CVE-2021-21551

CVE-2021-21551 Exploit to SYSTEM for CVE-2021-21551 SpoolPrinter Privesc using SeImpersonatePrivileges was made thanks to @ForrestOrr https://github.com/forrest-orr/DoubleStar/tree/main/Payloads/Source/Stage3SpoolPotato I basically just tossed the exploit function in his code and altered it ever ...

EUVD-2026-124053

Dell Display and Peripheral Manager DDPM Windows, versions prior to 2.4.0.17, contain a Time-of-check Time-of-use TOCTOU Condition vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution...

CVE-2026-111521

Dell Display and Peripheral Manager DDPM Windows, versions prior to 2.4.0.17, contain a Time-of-check Time-of-use TOCTOU Condition vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution...

CVE-2026-111521

Versions prior to 2.4.0.17 of Dell Display and Peripheral Manager (DDPM Windows) are vulnerable to a Time-of-check Time-of-use (TOCTOU) Condition vulnerability (CWE-367). A low privileged attacker with local access could exploit this flaw to achieve Code execution . Exploitation details are not p...

CVE-2026-111521

Dell Display and Peripheral Manager DDPM Windows, versions prior to 2.4.0.17, contain a Time-of-check Time-of-use TOCTOU Condition vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution...

CVE-2026-91891

Dell Terraform Provider for PowerStore, versions prior to 1.3.1 , contains a vulnerability that may cause sensitive authentication data to be insufficiently redacted in diagnostic logs. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to...

CVE-2026-91892

Dell Terraform Provider for PowerFlex, versions prior to 1.9.0, contains a vulnerability that may permit the use of deprecated cryptographic protocols during secure communications. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to information...

CVE-2026-91880

Dell Terraform Provider for PowerFlex, versions 1.5.0 through 1.8.0, contains an Improper Certificate Validation vulnerability in the SSH client component.Terraform PowerFlex provider uses ssh.InsecureIgnoreHostKey as the default SSH host key callback. An unauthenticated attacker with remote acce...

CVE-2026-91874

Dell OpenManage Ansible Modules, versions 5.0.0 through 10.0.3, contains an Improper Certificate Validation vulnerability in the iDRACConnection component. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to information exposure and unauthorized...

CVE-2026-91878

Dell OpenManage Ansible Modules, versions 6.0.0 through 10.0.3, contains an Improper Neutralization of Special Elements in Output Used by a Downstream Component 'Injection' vulnerability in the XML data conversion component. A low privileged attacker with remote access could potentially exploit...

CVE-2026-91875

Dell OpenManage Ansible Modules, versions 9.2.0 through 10.0.3, contains an Improper Certificate Validation vulnerability in the SessionAPI component. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to information exposure and unauthorized acce...

CVE-2026-91876

Dell OpenManage Ansible Modules, versions 2.0.4 through 10.0.3, contains an Improper Restriction of XML External Entity Reference vulnerability in the XML parsing component. A low privileged attacker with local access could potentially exploit this vulnerability, leading to information exposure...

CVE-2026-91873

Dell OpenManage Ansible Modules, versions 2.1.2 through 10.0.3, contains an Improper Certificate Validation vulnerability in the iDRACRedfishAPI component. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to information exposure and unauthorized...

CVE-2026-91877

Dell OpenManage Ansible Modules, versions 2.0.2 through 10.0.3, contains an Improper Neutralization of Special Elements in Data Query Logic vulnerability in the OData filter processing component. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to...

CVE-2026-91873

Dell OpenManage Ansible Modules, versions 2.1.2 through 10.0.3, contains an Improper Certificate Validation vulnerability in the iDRACRedfishAPI component. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to information exposure and unauthorized...

EUVD-2026-123703

Dell OpenManage Ansible Modules, versions 2.1.2 through 10.0.3, contains an Improper Certificate Validation vulnerability in the iDRACRedfishAPI component. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to information exposure and unauthorized...

CVE-2026-91873

Dell OpenManage Ansible Modules , versions 2.1.2 through 10.0.3 , are affected by an Improper Certificate Validation vulnerability within the iDRACRedfishAPI component. An unauthenticated attacker with remote access could potentially exploit this flaw to achieve information exposure and unauthori...

CVE-2026-91878

Dell OpenManage Ansible Modules, versions 6.0.0 through 10.0.3, contains an Improper Neutralization of Special Elements in Output Used by a Downstream Component 'Injection' vulnerability in the XML data conversion component. A low privileged attacker with remote access could potentially exploit...

EUVD-2026-123697

Dell OpenManage Ansible Modules, versions 6.0.0 through 10.0.3, contains an Improper Neutralization of Special Elements in Output Used by a Downstream Component 'Injection' vulnerability in the XML data conversion component. A low privileged attacker with remote access could potentially exploit...

CVE-2026-91878

Dell OpenManage Ansible Modules , versions 6.0.0 through 10.0.3 , are vulnerable to an Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability within the XML data conversion component . A low privileged attacker with remote access could exp...