Lucene search
+L

7 matches found

Kitploit
Kitploit
•added 2026/10/10 2:22 a.m.•16 views

CVE-2025-21420-PoC

CVE-2025-21420 PoC Windows ディスク クリーンアップ ツールの特権昇格の脆弱性 私の知る限り、不完全ではありますが、これはこのCVEに対する最初のPoCです。 https://nvd.nist.gov/vuln/detail/CVE-2025-21420 https://vulners.com/cve/CVE-2025-21420 cleanmgr.exe を使用してDLLサイドローディングを行う方法を見つけました。 $ cp .\dokan1.dll C:\Users\System32\System32\System32\dokannp1.dll $...

7.8CVSS7.8AI score0.03699EPSS
SaveExploits2
BDU FSTEC
BDU FSTEC
•added 2025/02/24 12:00 a.m.•20 views

The vulnerability of the Disk Cleanup Tool component of the Windows operating system, which allows a hacker to exploit their privileges

The vulnerability of the Disk Cleanup Tool component of the Windows operating system is related to errors in handling symbolic links. Exploiting this vulnerability can allow an attacker to increase their privileges...

7.8CVSS7.6AI score0.03699EPSS
SaveExploits2References3
NVD
NVD
•added 2025/02/11 6:15 p.m.•20 views

CVE-2025-21420

Windows Disk Cleanup Tool Elevation of Privilege Vulnerability...

7.8CVSS0.03699EPSS
SaveExploits2References1
Vulnrichment
Vulnrichment
•added 2025/02/11 5:58 p.m.•16 views

CVE-2025-21420 Windows Disk Cleanup Tool Elevation of Privilege Vulnerability

...

7.8CVSS7.9AI score0.03699EPSS
SaveExploits2References1
CVE
CVE
•added 2025/02/11 5:58 p.m.•427 views

CVE-2025-21420

CVE-2025-21420 is evidenced by PoCs showing a Disk Cleanup Tool (cleanmgr.exe) elevation via a DLL sideload approach. The GitHub PoCs demonstrate loading dokan1.dll/dokannp1.dll to trigger arbitrary code paths, with the exploit chain listing SetProcessMitigationPolicy (ProcessRedirectionTrustPoli...

7.8CVSS8.1AI score0.03699EPSS
SaveExploits2References1Affected Software14
Positive Technologies
Positive Technologies
•added 2025/02/11 12:00 a.m.•24 views

PT-2025-6338

Name of the Vulnerable Software and Affected Versions Windows Disk Cleanup Tool affected versions not specified Description A critical issue exists within the Windows Disk Cleanup Tool cleanmgr.exe that allows for privilege escalation to SYSTEM privileges. The flaw involves errors in handling...

7.8CVSS8.7AI score0.03699EPSS
SaveExploits2References41
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/02/11 12:00 a.m.•6 views

CVE-2025-21420: Improper Link Resolution Before File Access

Windows Disk Cleanup Tool Elevation of Privilege Vulnerability...

7.8CVSS5.7AI score0.03699EPSS
SaveExploits2References1
Rows per page
Query Builder