mirror of
https://github.com/0xMarcio/cve.git
synced 2026-10-27 16:51:03 +00:00
0xMarcio
2b6547ef29
KEV reached the site three days ago but nothing in the markdown said a vulnerability was under active attack, and the repository is what most people actually read. 1,595 entries now carry a red CISA KEV shield beside their product and vulnerability badges, marked for ransomware use where CISA records it. update_cves writes the badge on entries it creates, and the weekly audit reconciles the whole set against the refreshed catalogue, so an entry CISA adds gains the badge and one it withdraws loses it. Re-running the sync is a no-op.
822 B
822 B
CVE-2002-0367
Description
smss.exe debugging subsystem in Windows NT and Windows 2000 does not properly authenticate programs that connect to other programs, which allows local users to gain administrator or SYSTEM privileges by duplicating a handle to a privileged process, as demonstrated by DebPloit.
POC
Reference
No PoCs from references.
Github
No PoCs found on GitHub currently.