Perfusion

Perfusion On Windows 7 , Windows Server 2008R2 , Windows 8 , and Windows Server 2012 , the registry key of the RpcEptMapper and DnsCache 7/2008R2 only services is configured with weak permissions. Any local user can create a Performance subkey and then leverage the Windows Performance Counters to...

PT-2026-90160

In the Linux kernel, the following vulnerability has been resolved: platform/x86: dell-wmi-sysman: Don't hex dump attribute security buffer set attribute populates the security area of the BIOS attribute request buffer with the current admin password via populate security buffer, then dumps the...

WMIcmd

El problema Al realizar investigaciones de bajo impacto y otras actividades similares, es posible que desees minimizar lo que se escribe en el disco / lo evidente. Esta herramienta nos permite ejecutar comandos a través de WMI y obtener información que de otro modo no está disponible a través de...

CcmMessagingBackdoor

CcmMessagingBackdoor Herramienta de prueba de concepto para construir e instalar un servicio CcmMessaging rogue para mantener acceso en un Management Point Uso Compilar e instalar el servicio COM rogue en el Management Point root@kitploit: Compile PS C:...

Malware-Analysis-Follina-CVE-2022-30190

Malware-Analysis-Follina-CVE-2022-30190 静态恶意软件分析 – Follina 利用 CVE-2022-30190 恶意 Microsoft Word 文档调查 在一次关于 Kali Linux 的实际恶意软件分析环节中，我遇到了一个名为 sample.doc 的可疑文件。我决定进行结构化的静态分析，以在不执行的情况下了解其性质和行为。 本文档描述了我所采取的确切步骤、观察结果以及得出的结论。 所有工作均在运行 Kali Linux 的隔离 Oracle VirtualBox 虚拟机中完成。 步骤 1 – 初始文件观察 我首先使用文件管理器在...

osquery_cve-2024-23443

Proof of Concept POC CVE-2024-23443 hpbiososquery Add osqery extension HP BIOS WMI to Elastic Agent Dependencies pip install pywin32 pip install osquery pip install pyinstaller Build root@kitploit: pyinstaller --onefile hpbiosenumeration.py Install 1. Copy extension to Elastic agent location copy...

PT-2026-87979

🚨 HIGH: CVE-2026-77905 | CVSS 7.0 Use-after-free in Windows Management Instrumentation enables local privilege escalation. Authorized attackers can exploit this vulnerability. Patch immediately. CVE Vulnerability PatchNow ThreatIntel DFIR https://t.co/9yVWduy1HW...

The vulnerability of the populate EnumData() function in the drivers/platform/x86/dell/dell-wmi-sysman/enum-attributes.c file of the Linux kernel device driver module allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the populate EnumData function in the drivers/platform/x86/dell/dell-wmi-sysman/enum-attributes.c file of the Linux X86 kernel device driver is related to the occurrence of operations outside of memory buffers. Exploiting this vulnerability could allow an attacker to compromi...

The vulnerability of the set_new_password() function in the drivers/platform/x86/dell/dell-wmi-sysman/passwordattr-interface.c driver for X86 Linux operating system, which allows a hacker to trigger a service failure.

The vulnerability of the setnewpassword function in the drivers/platform/x86/dell/dell-wmi-sysman/passwordattr-interface.c file of the Linux operating system’s X86 device driver module is related to the unencrypted storage of critical information. Exploiting this vulnerability could allow an...

Astra Linux – Vulnerability in Linux

In the Linux kernel, the following vulnerability has been resolved: Platform/x86: dell-smbios-wmi: Fixed an oop in rmmod dellsmbios. The initdellsmbioswmi function only registers the dellsmbioswmidriver on systems where the Dell WMI interface is supported. While the exitdellsmbioswmi function...

Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: ath11k: Disable spectral scan during spectral deinit. When ath11k modules are removed using rmmod with spectral scan enabled, a crash occurs. Different crash traces are observed for each instance of the crash. Send a command to...

Astra Linux – Vulnerability found in Linux 5.15, Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: Platform/x86: mxm-wmi: The memory leak in the mxmwmicallmxds|mx function has been fixed. The ACPI buffer memory out.pointer, returned by wmievaluatemethod, does not get freed after the call, resulting in a memory leak. This issue...

Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: Wifi: ath9k: Fixed a use-after-free in ath9khifusbdisconnect This patch fixes a use-after-free that occurs in ath9khifusbdisconnect, when ath9khifusbdisconnect attempts to access “drvpriv”, which has already been freed by...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerability has been resolved: Platform/x86: wmi: Fix for opening a char device Since the commit fa1f68db6ca7 “drivers: misc: passing the miscdevice pointer through file private data”, the miscdevice stores a pointer to itself within filp-privatedata. This mea...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: Wifi: ath9k – Avoid referencing uninitialized memory in ath9kwmictrlrx. For the same reasons described in commit b383e8abed41 “Wifi: ath9k – Avoid uninitialized memory reading in ath9khtcrxmsg”, ath9khtcrxmsg should validate the...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: Platform/x86: dell-wmi-sysman: Do not perform hex dumping of plaintext password data. setnewpassword performs hex dumping of the entire buffer, which contains plaintext password data, including current and new passwords. Remove...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: Wifi: ath9k: Delay all operations related to ath9kwmieventtasklet until initialization is complete. The ath9kwmieventtasklet function used in ath9khtc assumes that all data structures have been fully initialized by the time it...

CVE-2026-72346

A flaw was found in the Linux kernel's bitland-mifs-wmi driver. During suspend and resume operations, an uninitialized pointer can be passed to a function, leading to a NULL pointer dereference. This can cause a kernel crash, resulting in a denial of service DoS by halting the system's suspend...

CVE-2026-72346

In the Linux kernel, the following vulnerability has been resolved: platform/x86: bitland-mifs-wmi: Fix NULL pointer dereference during suspend/resume The driver registers two distinct WMI devices: a control device BITLANDWMICONTROL and an event device BITLANDWMIEVENT. During the probe phase, the...

UBUNTU-CVE-2026-72346

In the Linux kernel, the following vulnerability has been resolved: platform/x86: bitland-mifs-wmi: Fix NULL pointer dereference during suspend/resume The driver registers two distinct WMI devices: a control device BITLANDWMICONTROL and an event device BITLANDWMIEVENT. During the probe phase, the...