CVE-2019-3719

Dell SupportAssist RCE Proof of Concept Prueba de concepto de RCE en Dell SupportAssist Este es el código fuente de la prueba de concepto para CVE-2019-3719, una vulnerabilidad en la mayoría de las máquinas Dell que permitía la ejecución remota de código. Usage Uso python3 main.py Interface Name...

CVE-2026-89444

A flaw was found in the Linux kernel. The dell-wmi-sysman driver, responsible for managing Dell WMI Windows Management Instrumentation system attributes, incorrectly logs sensitive information. Specifically, when setting a BIOS attribute, the driver populates a security buffer with the current...

Dell-Driver-EoP-CVE-2021-21551

Dell Driver EoP CVE-2021-21551 Exploit rápido para el error del driver de Dell CVE-2021-21551 por diversión. Gran hallazgo de @kasifdekel! El informe se puede encontrar aquí. Este exploit ha sido probado en Windows versiones 1809 y 20H2, los offsets de token pueden variar en otras versiones...

cve-2018-1207

cve-2018-1207 Exploit iDRAC 7 & 8 firmware 2.52.52.52 Description Dell EMC iDRAC7/iDRAC8, versions prior to 2.52.52.52, contain CGI injection vulnerability which could be used to execute remote code. A remote unauthenticated attacker may potentially be able to use CGI variables to execute remote...

CVE-2026-89444

In the Linux kernel, the following vulnerability has been resolved: platform/x86: dell-wmi-sysman: Don't hex dump attribute security buffer setattribute populates the security area of the BIOS attribute request buffer with the current admin password via populatesecuritybuffer, then dumps the whol...

EUVD-2026-76350

In the Linux kernel, the following vulnerability has been resolved: platform/x86: dell-wmi-sysman: Don't hex dump attribute security buffer setattribute populates the security area of the BIOS attribute request buffer with the current admin password via populatesecuritybuffer, then dumps the whol...

CVE-2026-89444

CVE-2026-89444 affects the Linux kernel's platform/x86: dell-wmi-sysman driver. The set_attribute() function populates the security area of the BIOS attribute request buffer with the current admin password via populate_security_buffer(), then calls print_hex_dump_bytes() to dump the entire reques...

CVE-2026-89444 platform/x86: dell-wmi-sysman: Don't hex dump attribute security buffer

In the Linux kernel, the following vulnerability has been resolved: platform/x86: dell-wmi-sysman: Don't hex dump attribute security buffer setattribute populates the security area of the BIOS attribute request buffer with the current admin password via populatesecuritybuffer, then dumps the whol...

CVE-2018-1207-better

Exploit PoC for CVE-2018-1207: Dell iDRAC7/iDRAC8 RCE Reverse Shell This repository contains a Proof of Concept python script to demonstrate a remote code execution exploit present in iDRAC7 and iDRAC8 devices with firmware versions 2.52.52.52 and below. This exploit allows attacks to run code as...

CVE-2021-21551

CVE-2021-21551 Exploit to SYSTEM for CVE-2021-21551 SpoolPrinter Privesc using SeImpersonatePrivileges was made thanks to @ForrestOrr https://github.com/forrest-orr/DoubleStar/tree/main/Payloads/Source/Stage3SpoolPotato I basically just tossed the exploit function in his code and altered it ever ...

CVE-2020-5377

CVE-2020-5377 CVE-2020-5377: Dell OpenManage Server Administrator File Read root@kitploit: Usage: python3 CVE-2020-5377.py :...

PS-CVE-2021-21551

Descripción Script para parchear los equipos de tu dominio sobre el CVE-2021-21551. Privesc en máquinas que tienen el driver dbutil23.sys, instalado por algunas herramientas DELL actualizador de BIOS, SupportAssist.... Utiliza WinRM para invocar las comprobaciones en todos los equipos miembros de...

CVE-2021-21551

CVE-2021-21551 A PoC that exploits Dell's dbutil23 driver. Will get code execution on a system that has HVCI disabled as shown below: Ouptut: The write-up for this code can be found here: https://ch3rn0byl.com/2021/05/a-dell-cve-2021-21551/...

PT-2026-90160

In the Linux kernel, the following vulnerability has been resolved: platform/x86: dell-wmi-sysman: Don't hex dump attribute security buffer set attribute populates the security area of the BIOS attribute request buffer with the current admin password via populate security buffer, then dumps the...

CVE-2021-21551

CVE-2021-21551 PoC simple para explotar CVE-2021-21551 para LPE ejecutando cmd del sistema. https://vulners.com/cve/CVE-2021-21551 Se descubrió un problema en el controlador firmado de Dell para Windows dbutil23.sys que puede llevar al compromiso de todo el sistema local. La rutina de despacho de...

CVE-2026-81468

Dell ThinOS 10, versions prior to 260510. 2616, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Command execution...

CVE-2026-81467

Dell ThinOS 10, versions prior to 260510. 2616, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Command execution...

CVE-2026-81049

Dell ThinOS 10, versions prior to 260510.2616, contain a Missing Support for Integrity Check vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to arbitrary code execution...

CVE-2026-81048

Dell ThinOS 10, versions prior to 260510.2616, contain an Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Remote Code execution...

CVE-2026-81051

Dell ThinOS 10, versions prior to 260510.2616, contain a Security Version Number Mutable to Older Versions vulnerability. A low privileged attacker with physical access could potentially exploit this vulnerability, leading to Protection mechanism bypass...