26 matches found
CVE-2023-36874
🇮🇱 BringThemHome NeverAgainIsNow 🇮🇱 Nous exigeons le retour en toute sécurité de tous les citoyens pris en otage par le groupe terroriste Hamas. Nous ne nous reposerons pas tant que chaque otage ne sera pas libéré et ne rentrera pas chez lui en sécurité. Vous pouvez aider à les ramener à la...
OWN-Defender
OWN-Defender — Исследование COM-интерфейсов Центра безопасности Windows OWN-Defender — это исследовательский проект по безопасности Windows, направленный на понимание того, как Центр безопасности Windows WSC представляет и управляет антивирусными продуктами безопасности через свои COM-интерфейсы...
CVE-2017-0213
CVE-2017-0213 : Vulnérabilité d'élévation de privilège dans Windows COM Description Auteur : Google Security Research CVE : 2017-0213 EDB-ID : 42020 Références : Project-Zero Microsoft Exploit-Database Vidéo : Youtube Produits concernés Produit| Version| Mise à jour| Build| Testé...
CVE-2020-1313
CVE-2020-1313 Résumé Le service Windows Update Orchestrator est un service DCOM utilisé par d'autres composants pour installer les mises à jour Windows déjà téléchargées. USO était vulnérable à une élévation de privilèges tout utilisateur vers le système local en raison d'une autorisation...
BadOutlook
Bad Outlook Outlook 애플리케이션 인터페이스COM 인터페이스를 활용하여 특정 트리거 제목 줄에 따라 시스템에서 셸코드를 실행하는 간단한 PoC입니다. Microsoft.Office.Interop.Outlook 네임스페이스를 사용하면 개발자가 전체 Outlook 애플리케이션을 표현할 수 있습니다적어도 Microsoft에 따르면. 즉, 새 애플리케이션은 이메일 읽기보관함, 휴지통 등 포함부터 발송까지 모든 작업을 수행할 수 있어야 합니다. 수많은 기존 C 셸코드 로더를 기반으로, 트리거 제목 줄과 본문에 base64...
CVE-2023-36874
CVE-2023-36874 Доказательство концепции PoC Учебная и исследовательская реализация уязвимости CVE-2023-36874 , демонстрирующая недостаток локального повышения привилегий LPE в компоненте Windows Error Reporting WER. ⚠️ Отказ от ответственности Этот репозиторий и предоставленный исходный код...
Malwarebytes for Teams 安全漏洞
Malwarebytes for Teams is a multi-terminal protection suite from US-based Malwarebytes, Inc. A security vulnerability exists in Malwarebytes for Teams version 1.0.990 and earlier, which stems from a flaw in the COM interface that could lead to elevated privileges...
CVE-2021-43768
In Malwarebytes For Teams v.1.0.990 and before and fixed in v.1.0.1003 and later a privilege escalation can occur via the COM interface running in mbamservice.exe...
CVE-2021-43768
In Malwarebytes For Teams v.1.0.990 and before and fixed in v.1.0.1003 and later a privilege escalation can occur via the COM interface running in mbamservice.exe...
PT-2025-43621
Name of the Vulnerable Software and Affected Versions Malwarebytes For Teams versions prior to 1.0.1003 Description A privilege escalation can occur through the COM interface within the mbamservice.exe process. Recommendations Update Malwarebytes For Teams to version 1.0.1003 or later...
CVE-2021-43768
In Malwarebytes For Teams v.1.0.990 and before and fixed in v.1.0.1003 and later a privilege escalation can occur via the COM interface running in mbamservice.exe...
EUVD-2025-16873
Malicious code in bioql PyPI...
CVE-2025-27811
A local privilege escalation in the razerelevationservice.exe in Razer Synapse 4 through 4.0.86.2502180127 allows a local attacker to escalate their privileges via a vulnerable COM interface in the target service...
CVE-2025-27811
A local privilege escalation in the razerelevationservice.exe in Razer Synapse 4 through 4.0.86.2502180127 allows a local attacker to escalate their privileges via a vulnerable COM interface in the target service...
CVE-2025-27811
A local privilege escalation in the razerelevationservice.exe in Razer Synapse 4 through 4.0.86.2502180127 allows a local attacker to escalate their privileges via a vulnerable COM interface in the target service...
CVE-2025-27811
A local privilege escalation in the razerelevationservice.exe in Razer Synapse 4 through 4.0.86.2502180127 allows a local attacker to escalate their privileges via a vulnerable COM interface in the target service...
CVE-2025-27811
A local privilege escalation in the razerelevationservice.exe in Razer Synapse 4 through 4.0.86.2502180127 allows a local attacker to escalate their privileges via a vulnerable COM interface in the target service...
PT-2025-23806 · Razer · Razer Synapse
Name of the Vulnerable Software and Affected Versions: Razer Synapse versions 4 through 4.0.86.2502180127 Description: A local privilege escalation issue in the razer elevation service.exe allows a local attacker to escalate their privileges via a vulnerable COM interface in the target service...
CVE-2025-27811
CVE-2025-27811 concerns a local privilege escalation in Razer Synapse 4, specifically via the razer_elevation_service.exe (version 4.0.86.2502180127) that exposes a vulnerable COM interface. The issue allows a local attacker to escalate privileges through this COM interface in the target service....
Matrikon OPC Server
1. EXECUTIVE SUMMARY CVSS v3 5.8 ATTENTION: Exploitable remotely Vendor: Matrikon, a subsidiary of Honeywell Equipment: Matrikon OPC Server Vulnerability: Improper Access Control 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to achieve remote command...