Sealighter

Sealighter - 보안 연구를 위한 쉬운 ETW 추적 이 프로젝트는 비개발자들이 ETWEvent Tracing for Windows 및 WPPWindows PreProcessor Tracing 연구에 쉽게 뛰어들 수 있도록 돕기 위해 만들었습니다. 기능 여러 ETW 및 WPP 공급자를 동시에 구독 형식을 몰라도 이벤트를 자동으로 JSON으로 파싱 필터 체이닝 및 필터 부정을 포함한 강력한 이벤트 필터링 표준 출력, 파일 또는 Windows 이벤트 로그다른 도구에서 수집 가능로 출력 이벤트 스택 추적 가져오기 설정 가능한...

CVE-2021-28476

CVE-2021-28476: Microsoft Hyper-V: vmswitch における複数の脆弱性 set OID リクエストの処理時に WPP コードに複数のバグが存在します。そのうちの1つは、攻撃者が制御するポインタの参照解除（読み取りアクセス）を可能にし、残りは範囲外読み取りアクセスを引き起こします。このリポジトリには、特定された問題を引き起こすための概念実証コードが含まれています。 問題の完全な技術的説明は、https://labs.bluefrostsecurity.de/advisories/bfs-sa-2021-001/ にあります。...

CVE-2026-45383 libde265 has a heap buffer overflow (OOB read) in decode_slice_unit_WPP() via out-of-bounds CtbAddrRStoTS access — libde265 <= v1.0.18

libde265 is an open source implementation of the h.265 video codec. Versions prior to 1.0.19 have a heap buffer overflow out-of-bounds READ exists in decodercontext::decodesliceunitWPP in libde265/decctx.cc. When decoding a WPP Wavefront Parallel Processing HEVC slice, ctbAddrRS is computed as...

Sealighter - Easy ETW Tracing for Security Research

I created this project to help non-developers dive into researching Event Tracing for Windows ETW and Windows PreProcessor Tracing WPP. Features Subscribe to multiple ETW and WPP Providers at once Automatically parse events into JSON without needing to know format Robust Event filtering including...

CVE-2021-36872

Authenticated Persistent Cross-Site Scripting XSS vulnerability in WordPress Popular Posts plugin versions = 5.3.3. Vulnerable at &widget-wpp2posttype...

Synaptics Keyboard Driver Unprotected Debug Mode - us

Synaptics Keyboard Driver Unprotected Debug Mode Lenovo Security Advisory: LEN-18507 Potential Impact: Loss of confidentiality local to system Severity: Medium Scope of Impact: Industry-wide CVE Identifier: CVE-2017-17556 Summary Description: A researcher discovered a vulnerability in Synaptics...

Synaptics Keyboard Driver Unprotected Debug Mode - Lenovo Support US

No description provided...

Denial of Service Vulnerability in WPS Office 2016 Presentation (CNVD-2018-04912)

WPS office is an office software suite independently developed by Kingsoft Corporation. A denial of service vulnerability exists in WPS presentation wpp.exe in WPS when parsing a specific pptx file, which can be exploited by attackers to cause a denial of service attack...

Stack Overflow Vulnerability in WPS Office 2016 Presentation

WPS office is an office software suite independently developed by Kingsoft Corporation. A stack overflow vulnerability exists in WPS presentation wpp.exe in WPS when parsing a specific pptx file, which can be exploited by an attacker to cause a denial of service attack...

WPS Presentation suffers from a null pointer reference vulnerability (CNVD-2018-03654)

WPS office is an office software suite independently developed by Kingsoft Corporation. A null pointer reference vulnerability exists in WPS presentation wpp.exe in WPS when parsing a specific ppt file, which can be exploited by an attacker to cause a denial of service...

Denial of Service Vulnerability in WPS Software of Kingsoft Corporation Ltd.

WPS Office is an office software suite independently developed by Kingsoft Corporation Limited, which can realize the most commonly used text, table, presentation and many other functions of office software. Kingsoft WPS software has a memory access vulnerability when viewing the executable progr...

wpp-berater.de XSS vulnerability

Open Bug Bounty ID: OBB-541635 Description| Value ---|--- Affected Website:| wpp-berater.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Synaptics Says Claims of a Keylogger in HP Laptops are False

Synaptics said reports that claim hundreds of HP laptops contain a secret keylogger made by the company are inaccurate. In a statement released Wednesday, the company said its software was being mischaracterized as a keylogger. It also said it would remove the debugging component from production...

WPS Presentation suffers from a null pointer reference vulnerability (CNVD-2017-33986)

WPS office is an office software suite independently developed by Kingsoft Corporation. A null pointer reference vulnerability exists in WPS presentation wpp.exe in WPS when parsing a specific pptx file, which can be exploited by an attacker to cause a denial of service or code execution...

WPS Presentation suffers from a null pointer reference vulnerability (CNVD-2017-33982)

WPS office is an office software suite independently developed by Kingsoft Corporation. A null pointer reference vulnerability exists in the pptxrw module of the WPS presentation wpp.exe in WPS when parsing a specific ppt file, which can be exploited by an attacker to cause a denial of service or...

Memory corruption vulnerability exists in WPS Presentation (CNVD-2017-33995)

WPS office is an office software suite independently developed by Kingsoft Corporation. A memory corruption vulnerability exists in WPS presentation wpp.exe in WPS when parsing a specific ppt file, which can be exploited by an attacker to cause a denial of service...

Overflow vulnerability in WPS demo ppt reader module

WPS Office is an office software suite developed independently by Kingsoft Corporation. An overflow vulnerability exists in the pptreader module of WPS presentation wpp.exe in WPS when parsing a specific ppt file, which can be exploited by an attacker to cause a denial of service or execute...

Null Pointer Reference Vulnerability in WPS Demo kso Module

WPS Office is an office software suite developed independently by Kingsoft Corporation. A null pointer reference vulnerability exists in the kso module of WPS presentation wpp.exe in WPS when parsing a specific ppt file, which can be exploited by an attacker to cause a denial of service or lead t...