LegacyHive

LegacyHive: Windows 사용자 프로필 서비스 임의 하이브 로드 권한 상승 취약점 이 PoC는 다른 표준 사용자 자격 증명과 세 번째 사용자 이름관리자 계정일 수 있음을 필요로 합니다. PoC가 성공하면 현재 사용자 클래스 루트에 대상 사용자 하이브를 마운트하게 됩니다. 이 PoC는 공개적인 악용을 방지하기 위해 축소되었습니다. 원래 PoC는 추가 사용자 자격 증명이 필요하지 않았으며 usrclass.dat 하이브에 국한되지 않았습니다. 이 취약점을 사용하면 모든 하이브를 로드할 수 있었지만, PoC가 그렇게 동작하...

-CVE-2020-8103-Bitdefender-Antivirus-Free-EoP

CVE-2020-8103 エクスプロイト 詳細な解説は RedyOps Labs のブログに掲載されています: https://labs.redyops.com/index.php/2020/04/24/bitdefender-antivirus-free-escalation-of-privileges/ サードパーティ製ツール このエクスプロイトコードは、James Forshaw によって開発された symboliclink-testing-tools に大きく基づいています。symboliclink-testing-tools は以下で入手できます:...

papers

論文 私の公開論文をすべてひとまとめにした便利なコレクションです。 Symantec Altiris Deployment Solution Elevation of Privileges Vulnerabilities 13048 Exploit-db 公開先: https://www.exploit-db.com/docs/english/13048-symantec-altiris-deployment-solution-elevation-of-privileges-vulns.pdf An Insecurity Overview of the March Networks...

CVE-2026-58566

Dell PowerStore, an Incorrect Authorization vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges...

EUVD-2026-69385

Dell PowerStore, an Incorrect Authorization vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges...

CVE-2026-58566

CVE-2026-58566 is an Incorrect Authorization vulnerability in Dell PowerStore . A low-privileged attacker with remote network access could exploit it to achieve elevation of privileges , with a CVSS 3.1 base score of 8.8 (HIGH) — indicating high impact to confidentiality, integrity, and availabil...

HardBreacher

HardBreacher Vulnerabilità di Elevazione dei Privilegi ZeroDay in Kaspersky Antivirus per Endpoint Il problema ora sta trapelando al di fuori di Microsoft: è stato condotto un sondaggio per decidere se trovare un bug nella versione home o in quella commerciale, e i risultati del sondaggio hanno...

CVE-2026-56796

Dell Command Update DCU, versions prior to 5.7.1, contain an Improper Link Resolution Before File Access 'Link Following' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges...

CVE-2026-53477

Dell Command Update DCU, versions prior to 5.7.1, contain a Time-of-check Time-of-use TOCTOU Race Condition vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges...

CVE-2026-53477

Dell Command Update (DCU) versions prior to 5.7.1 contain a Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability. A low-privileged attacker with local access can exploit this to achieve Elevation of Privileges , resulting in full compromise of confidentiality, integrity, and availabili...

CVE-2026-58565

Dell Command Update (DCU) versions prior to 5.7.1 contain a Missing Authorization vulnerability. A low-privileged attacker with local access can exploit this flaw to achieve Elevation of Privileges , resulting in full compromise of confidentiality, integrity, and availability (CVSS 3.1: 8.8 HIGH ...

EUVD-2026-62521

Dell Command Update DCU, versions prior to 5.7.1, contain a Missing Authorization vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges...

CVE-2026-67266

Dell Command Update DCU, versions prior to 5.7.1, contain an Incorrect Authorization vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges...

CVE-2026-56797

Dell Command Update (DCU) versions prior to 5.7.1 contain a TOCTOU race condition exploitable by a low-privileged local attacker, leading to elevation of privileges (CVSS 7.3 HIGH). No exploitation details are provided. Upgrade to DCU 5.7.1 or later as referenced in Dell DSA-2026-309.

CVE-2026-49816

Dell Command Update DCU, versions prior to 5.7.1, contain a Deserialization of Untrusted Data vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges...

CVE-2026-49817

Dell Command Update DCU, versions prior to 5.7.1, contain a Deserialization of Untrusted Data vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges...

CVE-2026-56796

Dell Command Update DCU, versions prior to 5.7.1, contain an Improper Link Resolution Before File Access 'Link Following' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges...

EUVD-2026-62499

Dell Command Update DCU, versions prior to 5.7.1, contain an Improper Link Resolution Before File Access 'Link Following' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges...

EUVD-2026-62419

Dell PowerPath, version 7.2 through to 8.0 SP1, contains an Improper Privilege Management vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges...

PT-2026-78365

Name of the Vulnerable Software and Affected Versions Dell OpenManage Enterprise versions prior to 4.7.0 Description Improper Privilege Management allows a high privileged attacker with remote access to achieve elevation of privileges. Recommendations Update Dell OpenManage Enterprise to version...