SpiralBL0CK/CVE-2024-40431-CVE-2022-25479-EOP-CHAIN

PoC

CVE-2024-40431+CVE-2022-25479 chain for EOP(DATA ONLY ATTACK)

view exploit source poc_in_githubauthor SpiralBL0CKpublished 2024-09-17catalog poc_in_github

exploited CVEs (2)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2024-40431US	—	1.27% (70th)	Exploit	2024-10-23
A lack of input validation in Realtek SD card reader driver before 10.0.26100.21374 through the implementation of the IOCTL_SCSI_PASS_THROUGH control of the SD card reader driver a…
CVE-2022-25479US	medium5.5	0.64% (50th)	Exploit	2024-07-02
Vulnerability in Realtek RtsPer driver for PCIe Card Reader (RtsPer.sys) before 10.0.22000.21355 and Realtek RtsUer driver for USB Card Reader (RtsUer.sys) before 10.0.22000.31274…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.