating systems for use with PCs and tablets from Microsoft Corporation USA.Remote Desktop Protocol is a remote desktop protocol. An information disclosure vulnerability exists in Remote Desktop Protocol in the SP3 version of Microsoft Windows XP, which arises...

The vulnerability of the Hyper-V hardware virtualization system in the Windows operating system allows a hacker to trigger a service failure.

The vulnerability of the Hyper-V hardware virtualization system and the Windows operating system is related to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures through a specially created application...

The vulnerability of the Windows Servicing Stack component of the Windows operating system allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Windows Servicing Stack component of the Windows operating system is related to errors in handling symbolic links. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of the Hyper-V hardware virtualization system in the Windows operating system allows a hacker to execute arbitrary code.

The vulnerability of the Hyper-V hardware virtualization system and the Windows operating system is related to insufficient verification of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created application from a remote location...

The vulnerability of the Hyper-V hardware virtualization system in the Windows operating system allows a hacker to execute arbitrary code.

The vulnerability of the Hyper-V hardware virtualization system and the Windows operating system is related to insufficient verification of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created application from a remote location...

The vulnerability of the Netlogon service in the Windows operating system allows a hacker to circumvent existing security restrictions.

The vulnerability of the Netlogon service in the Windows operating system is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions using a specially crafted request...

The vulnerability of the Hyper-V hardware virtualization system in the Windows operating system allows a hacker to execute arbitrary code.

The vulnerability of the Hyper-V hardware virtualization system and the Windows operating system is related to insufficient verification of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created application from a remote location...

The vulnerability of the Hyper-V hardware virtualization system in the Windows operating system allows a hacker to trigger a service failure.

The vulnerability of the Hyper-V hardware virtualization system and the Windows operating system is related to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures through a specially created application...

The vulnerability of the DirectWrite programming interface in Windows operating systems allows attackers to gain unauthorized access to protected information.

The vulnerability of the DirectWrite programming interface in Windows operating systems is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created web page or document...

CVE-2019-15511

An exploitable local privilege escalation vulnerability exists in the GalaxyClientService installed by GOG Galaxy. Due to Improper Access Control, an attacker can send unauthenticated local TCP packets to the service to gain SYSTEM privileges in Windows system where GOG Galaxy software is...