CVE-2018-1207-better

Exploit PoC for CVE-2018-1207: Dell iDRAC7/iDRAC8 RCE Reverse Shell This repository contains a Proof of Concept python script to demonstrate a remote code execution exploit present in iDRAC7 and iDRAC8 devices with firmware versions 2.52.52.52 and below. This exploit allows attacks to run code as...

cve-2018-1207

cve-2018-1207 Exploit iDRAC 7 & 8 firmware 2.52.52.52 Description Dell EMC iDRAC7/iDRAC8, versions prior to 2.52.52.52, contain CGI injection vulnerability which could be used to execute remote code. A remote unauthenticated attacker may potentially be able to use CGI variables to execute remote...

Dell-Driver-EoP-CVE-2021-21551

Dell Driver EoP CVE-2021-21551 Exploit rápido para el error del driver de Dell CVE-2021-21551 por diversión. Gran hallazgo de @kasifdekel! El informe se puede encontrar aquí. Este exploit ha sido probado en Windows versiones 1809 y 20H2, los offsets de token pueden variar en otras versiones...

PS-CVE-2021-21551

Description Script to patch your domain computers about the CVE-2021-21551. Privesc on machines that have the driver dbutil23.sys, installed by some DELL tools BIOS updater, SupportAssist.... It uses WinRM to invoke the checks on every domain-member computers. Tries to clean the vulnerable driver...

CVE-2021-21551

CVE-2021-21551 Exploit to SYSTEM for CVE-2021-21551 SpoolPrinter Privesc using SeImpersonatePrivileges was made thanks to @ForrestOrr https://github.com/forrest-orr/DoubleStar/tree/main/Payloads/Source/Stage3SpoolPotato I basically just tossed the exploit function in his code and altered it ever ...

CVE-2021-21551

CVE-2021-21551 A PoC that exploits Dell's dbutil23 driver. Will get code execution on a system that has HVCI disabled as shown below: Ouptut: The write-up for this code can be found here: https://ch3rn0byl.com/2021/05/a-dell-cve-2021-21551/...

CVE-2019-3719

Dell SupportAssist RCE Proof of Concept This is the proof of concept source code for CVE-2019-3719, a vulnerability in most of all Dell machines that allowed for remote code execution. Usage python3 main.py Interface Name Victim IP Gateway IP Payload Filename...

Dell iDRAC7/8 Devices - Remote Code Injection

Dell EMC iDRAC7/iDRAC8, versions prior to 2.52.52.52, contain a CGI injection vulnerability which could be used to execute remote code. A remote unauthenticated attacker may potentially be able to use CGI variables to execute remote code. id: CVE-2018-1207 info: name: Dell iDRAC7/8 Devices - Remo...

Dell UnityVSA < 5.5 - Remote Command Injection

Dell Unity, versions 5.5 and prior, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. id: CVE-2025-36604 info: name: Dell UnityVSA 5.5 - Remote Command Injection author: DhiyaneshDK,watchtowr severity: critical description: | Dell...

PT-2026-104156

Dell Container Storage Modules vulnerabilities CVE-2026-63688 and CVE-2026-63692 CVSS 10 allow admin takeover. Upgrade to 1.18.0. Dell ContainerStorageModules CVE202663688 CVE202663692 CVE202667269 Kubernetes StorageSecurity https://t.co/eGr7jwjQ6m...

PT-2026-104157

Dell Container Storage Modules vulnerabilities CVE-2026-63688 and CVE-2026-63692 CVSS 10 allow admin takeover. Upgrade to 1.18.0. Dell ContainerStorageModules CVE202663688 CVE202663692 CVE202667269 Kubernetes StorageSecurity https://t.co/eGr7jwjQ6m...

PT-2026-104341

🚨 CRITICAL: Dell System Update flaw CVE-2026-86360 carries a CVSS 9.6 and could allow attackers to execute code with root privileges. Dell patched five vulnerabilities in Dell System Update DSU, including CVE-2026-86360, CVE-2026-86361, CVE-2026-86362, CVE-2026-63697 and CVE-2026-71168. 🔴 Update ...

PT-2026-104344

🚨 CRITICAL: Dell System Update flaw CVE-2026-86360 carries a CVSS 9.6 and could allow attackers to execute code with root privileges. Dell patched five vulnerabilities in Dell System Update DSU, including CVE-2026-86360, CVE-2026-86361, CVE-2026-86362, CVE-2026-63697 and CVE-2026-71168. 🔴 Update ...

PT-2026-104342

🚨 CRITICAL: Dell System Update flaw CVE-2026-86360 carries a CVSS 9.6 and could allow attackers to execute code with root privileges. Dell patched five vulnerabilities in Dell System Update DSU, including CVE-2026-86360, CVE-2026-86361, CVE-2026-86362, CVE-2026-63697 and CVE-2026-71168. 🔴 Update ...

PT-2026-104345

🚨 CRITICAL: Dell System Update flaw CVE-2026-86360 carries a CVSS 9.6 and could allow attackers to execute code with root privileges. Dell patched five vulnerabilities in Dell System Update DSU, including CVE-2026-86360, CVE-2026-86361, CVE-2026-86362, CVE-2026-63697 and CVE-2026-71168. 🔴 Update ...

PT-2026-104158

Dell System Update flaw CVE-2026-86360 CVSS 9.6 could let attackers run code as root. Dell fixes five bugs in DSU 2.3.0.0. Patch now. Dell DellSystemUpdate DSU CVE202686360 CVE202686361 CVE202686362 PathTraversal https://t.co/jtc9b82YND...

CVE-2021-21551

CVE-2021-21551 Simple PoC for exploiting CVE-2021-21551 for LPE by spawning system cmd. https://vulners.com/cve/CVE-2021-21551 An issue was discovered in signed dell windows driver dbutil23.sys which may lead to compromisation of whole local system. Driver's ioctl dispatch routine lacks of...

FakeDellOM

FakeDellOM A fake host that can be "managed" by Dell OMSA, getting you past the login screen, and possibly serving as a starting point for fuzzing or other testing. Backstory While researching potential vulnerabilities¹ in Dell's OpenManage Server Administrator, I was interested both in: 1. not...

Dell Rugged Control Center < 5.2.206 Multiple Vulnerabilities (DSA-2026-410)

The version of Dell Rugged Control Center RCC installed on the remote host is prior to 5.2.206. It is, therefore, affected by multiple vulnerabilities: - An improper authorization vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to...

AlmaLinux 9.2 [TuxCare] Security Update: freeipmi / freeipmi-bmc-watchdog / freeipmi-devel / etc (ALMALINUX9.2:CLSA-2026:1785840756)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1785840756 advisory. - ipmi-oem in FreeIPMI before 1.6.18 has exploitable buffer overflows on response messages. The Intelligent Platform Management Interface IPM...