LegacyHive

LegacyHive : уязвимость повышения привилегий через произвольную загрузку куста реестра службы профилей пользователей Windows Для PoC требуются учётные данные другого стандартного пользователя и третье имя пользователя которое может быть учётной записью администратора. Если PoC успешен, в результа...

papers

논문 제 공개 논문을 한곳에 모아둔 편리한 컬렉션입니다. Symantec Altiris Deployment Solution 권한 상승 취약점 13048 Exploit-db 게시물: https://www.exploit-db.com/docs/english/13048-symantec-altiris-deployment-solution-elevation-of-privileges-vulns.pdf March Networks DVR-CCTV 3204의 보안 취약점 개요 13060 Exploit-db 게시물:...

PrettyPrague

PrettyPrague GenDigital Avast Antivirus 제로데이 권한 상승 취약점 또 다른 안티멀웨어 공급업체의 제로데이 취약점입니다. 확실하지는 않지만 이 취약점이 다른 GenDigital 제품AVG, Norton 등에도 영향을 미칠 것으로 생각합니다. 현재 PoC는 모든 버전의 Avast Antivirus와 호환됩니다. PoC는 Avast Sandbox의 취약점을 악용하여 SAM 데이터베이스를 덤프하고 완전한 SYSTEM 셸을 생성합니다. 이 글을 작성하는 시점에서 PoC는 완전히 패치된 Avast...

-CVE-2020-8103-Bitdefender-Antivirus-Free-EoP

CVE-2020-8103 エクスプロイト 詳細な解説は RedyOps Labs のブログに掲載されています: https://labs.redyops.com/index.php/2020/04/24/bitdefender-antivirus-free-escalation-of-privileges/ サードパーティ製ツール このエクスプロイトコードは、James Forshaw によって開発された symboliclink-testing-tools に大きく基づいています。symboliclink-testing-tools は以下で入手できます:...

EUVD-2026-69385

Dell PowerStore, an Incorrect Authorization vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges...

CVE-2026-58566

Dell PowerStore, an Incorrect Authorization vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges...

CVE-2026-58566

CVE-2026-58566 is an Incorrect Authorization vulnerability in Dell PowerStore . A low-privileged attacker with remote network access could exploit it to achieve elevation of privileges , with a CVSS 3.1 base score of 8.8 (HIGH) — indicating high impact to confidentiality, integrity, and availabil...

HardBreacher

HardBreacher Vulnerabilità di Elevazione dei Privilegi ZeroDay in Kaspersky Antivirus per Endpoint Il problema ora sta trapelando al di fuori di Microsoft: è stato condotto un sondaggio per decidere se trovare un bug nella versione home o in quella commerciale, e i risultati del sondaggio hanno...

CVE-2026-56796

Dell Command Update DCU, versions prior to 5.7.1, contain an Improper Link Resolution Before File Access 'Link Following' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges...

CVE-2026-53477

Dell Command Update DCU, versions prior to 5.7.1, contain a Time-of-check Time-of-use TOCTOU Race Condition vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges...

CVE-2026-53477

Dell Command Update (DCU) versions prior to 5.7.1 contain a Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability. A low-privileged attacker with local access can exploit this to achieve Elevation of Privileges , resulting in full compromise of confidentiality, integrity, and availabili...

CVE-2026-58565

Dell Command Update (DCU) versions prior to 5.7.1 contain a Missing Authorization vulnerability. A low-privileged attacker with local access can exploit this flaw to achieve Elevation of Privileges , resulting in full compromise of confidentiality, integrity, and availability (CVSS 3.1: 8.8 HIGH ...

EUVD-2026-62521

Dell Command Update DCU, versions prior to 5.7.1, contain a Missing Authorization vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges...

CVE-2026-67266

Dell Command Update DCU, versions prior to 5.7.1, contain an Incorrect Authorization vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges...

CVE-2026-56797

Dell Command Update (DCU) versions prior to 5.7.1 contain a TOCTOU race condition exploitable by a low-privileged local attacker, leading to elevation of privileges (CVSS 7.3 HIGH). No exploitation details are provided. Upgrade to DCU 5.7.1 or later as referenced in Dell DSA-2026-309.

CVE-2026-49816

Dell Command Update DCU, versions prior to 5.7.1, contain a Deserialization of Untrusted Data vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges...

CVE-2026-49817

Dell Command Update DCU, versions prior to 5.7.1, contain a Deserialization of Untrusted Data vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges...

CVE-2026-56796

Dell Command Update DCU, versions prior to 5.7.1, contain an Improper Link Resolution Before File Access 'Link Following' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges...

EUVD-2026-62499

Dell Command Update DCU, versions prior to 5.7.1, contain an Improper Link Resolution Before File Access 'Link Following' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges...

EUVD-2026-62419

Dell PowerPath, version 7.2 through to 8.0 SP1, contains an Improper Privilege Management vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges...