RpcInvestigator

RPC Investigator Lea nuestro anuncio del blog. RPC Investigator RPCI es una aplicación de interfaz de usuario de Windows Forms en .NET/C que ofrece una interfaz avanzada de descubrimiento y análisis para puntos finales RPC de Windows. La herramienta proporciona una interfaz visual alrededor de la...

cve-2020-1015

CVE-2020-1015 Prueba de concepto para CVE-2020-1015 Más detalles disponibles aquí Para compilar: 1. Crear un proyecto vacío de C++ en Visual Studio. 2. Agregar cve20201015.cpp y Source.idl al proyecto como archivos de origen. 3. Compilar Source.idl. Esto generará tres archivos: Sourcec.c, Sourceh...

CVE-2022-26809

CVE-2022-26809 Este repositorio es simplemente una investigación sobre el CVE; para un análisis más detallado, consulta aquí. ACTUALIZACIÓN:05/19 2022 Este análisis aún no ha sido terminado.... ACTUALIZACIÓN:05/22 2022 El Post de HuanGMz y el blog de corelight muestran el punto vulnerable real:...

CVE-2022-26809

CVE の説明 CVE-2022-26809 - Windows の中核コンポーネントRPCの脆弱性で、CVSS スコア 9.8 を獲得しましたが、これには理由があります。この攻撃は認証を必要とせず、ネットワーク経由でリモートから実行でき、RPC ランタイムをホストするプロセスに依存する RPC サービスの権限で、リモートコード実行RCEにつながる可能性があります。この重大なバグは、運が良ければ、パッチ未適用で SMB を実行している Windows...

RPC-Triage

RPC-Triage Static vs dynamic, read this first. It is worth being clear about the line between dynamic and static analysis up front: this tool does its ranking purely through static analysis. It reads the compiled MIDL / NDR structures straight out of the binary and never executes anything. Static...

CVE-2022-26810

Exploit RCE CVE-2022-26809 Descrizione della CVE CVE-2022-26809 - una falla in un componente principale di Windows RPC ha ricevuto un punteggio CVSS di 9.8 non senza motivo, poiché l'attacco non richiede autenticazione e può essere eseguito da remoto su una rete, e può portare all'esecuzione remo...

CVE-2026-42976

Missing authentication for critical function in Windows RPC API allows an authorized attacker to elevate privileges locally...

CVE-2026-42976

Missing authentication for critical function in Windows RPC API allows an authorized attacker to elevate privileges locally...

EUVD-2026-56604

Missing authentication for critical function in Windows RPC API allows an authorized attacker to elevate privileges locally...

PT-2026-70368

Name of the Vulnerable Software and Affected Versions Windows RPC API affected versions not specified Description Missing authentication for a critical function in the Windows RPC API allows an authorized attacker to elevate privileges locally. Remote Procedure Call RPC is a protocol that allows ...

CVE-2026-32085

Exposure of sensitive information to an unauthorized actor in Windows Remote Procedure Call allows an authorized attacker to disclose information locally...

Remote Access Management service/API (RPC server) Elevation of Privilege Vulnerability

Improper access control in Windows RPC API allows an authorized attacker to elevate privileges locally...

EUVD-2008-0778

Malware in sbrugna...

PT-2025-15520 · Microsoft · Windows Rpc Endpoint Mapper Service +1

Name of the Vulnerable Software and Affected Versions: Windows RPC Endpoint Mapper Service affected versions not specified Description: The issue is related to a use after free vulnerability in the RPC Endpoint Mapper Service, which allows an authorized attacker to elevate privileges locally. Thi...

QNAP QTS / QuTS hero Vulnerabilities in Samba (QSA-23-20)

The version of QNAP QTS / QuTS hero installed on the remote host is affected by multiple vulnerabilities as referenced in the QSA-23-20 advisory. - A path traversal vulnerability was identified in Samba when processing client pipe names connecting to Unix domain sockets within a private directory...

Ubuntu 20.04 LTS / 22.04 LTS / 23.04 : Samba vulnerabilities (USN-6425-1)

The remote Ubuntu 20.04 LTS / 22.04 LTS / 23.04 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6425-1 advisory. Sri Nagasubramanian discovered that the Samba aclxattr VFS module incorrectly handled read-only files. When Samba is configured to...

CVE-2023-28297

Windows Remote Procedure Call Service RPCSS Elevation of Privilege Vulnerability...

Microsoft Windows RPC API 安全漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from the U.S.-based Microsoft Corporation Microsoft. A security vulnerability exists in the Microsoft Windows RPC API. The following products and editions are affected:Windows 10 Version 1809 for 32-bit Systems,Windows ...

Microsoft Windows RPC API 安全漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from the U.S.-based Microsoft Corporation Microsoft. A security vulnerability exists in the Microsoft Windows RPC API. The following products and editions are affected:Windows 10 Version 1809 for 32-bit Systems,Windows ...

Critical Remote Code Execution Vulnerabilities in Windows RPC Runtime

Microsoft’s April 2022 Patch Tuesday introduced patches to more than a hundred new vulnerabilities in various components. Three critical vulnerabilities were found and patched in Windows RPC Remote Procedure Call runtime: CVE-2022-24492 and CVE-2022-24528 discovered by Yuki Chen with Cyber KunLun...