Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Microsoft

This repository is a proof-of-concept PoC exploit for CVE-2020-0796, also known as SMBGhost, a pre-authentication remote code execution vulnerability in Windows SMBv3. The exploit is written in Python and uses the SMB protocol to exploit the vulnerability. The PoC is intended for demonstration...

Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Microsoft

CVE-2020-0796 PoC exploit for SMBGhost vulnerability in Windows 10 1903/1909's SMB3 compression capability. This PoC connects to the target host, compresses the authentication request with a bad offset field set in the transformation header, causing the decompressor to buffer overflow and crash t...

The vulnerability of the Console Window Host component in Microsoft Windows operating systems allows a hacker to bypass security restrictions.

The vulnerability of the Console Window Host component in Microsoft Windows operating systems is related to security configuration errors. Exploiting this vulnerability can allow an attacker to circumvent security restrictions...

Denial of service

Windows Denial of Service Vulnerability...

CVE-2021-38631

Windows Remote Desktop Protocol RDP Information Disclosure Vulnerability...

CVE-2021-26443

Microsoft Virtual Machine Bus VMBus Remote Code Execution Vulnerability...

BlackBerry UEM 安全漏洞

Blackberry BlackBerry UEM is a cross-device platform for device, application and content management from Blackberry Canada. The platform allows organizations to view all users, devices, applications and policies in their environment through a single, integrated management panel. A security...

The vulnerability of the Mount Manager for Windows operating systems allows a perpetrator to escalate their privileges and execute arbitrary code.

The vulnerability of the Mount Manager for Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges and execute arbitrary code by connecting a malicious USB device...

HP Print and Scan Doctor 安全漏洞

HP Print and Scan Doctor is a free tool for Windows from Hewlett-Packard HP that helps solve printing and scanning problems. HP Print and Scan Doctor has a security vulnerability that could be exploited by an attacker to potentially allow local privilege escalation...

The vulnerability of the Microsoft DWM Core Library in the Windows operating system allows attackers to escalate their privileges.

The vulnerability of the Microsoft DWM Core Library in the Windows operating system is related to privilege management errors. Exploiting this vulnerability can allow an attacker to elevate their privileges...

Exploit for Use After Free in Microsoft

CallbackHell Exploit for CVE-2021-40449 Win32k - LPE - Ca...

The vulnerability of the Windows operating system, related to the exposure of protected information, allows a perpetrator to gain access to protected information.

The vulnerability of the Windows operating system is related to the exposure of protected information. Exploiting this vulnerability can allow an attacker to gain access to protected information...

The vulnerability of the exFAT file system of the Windows operating system, which is related to the disclosure of protected information, allows a perpetrator to gain access to protected information.

The vulnerability of the exFAT file system of the Windows operating system is related to the exposure of protected information. Exploiting this vulnerability can allow an attacker to gain access to protected information...

The vulnerability of the Active Directory Federation Services (ADFS) on the Windows operating system allows a perpetrator to bypass the security measures.

The vulnerability of the Active Directory Federation Services AD FS on Windows operating systems is related to security configuration errors. Exploiting this vulnerability can allow a malicious actor to bypass security measures...

The vulnerability of the Windows operating system, related to errors in security settings, allows a perpetrator to bypass the security mechanisms.

The vulnerability of the Windows operating system is related to security configuration errors. Exploiting this vulnerability can allow a remote attacker to bypass security measures...

CVE-2021-26442 Windows HTTP.sys Elevation of Privilege Vulnerability

...

Microsoft Windows 输入验证错误漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. An input validation error vulnerability exists in Microsoft Windows Network Address Translation NAT. The following products and editions are affected:Windows 10 Version 1809 for 32-bit...

PT-2021-4385 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to errors in security settings, allowing a remote attacker to bypass the system's protection mechanism. This security-feature bypass vulnerability enables attackers to...

PT-2021-4373 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to an elevation-of-privilege vulnerability in the Storage Spaces Controller, which is caused by errors in privilege management. This vulnerability can be exploited by a...

PT-2021-4372 · Microsoft · Windows Fast Fat File System Driver +1

Name of the Vulnerable Software and Affected Versions: Windows Fast FAT File System Driver affected versions not specified Description: The issue is related to the disclosure of protected information. It may allow an attacker to elevate their privileges and obtain sensitive information, potential...