CVE-2025-54110

Windows Kernel Integer Overflow Privilege Escalation

#exploit #windows_kernel
@ZwLowLevel

HalPrivateDispatchTableHook

Hook syscalls from ring0 without triggering PatchGuard

#patchguard #api_hooking #hooking_dll #ring_0
#windows_kernel #syscall
@ZwLowLevel
https://github.com/asteria121/HalPrivateDispatchTableHook

Syscall proxing framework

Trace and control syscalls to accelerate exploit development, reverse engineering, and malware analysis. Intercept, log, and optionally modify system calls.

#syscall #malware_analysis #reverse_engineering
@ZwLowLevel
https://github.com/t1b4n3/pwntrace

Fortinet 0day

An auth bypass + path traversal in Fortinet FortiWeb to create new administrative users on exposed devices without requiring authentication.

Blog: https://www.rapid7.com/blog/post/etr-critical-vulnerability-in-fortinet-fortiweb-exploited-in-the-wild/

Tweet: https://x.com/defusedcyber/status/1975242250373517373?s=46

Dork:
ZoomEye Dork: app="FortiWeb"
HUNTER: product.name="FortiWeb"
Shodan: http.noscript:FortiWeb

Affected versions: below 8.0.2