CVE-2020-5377

CVE-2020-5377 CVE-2020-5377: Dell OpenManage Server Administrator File Read Usage: python3 CVE-2020-5377.py :...

cve-2018-1207

cve-2018-1207 Exploit iDRAC 7 & 8 firmware 2.52.52.52 Description Dell EMC iDRAC7/iDRAC8, versions prior to 2.52.52.52, contain CGI injection vulnerability which could be used to execute remote code. A remote unauthenticated attacker may potentially be able to use CGI variables to execute remote...

CVE-2021-21551-POC

DbUtilAx An extended proof-of-concept for the CVE-2021-21551 Dell ‘dbutil23.sys’ Kernel Exploit. Read the full blog post here...

CVE-2021-21551

CVE-2021-21551 Dell Driver EoP CVE-2021-21551 Description Dell dbutil23.sys driver contains an insufficient access control vulnerability which may lead to escalation of privileges, denial of service, or information disclosure. Local authenticated user access is required. This exploit was tested o...

CVE-2021-21551

CVE-2021-21551 Exploit to SYSTEM for CVE-2021-21551 SpoolPrinter Privesc using SeImpersonatePrivileges was made thanks to @ForrestOrr https://github.com/forrest-orr/DoubleStar/tree/main/Payloads/Source/Stage3SpoolPotato I basically just tossed the exploit function in his code and altered it ever ...

Dell-Driver-EoP-CVE-2021-21551

Dell Driver EoP CVE-2021-21551 Made quick exploit for Dell driver bug CVE-2021-21551 for fun. Great find by @kasifdekel! Writeup can be found here. This exploit has been tested on Windows versions 1809 and 20H2, token offsets may vary on other versions...

CVE-2021-21551

CVE-2021-21551 A PoC that exploits Dell's dbutil23 driver. Will get code execution on a system that has HVCI disabled as shown below: Ouptut: The write-up for this code can be found here: https://ch3rn0byl.com/2021/05/a-dell-cve-2021-21551/...

CVE-2021-21551

PoC for CVE-2021-21551 Windows LPE using the Dell dbutil23.sys driver. Exploit approach Implement read/write, allocate shellcode, flip page to bypass smep, overwrite haldispatch ptr, execute shellcode...

Dell UnityVSA < 5.5 - Remote Command Injection

Dell Unity, versions 5.5 and prior, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. id: CVE-2025-36604 info: name: Dell UnityVSA 5.5 - Remote Command Injection author: DhiyaneshDK,watchtowr severity: critical description: | Dell...

PS-CVE-2021-21551

Description Script to patch your domain computers about the CVE-2021-21551. Privesc on machines that have the driver dbutil23.sys, installed by some DELL tools BIOS updater, SupportAssist.... It uses WinRM to invoke the checks on every domain-member computers. Tries to clean the vulnerable driver...

watchTowr-vs-Dell-UnityVSA-PreAuth-CVE-2025-36604

watchTowr-vs-Dell-UnityVSA-CVE-2025-36604 Detection Artifact Generator for Dell UnityVSA CVE-2025-36604 https://github.com/user-attachments/assets/28488a97-7845-4b78-9fe7-64b9172ab023 See our blog post for technical details Detection in Action python...

FakeDellOM

FakeDellOM A fake host that can be "managed" by Dell OMSA, getting you past the login screen, and possibly serving as a starting point for fuzzing or other testing. Backstory While researching potential vulnerabilities¹ in Dell's OpenManage Server Administrator, I was interested both in: 1. not...

CVE-2021-21551

CVE-2021-21551 Simple PoC for exploiting CVE-2021-21551 for LPE by spawning system cmd. https://vulners.com/cve/CVE-2021-21551 An issue was discovered in signed dell windows driver dbutil23.sys which may lead to compromisation of whole local system. Driver's ioctl dispatch routine lacks of...

AFR-in-OMSA

Arbitrary File Read in OMSA Validation of Arbitrary File Read Vulnerabilities in Dell OpenManage Server Administrator OMSA - CVE-2016-4004, CVE-2021-21514 and CVE-2020-5377...

CVE-2026-93131

A flaw was found in the Linux kernel's dell-privacy driver. A race condition occurs when the priv-featurespresent data structure is accessed without holding the necessary list mutex. This allows the priv object to be freed prematurely, which could lead to system instability or a denial of service...

CVE-2026-93129

A flaw was found in the Linux kernel's dell-wmi-base driver. This vulnerability occurs due to an incorrect index used when accessing data fields related to the ultra performance key, which can lead to a potential buffer over-read. A local attacker could potentially exploit this to read sensitive...

Dell iDRAC7/8 Devices - Remote Code Injection

Dell EMC iDRAC7/iDRAC8, versions prior to 2.52.52.52, contain a CGI injection vulnerability which could be used to execute remote code. A remote unauthenticated attacker may potentially be able to use CGI variables to execute remote code. id: CVE-2018-1207 info: name: Dell iDRAC7/8 Devices - Remo...

Dell iDRAC9 < 7.00.00.181 / 7.20.10.50 / iDRAC10 < 1.20.25.00 Path Traversal (DSA-2025-376)

The version of Dell iDRAC9 or iDRAC10 installed on the remote host is affected by a path traversal vulnerability as referenced in the DSA-2025-376 advisory. - Dell Integrated Dell Remote Access Controller 9, 14G versions prior to 7.00.00.181, 15G and 16G versions 6.10.80.00 through 7.20.10.50 and...

CVE-2018-1207-better

Exploit PoC for CVE-2018-1207: Dell iDRAC7/iDRAC8 RCE Reverse Shell This repository contains a Proof of Concept python script to demonstrate a remote code execution exploit present in iDRAC7 and iDRAC8 devices with firmware versions 2.52.52.52 and below. This exploit allows attacks to run code as...

CVE-2026-82166

Dell Application Store, versions prior to 26.05.0.7, contain a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to arbitrary code execution...