papers

Документы Удобная подборка всех моих публичных документов в одном месте. Symantec Altiris Deployment Solution Elevation of Privileges Vulnerabilities 13048 Публикация на Exploit-db: https://www.exploit-db.com/docs/english/13048-symantec-altiris-deployment-solution-elevation-of-privileges-vulns.pd...

LegacyHive

LegacyHive : уязвимость повышения привилегий через произвольную загрузку куста реестра службы профилей пользователей Windows Для PoC требуются учётные данные другого стандартного пользователя и третье имя пользователя которое может быть учётной записью администратора. Если PoC успешен, в результа...

CVE-2026-26950

Dell SmartFabric Manager, versions prior to 2.2.1, contains an Insufficient Verification of Data Authenticity vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges...

CVE-2026-26950

Dell SmartFabric Manager versions prior to 2.2.1 contain an Insufficient Verification of Data Authenticity vulnerability. A low-privileged attacker with remote network access could exploit this to achieve elevation of privileges , resulting in high confidentiality and integrity impact with no ava...

CVE-2026-81445

Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains an Improper Privilege Management vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges...

CVE-2026-81474

Dell OpenManage Server Administrator (versions prior to 11.1.0.3 ) contains a Heap-based Buffer Overflow vulnerability. A low-privileged attacker with local access and no user interaction can exploit this to achieve Elevation of Privileges , with high impact on confidentiality, integrity, and ava...

CVE-2026-86359

Dell Repository Manager, versions prior to 3.5.2, contains an Incorrect Default Permissions vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges...

CVE-2026-86359

Dell Repository Manager versions prior to 3.5.2 contain an Incorrect Default Permissions vulnerability. A low-privileged attacker with remote access can exploit this to achieve Elevation of Privileges , rated CVSS 3.1 8.5 (HIGH) with a scope change. The Dell security advisory (DSA-2026-419) provi...

EUVD-2026-80865

Dell Update Package Framework, versions prior to 26.07.03, contains an Unchecked Return Value vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges...

CVE-2026-71180

Dell Update Package Framework versions prior to 26.07.03 are affected by an Unchecked Return Value vulnerability. A low-privileged attacker with local access can exploit this flaw, potentially achieving Elevation of Privileges . The CVSS 3.1 score is 8.2 (HIGH) with a changed scope and high impac...

CVE-2026-71180

Dell Update Package Framework, versions prior to 26.07.03, contains an Unchecked Return Value vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges...

-CVE-2020-8103-Bitdefender-Antivirus-Free-EoP

Exploit CVE-2020-8103 L'article complet se trouve sur le blog de RedyOps Labs : https://labs.redyops.com/index.php/2020/04/24/bitdefender-antivirus-free-escalation-of-privileges/ Outils Tiers Ce code d'exploit est fortement basé sur symboliclink-testing-tools, développé par James Forshaw. Les...

PrettyPrague

PrettyPrague Уязвимость повышения привилегий нулевого дня в GenDigital Avast Antivirus Ещё один нулевой день в антивирусном провайдере. Я не уверен, но полагаю, что эта уязвимость затрагивает и другие продукты GenDigital такие как AVG, Norton... На данный момент PoC совместим с любой версией Avas...

HardBreacher

HardBreacher Уязвимость повышения привилегий нулевого дня в Kaspersky Antivirus для конечных точек Итак, проблема теперь выходит за пределы Microsoft: был проведён опрос, в котором выбирали между поиском ошибки в домашней или коммерческой версии, и по результатам опроса победила коммерческая...

EUVD-2026-69385

Dell PowerStore, an Incorrect Authorization vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges...

CVE-2026-58566

Dell PowerStore, an Incorrect Authorization vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges...

CVE-2026-58566

CVE-2026-58566 is an Incorrect Authorization vulnerability in Dell PowerStore . A low-privileged attacker with remote network access could exploit it to achieve elevation of privileges , with a CVSS 3.1 base score of 8.8 (HIGH) — indicating high impact to confidentiality, integrity, and availabil...

CVE-2026-56796

Dell Command Update DCU, versions prior to 5.7.1, contain an Improper Link Resolution Before File Access 'Link Following' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges...

CVE-2026-53477

Dell Command Update DCU, versions prior to 5.7.1, contain a Time-of-check Time-of-use TOCTOU Race Condition vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges...

CVE-2026-53477

Dell Command Update (DCU) versions prior to 5.7.1 contain a Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability. A low-privileged attacker with local access can exploit this to achieve Elevation of Privileges , resulting in full compromise of confidentiality, integrity, and availabili...