Subscribe via feed.
Archive for April, 2019

Microsoft Windows LUAFV LuafvCopyShortName Arbitrary Short Name Privilege Escalation

Posted by deepcore under exploit (No Respond)

On Microsoft Windows, the LUAFV driver bypasses security checks to copy short names during file virtualization which can be tricked into writing an arbitrary short name leading to elevation of privilege.

Microsoft Windows LUAFV NtSetCachedSigningLevel Device Guard Bypass

Posted by deepcore under exploit (No Respond)

On Microsoft Windows, the NtSetCachedSigningLevel system call can be tricked by the operation of LUAFV to apply a cached signature to an arbitrary file leading to a bypass of code signing enforcement under UMCI with Device Guard.

Microsoft Windows LUAFV Delayed Virtualization Cache Manager Poisoning Privilege Escalation

Posted by deepcore under exploit (No Respond)

On Microsoft Windows, the LUAFV driver can confuse the cache and memory manager to replace the contents of privileged file leading to elevation of privilege.

Microsoft Windows LUAFV PostLuafvPostReadWrite SECTION_OBJECT_POINTERS Race Condition

Posted by deepcore under exploit (No Respond)

On Microsoft Windows, the LUAFV driver has a race condition in the LuafvPostReadWrite callback if delay virtualization has occurred during a read leading to the SECTION_OBJECT_POINTERS value being reset to the underlying file resulting in elevation of privilege.

2 Plan Team 1.0.4 Cross Site Scripting

Posted by deepcore under exploit (No Respond)

2 Plan Team version 1.0.4 suffers from a cross site scripting vulnerability.

WordPress Download Manager 2.9.93 Cross Site Scripting

Posted by deepcore under exploit (No Respond)

WordPress Download Manager plugin version 2.9.93 suffers from a cross site scripting vulnerability.

ASUS HG100 Denial Of Service

Posted by deepcore under exploit (No Respond)

ASUS HG100 suffers from a denial of service vulnerability.

DHCP Server 2.5.2 Denial Of Service

Posted by deepcore under exploit (No Respond)

DHCP Server version 2.5.2 suffers from a denial of service vulnerability.

OAMbuster Multi-Threaded CVE-2018-2879 Scanner

Posted by deepcore under exploit (No Respond)

OAMbuster is a multi-threaded exploit for CVE-2018-2879.

Oracle Java Runtime Environment sc_FindExtrema4 Heap Corruption

Posted by deepcore under exploit (No Respond)

A heap corruption was observed in Oracle Java Runtime Environment version 8u202 (latest at the time of this writing) while fuzz-testing the processing of TrueType, implemented in a proprietary t2k library.