@@ -160725,6 +160725,56 @@
160725
160725
"needs_cleanup": null,
160726
160726
"actions": []
160727
160727
},
160728
+ "exploit_windows/local/cve_2024_30085_cloud_files": {
160729
+ "name": "Windows Cloud File Mini Filer Driver Heap Overflow",
160730
+ "fullname": "exploit/windows/local/cve_2024_30085_cloud_files",
160731
+ "aliases": [],
160732
+ "rank": 600,
160733
+ "disclosure_date": "2024-12-19",
160734
+ "type": "exploit",
160735
+ "author": [
160736
+ "Alex Birnberg",
160737
+ "ssd-disclosure",
160738
+ "bwatters-r7"
160739
+ ],
160740
+ "description": "This module exploits the Windows Cloud Files Mini FIlter Driver cldflt.sys on Windows workstation versions\n 10_1809 through 11_23H2 and Windows server versions 2022 to 22_23H2.",
160741
+ "references": [
160742
+ "CVE-2024-30085",
160743
+ "URL-https://attackerkb.com/topics/EHiwxpT2Dp/cve-2024-30085",
160744
+ "URL-https://ssd-disclosure.com/ssd-advisory-cldflt-heap-based-overflow-pe/",
160745
+ "URL-https://starlabs.sg/blog/2024/all-i-want-for-christmas-is-a-cve-2024-30085-exploit/"
160746
+ ],
160747
+ "platform": "Windows",
160748
+ "arch": "",
160749
+ "rport": null,
160750
+ "autofilter_ports": [],
160751
+ "autofilter_services": [],
160752
+ "targets": [
160753
+ "Windows x64"
160754
+ ],
160755
+ "mod_time": "2025-01-10 16:14:32 +0000",
160756
+ "path": "/modules/exploits/windows/local/cve_2024_30085_cloud_files.rb",
160757
+ "is_install_path": true,
160758
+ "ref_name": "windows/local/cve_2024_30085_cloud_files",
160759
+ "check": true,
160760
+ "post_auth": false,
160761
+ "default_credential": false,
160762
+ "notes": {
160763
+ "Stability": [
160764
+ "crash-safe"
160765
+ ],
160766
+ "Reliability": [],
160767
+ "SideEffects": [
160768
+ "ioc-in-logs"
160769
+ ]
160770
+ },
160771
+ "session_types": [
160772
+ "meterpreter",
160773
+ "shell"
160774
+ ],
160775
+ "needs_cleanup": null,
160776
+ "actions": []
160777
+ },
160728
160778
"exploit_windows/local/cve_2024_30088_authz_basep": {
160729
160779
"name": "Windows Kernel Time of Check Time of Use LPE in AuthzBasepCopyoutInternalSecurityAttributes",
160730
160780
"fullname": "exploit/windows/local/cve_2024_30088_authz_basep",
0 commit comments