papers

논문 제 공개 논문을 한곳에 모아둔 편리한 컬렉션입니다. Symantec Altiris Deployment Solution 권한 상승 취약점 13048 Exploit-db 게시물: https://www.exploit-db.com/docs/english/13048-symantec-altiris-deployment-solution-elevation-of-privileges-vulns.pdf March Networks DVR-CCTV 3204의 보안 취약점 개요 13060 Exploit-db 게시물:...

LegacyHive

LegacyHive: Windows 사용자 프로필 서비스 임의 하이브 로드 권한 상승 취약점 이 PoC는 다른 표준 사용자 자격 증명과 세 번째 사용자 이름관리자 계정일 수 있음을 필요로 합니다. PoC가 성공하면 현재 사용자 클래스 루트에 대상 사용자 하이브를 마운트하게 됩니다. 이 PoC는 공개적인 악용을 방지하기 위해 축소되었습니다. 원래 PoC는 추가 사용자 자격 증명이 필요하지 않았으며 usrclass.dat 하이브에 국한되지 않았습니다. 이 취약점을 사용하면 모든 하이브를 로드할 수 있었지만, PoC가 그렇게 동작하...

CVE-2026-26950

Dell SmartFabric Manager, versions prior to 2.2.1, contains an Insufficient Verification of Data Authenticity vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges...

CVE-2026-26950

Dell SmartFabric Manager versions prior to 2.2.1 contain an Insufficient Verification of Data Authenticity vulnerability. A low-privileged attacker with remote network access could exploit this to achieve elevation of privileges , resulting in high confidentiality and integrity impact with no ava...

CVE-2026-81445

Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains an Improper Privilege Management vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges...

CVE-2026-81474

Dell OpenManage Server Administrator (versions prior to 11.1.0.3 ) contains a Heap-based Buffer Overflow vulnerability. A low-privileged attacker with local access and no user interaction can exploit this to achieve Elevation of Privileges , with high impact on confidentiality, integrity, and ava...

CVE-2026-86359

Dell Repository Manager, versions prior to 3.5.2, contains an Incorrect Default Permissions vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges...

CVE-2026-86359

Dell Repository Manager versions prior to 3.5.2 contain an Incorrect Default Permissions vulnerability. A low-privileged attacker with remote access can exploit this to achieve Elevation of Privileges , rated CVSS 3.1 8.5 (HIGH) with a scope change. The Dell security advisory (DSA-2026-419) provi...

EUVD-2026-80865

Dell Update Package Framework, versions prior to 26.07.03, contains an Unchecked Return Value vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges...

CVE-2026-71180

Dell Update Package Framework versions prior to 26.07.03 are affected by an Unchecked Return Value vulnerability. A low-privileged attacker with local access can exploit this flaw, potentially achieving Elevation of Privileges . The CVSS 3.1 score is 8.2 (HIGH) with a changed scope and high impac...

CVE-2026-71180

Dell Update Package Framework, versions prior to 26.07.03, contains an Unchecked Return Value vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges...

-CVE-2020-8103-Bitdefender-Antivirus-Free-EoP

CVE-2020-8103 익스플로잇 전문은 RedyOps Labs 블로그에서 확인할 수 있습니다: https://labs.redyops.com/index.php/2020/04/24/bitdefender-antivirus-free-escalation-of-privileges/ 서드파티 도구 이 익스플로잇 코드는 James Forshaw가 개발한 symboliclink-testing-tools를 기반으로 합니다. symboliclink-testing-tools는 다음에서 찾을 수 있습니다:...

PrettyPrague

PrettyPrague GenDigital Avast Antivirus 제로데이 권한 상승 취약점 또 다른 안티멀웨어 공급업체의 제로데이 취약점입니다. 확실하지는 않지만 이 취약점이 다른 GenDigital 제품AVG, Norton 등에도 영향을 미칠 것으로 생각합니다. 현재 PoC는 모든 버전의 Avast Antivirus와 호환됩니다. PoC는 Avast Sandbox의 취약점을 악용하여 SAM 데이터베이스를 덤프하고 완전한 SYSTEM 셸을 생성합니다. 이 글을 작성하는 시점에서 PoC는 완전히 패치된 Avast...

HardBreacher

HardBreacher Kaspersky 엔드포인트용 안티바이러스 제로데이 권한 상승 취약점 이제 이 문제가 Microsoft 외부로 새어 나오고 있습니다. 홈 버전과 상용 버전 중 어느 쪽에서 버그를 찾을지에 대한 투표가 있었고, 투표 결과는 상용 버전이었습니다. 이 글을 작성하는 시점에서, 이 개념 증명PoC은 완전히 패치된 Windows 11 25H2 및 Kaspersky for Endpoint v14.0.0.504에서 작동합니다. PoC는 전혀 좋은 상태가 아닙니다. 기본적으로 임시방편으로 붙인 수준이며, 그냥 작동하게...

EUVD-2026-69385

Dell PowerStore, an Incorrect Authorization vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges...

CVE-2026-58566

Dell PowerStore, an Incorrect Authorization vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges...

CVE-2026-58566

CVE-2026-58566 is an Incorrect Authorization vulnerability in Dell PowerStore . A low-privileged attacker with remote network access could exploit it to achieve elevation of privileges , with a CVSS 3.1 base score of 8.8 (HIGH) — indicating high impact to confidentiality, integrity, and availabil...

CVE-2026-56796

Dell Command Update DCU, versions prior to 5.7.1, contain an Improper Link Resolution Before File Access 'Link Following' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges...

CVE-2026-53477

Dell Command Update DCU, versions prior to 5.7.1, contain a Time-of-check Time-of-use TOCTOU Race Condition vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges...

CVE-2026-53477

Dell Command Update (DCU) versions prior to 5.7.1 contain a Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability. A low-privileged attacker with local access can exploit this to achieve Elevation of Privileges , resulting in full compromise of confidentiality, integrity, and availabili...