Month: February 2018

[local] Microsoft Windows – StorSvc SvcMoveFileInheritSecurity Arbitrary File Creation Privilege Escalation

[dos] Microsoft Internet Explorer 11 – 'Js::RegexHelper::RegexReplace' Use-After-Free

[local] Microsoft Windows – Global Reparse Point Security Feature Bypass/Elevation of Privilege

[local] MagniComp SysInfo – mcsiwrapper Privilege Escalation (Metasploit)

[local] Microsoft Windows – Constrained Impersonation Capability Privilege Escalation

[dos] Microsoft Windows Kernel – 'nt!RtlpCopyLegacyContextX86' Stack Memory Disclosure

[local] Microsoft Windows – NPFS Symlink Security Feature Bypass/Elevation of Privilege/Dangerous Behavior

[papers] Mobile Application Hacking Diary Ep.2

[webapps] October CMS < 1.0.431 – Cross-Site Scripting