186 matches found
CVE-2025-24076
CVE-2025-24076 Microsoft Windows Cross Device Service Elevation of Privilege Vulnerability Exploit Overview This script exploits a vulnerability in the Windows Cross Device Service that allows privilege escalation on Windows 11 , Windows Server 2025 , and Windows Server 2022 23H2 Server Core...
The vulnerability of the Cross Device Service for Windows operating systems allows attackers to enhance their privileges.
The vulnerability of the Cross Device Service for Windows operating systems is related to deficiencies in access control when processing the enabled parameter of the SeImpersonatePrivilege service token, as a result of loading the malicious CrossDeviceStreaming.Source.dll library. Exploiting this...
lamda v10.6
FIRERPA Android ｜ AI-Powered Automation An all-in-one Android automation framework that combines on-device services, AI-ready agents, and extensible tool invocation. Documentation | 使用文档 | TELEGRAM | QQ Group | SKILLS | llms-full.txt | 中文版本 FIRERPA is an all-in-one Android device control platform...
Exploit for CVE-2026-66804
CVE-2026-66804: Cross Device Virtual Camera EoP A standard Wi...
CVE-2026-66804
Improper access control in Windows Cross Device Service allows an authorized attacker to elevate privileges locally...
CVE-2026-66804 Microsoft Windows Cross Device Service Elevation of Privilege Vulnerability
...
CVE-2026-66804 Microsoft Windows Cross Device Service Elevation of Privilege Vulnerability
...
EUVD-2026-56595
Improper access control in Windows Cross Device Service allows an authorized attacker to elevate privileges locally...
CVE-2026-66804
Technical details about CVE-2026-66804 are not publicly available in the provided documents. Monitor for updates from Microsoft and NVD for affected products, vulnerable component, impact, and remediation.
CVE-2026-66804: Improper Access Control
Improper access control in Windows Cross Device Service allows an authorized attacker to elevate privileges locally...
PT-2026-70703
Name of the Vulnerable Software and Affected Versions Windows 11 affected versions not specified Description Improper access control in the Windows Cross Device Service allows an authorized attacker to elevate privileges locally. The issue occurs because a standard user can create the...
CVE-2026-34121
An authentication bypass vulnerability within the HTTP handling of the DS configuration service in TP-Link Tapo C520WS v2.6 was identified, due to inconsistent parsing and authorization logic in JSON requests during authentication check. An unauthenticated attacker can append an...
CVE-2026-34121
An authentication bypass vulnerability within the HTTP handling of the DS configuration service in TP-Link Tapo C520WS v2.6 was identified, due to inconsistent parsing and authorization logic in JSON requests during authentication check. An unauthenticated attacker can append an...
CVE-2026-24296
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Device Association Service allows an authorized attacker to elevate privileges locally...
CVE-2025-48654
In onStart of CompanionDeviceManagerService.java, there is a possible confused deputy due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2021-47878
eBeam Education Suite 2.5.0.9 contains an unquoted service path vulnerability in the eBeam Device Service that allows local users to potentially execute code with elevated privileges. Attackers can exploit the unquoted path in the service configuration to inject malicious code that would execute...
CVE-2021-47878 eBeam Education Suite 2.5.0.9 - 'eBeam Device Service' Unquoted Service Path
eBeam Education Suite 2.5.0.9 contains an unquoted service path vulnerability in the eBeam Device Service that allows local users to potentially execute code with elevated privileges. Attackers can exploit the unquoted path in the service configuration to inject malicious code that would execute...
CVE-2021-47878 eBeam Education Suite 2.5.0.9 - 'eBeam Device Service' Unquoted Service Path
eBeam Education Suite 2.5.0.9 contains an unquoted service path vulnerability in the eBeam Device Service that allows local users to potentially execute code with elevated privileges. Attackers can exploit the unquoted path in the service configuration to inject malicious code that would execute...
CVE-2021-47878
eBeam Education Suite 2.5.0.9 contains an unquoted service path vulnerability in the eBeam Device Service that allows local users to potentially execute code with elevated privileges. Attackers can exploit the unquoted path in the service configuration to inject malicious code that would execute...
EUVD-2026-3614
eBeam Education Suite 2.5.0.9 contains an unquoted service path vulnerability in the eBeam Device Service that allows local users to potentially execute code with elevated privileges. Attackers can exploit the unquoted path in the service configuration to inject malicious code that would execute...