CVE-2019-0752

https://www.thezdi.com/blog/2019/5/21/rce-without-native-code-exploitation-of-a-write-what-where-in-internet-explorer PoC exploit for CVE-2019-0752 Targets Internet Explorer 11 32bit on Windows 10 x64 up to RS4, RS5? Uses special address values in adddition to some path magic to avoid using...

CVE-2026-36981-Kernel-EoP-PoC

CVE-2026-36981-Kernel-EoP-PoC Условие write-what-where в ядре в драйвере pwdrvio.sys от MiniTool. Демонстрирует примитив произвольной записи в ядро с помощью отладчика, который можно использовать для повышения привилегий. 2026-02-09 Уведомлен поставщик 2026-03-05 Поставщик подтвердил 2026-03-05...

CVE-2020-1206

В уязвимости SMBGhost CVE-2020-0796 я рассказывал о технике write-what-where primitive через использование целочисленного переполнения integer overflow для изменения указателя Alloc.Userbuffer таким образом, чтобы он указывал на нужный нам адрес, и записи туда произвольных данных. Подобно SMBGhos...

CVE-2024-4883

CVE-2024-4883 PoC для CVE-2024-4883 — Progress WhatsUp Gold WriteDatafile: неаутентифицированное удаленное выполнение кода CVE-2024-4883 Технический анализ Анализ первопричины уязвимости можно найти в моем блоге: https://summoning.team/blog/progress-whatsup-gold-WriteDataFile-CVE-2024-4883-RCE/...

CVE-2020-1362

Exploiting an Elevation of Privilege bug in Windows 10 CVE-2020-1362 Exploit memory corruption bug - analysis of CVE-2020-1362 WalletService has fixed Elevation of Privilege bugs in last Patch Tuesday, one of bugs are assigned with CVE-2020-1362. The bug leverage a out-of-bound bug in the service...

LPE---CVE-2020-0796

Usage: Make sure Python is installed, then run poc.py. Windows Kernel Write-What-Where CVE-2020-0796 Exploit Intended only for educational and testing in corporate environments. MasterSpl0it takes no responsibility for the code, use at your own risk. Rewritten CVE-2020-0796 Local Privilege...

POC_CVE-2025-29943_Write-what-where-Condition

StackWarp: PoC for CVE-2025-29943 Proof of concept for the StackWarp hardware vulnerability CVE-2025-29943 in AMD processors. This flaw allows an attacker with administrator privileges on a host hypervisor to manipulate the CPU pipeline configuration to corrupt the stack pointer within a SEV-SNP...

CVE-2020-1337-exploit

CVE-2020-1337 Windows 권한 상승 이것은 WWWwrite-what-where 익스플로잇입니다 크레딧 Junyu Zhou @md5salt - 새로운 버그가 있을 수 있다고 말해준 사람. Wenxu Wu @ma7h1as - 제가 버그를 발견하고 이 익스플로잇을 작성했습니다. 작동 방식 CVE-2020-1048 패치에서 Microsoft는 XcvData 함수에서 portname의 유효성 검사 코드를 추가했습니다. 이는 PowerShell에서 Add-Printer를 호출하여 트리거할 수 있습니다. 이제 AddPort와...

CVE-2026-43499-ZFOLD4

CVE-2026-43499-ZFOLD4 Porting di ricerca specifico per dispositivo di CVE-2026-43499 IonStack PI write-what-where per il Galaxy Z Fold4 canadese SM-F936W sul firmware F936WVLU1AVGA. Questo repository è la controparte Fold4 di CVE-2026-43499-S24U e CVE-2026-43499-A36. Documenta lo stato attuale e...

CVE-2026-81579

In WibuKey for Windows before version 6.71, an untrusted pointer dereference in the WibuKey264.sys kernel driver for 64-bit Windows allows an attacker to exploit a write-what-where primitive, enabling local privilege escalation. This can be leveraged to execute arbitrary code, run an administrato...

CVE-2026-81579 An untrusted Pointer Dereference can be exploited to escalate privileges by an unprivileged user on Windows

In WibuKey for Windows before version 6.71, an untrusted pointer dereference in the WibuKey264.sys kernel driver for 64-bit Windows allows an attacker to exploit a write-what-where primitive, enabling local privilege escalation. This can be leveraged to execute arbitrary code, run an administrato...

EUVD-2026-66984

In WibuKey for Windows before version 6.71, an untrusted pointer dereference in the WibuKey264.sys kernel driver for 64-bit Windows allows an attacker to exploit a write-what-where primitive, enabling local privilege escalation. This can be leveraged to execute arbitrary code, run an administrato...

CVE-2026-81579

WibuKey for Windows (versions before 6.71 ) is affected by an untrusted pointer dereference in the WibuKey2_64.sys kernel driver (64-bit Windows), which exposes a write-what-where primitive. This enables a local unprivileged user to escalate privileges, potentially executing arbitrary code, spawn...

PT-2026-82480

Name of the Vulnerable Software and Affected Versions WibuKey for Windows versions prior to 6.71 Description An untrusted pointer dereference in the WibuKey2 64.sys kernel driver for 64-bit Windows allows a local attacker to exploit a write-what-where primitive. This primitive enables local...

Astra Linux – Vulnerability in exempi

The XMP Toolkit SDK version 2020.1 and earlier is affected by a write-what-where condition vulnerability that occurs during the application’s memory allocation process. This may cause the memory management functions to become mismatched, resulting in local application denial of service in the...

Exploit for Write-what-where Condition in Linux Linux_Kernel

No d...

B&R Automation X20EDS410 Write-what-where Condition (CVE-2026-43284)

The Linux kernel version shipped with the affected B&R product X20EDS410 is affected by a vulnerability. A flaw in the kernel's xfrm ESP input path that decrypts in place over shared skb frags. Successful local exploitation of this vulnerability could allow an authenticated attacker with low...

Siemens SIMATIC S7-1500 CPU 1518 MFP Write-what-where Condition (CVE-2026-46300)

This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid505871; scriptversion"1.3"; scriptsetattributeattribute:"pluginmodificationdate",...

Siemens SIMATIC S7-1500 CPU 1518 MFP Write-what-where Condition (CVE-2026-43284)

This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid505598; scriptversion"1.3"; scriptsetattributeattribute:"pluginmodificationdate",...

CVE-2026-47473

NVIDIA TensorRT-LLM contains a vulnerability where an attacker could cause a write-what-where condition. A successful exploit of this vulnerability might lead to data tampering, denial of service, and information disclosure...