papers

論文 私の公開論文をすべてひとまとめにした便利なコレクションです。 Symantec Altiris Deployment Solution Elevation of Privileges Vulnerabilities 13048 Exploit-db 公開先: https://www.exploit-db.com/docs/english/13048-symantec-altiris-deployment-solution-elevation-of-privileges-vulns.pdf An Insecurity Overview of the March Networks...

LegacyHive

LegacyHive: Windows 사용자 프로필 서비스 임의 하이브 로드 권한 상승 취약점 이 PoC는 다른 표준 사용자 자격 증명과 세 번째 사용자 이름관리자 계정일 수 있음을 필요로 합니다. PoC가 성공하면 현재 사용자 클래스 루트에 대상 사용자 하이브를 마운트하게 됩니다. 이 PoC는 공개적인 악용을 방지하기 위해 축소되었습니다. 원래 PoC는 추가 사용자 자격 증명이 필요하지 않았으며 usrclass.dat 하이브에 국한되지 않았습니다. 이 취약점을 사용하면 모든 하이브를 로드할 수 있었지만, PoC가 그렇게 동작하...

CVE-2026-26950

Dell SmartFabric Manager, versions prior to 2.2.1, contains an Insufficient Verification of Data Authenticity vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges...

CVE-2026-26950

Dell SmartFabric Manager versions prior to 2.2.1 contain an Insufficient Verification of Data Authenticity vulnerability. A low-privileged attacker with remote network access could exploit this to achieve elevation of privileges , resulting in high confidentiality and integrity impact with no ava...

CVE-2026-81445

Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains an Improper Privilege Management vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges...

CVE-2026-81474

Dell OpenManage Server Administrator (versions prior to 11.1.0.3 ) contains a Heap-based Buffer Overflow vulnerability. A low-privileged attacker with local access and no user interaction can exploit this to achieve Elevation of Privileges , with high impact on confidentiality, integrity, and ava...

CVE-2026-86359

Dell Repository Manager, versions prior to 3.5.2, contains an Incorrect Default Permissions vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges...

CVE-2026-86359

Dell Repository Manager versions prior to 3.5.2 contain an Incorrect Default Permissions vulnerability. A low-privileged attacker with remote access can exploit this to achieve Elevation of Privileges , rated CVSS 3.1 8.5 (HIGH) with a scope change. The Dell security advisory (DSA-2026-419) provi...

EUVD-2026-80865

Dell Update Package Framework, versions prior to 26.07.03, contains an Unchecked Return Value vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges...

CVE-2026-71180

Dell Update Package Framework versions prior to 26.07.03 are affected by an Unchecked Return Value vulnerability. A low-privileged attacker with local access can exploit this flaw, potentially achieving Elevation of Privileges . The CVSS 3.1 score is 8.2 (HIGH) with a changed scope and high impac...

CVE-2026-71180

Dell Update Package Framework, versions prior to 26.07.03, contains an Unchecked Return Value vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges...

-CVE-2020-8103-Bitdefender-Antivirus-Free-EoP

CVE-2020-8103 エクスプロイト 詳細な解説は RedyOps Labs のブログに掲載されています: https://labs.redyops.com/index.php/2020/04/24/bitdefender-antivirus-free-escalation-of-privileges/ サードパーティ製ツール このエクスプロイトコードは、James Forshaw によって開発された symboliclink-testing-tools に大きく基づいています。symboliclink-testing-tools は以下で入手できます:...

PrettyPrague

PrettyPrague GenDigital Avast Antivirus ゼロデイ権限昇格の脆弱性 アンチマルウェアベンダーにおけるもう一つのゼロデイ脆弱性です。確信はありませんが、この脆弱性は他のGenDigital製品（AVG、Nortonなど）にも影響する可能性があると考えています。 現時点では、PoCはAvast Antivirusの任意のバージョンと互換性があります。 このPoCは、Avast Sandboxの脆弱性を悪用してSAMデータベースをダンプし、完全なSYSTEMシェルを起動します。本稿執筆時点では、このPoCは完全にパッチ適用済みのAvast Antiviru...

HardBreacher

HardBreacher Kaspersky Antivirus For Endpoint のゼロデイ権限昇格の脆弱性 この問題は今やMicrosoftの外にも漏れ出しています。ホーム版か商用版のどちらかにバグを見つけるかという投票が行われ、投票結果は商用版となりました。 これを書いている時点で、この概念実証は完全にパッチが適用されたWindows 11 25H2とKaspersky for Endpoint v14.0.0.504で動作します。...

EUVD-2026-69385

Dell PowerStore, an Incorrect Authorization vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges...

CVE-2026-58566

Dell PowerStore, an Incorrect Authorization vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges...

CVE-2026-58566

CVE-2026-58566 is an Incorrect Authorization vulnerability in Dell PowerStore . A low-privileged attacker with remote network access could exploit it to achieve elevation of privileges , with a CVSS 3.1 base score of 8.8 (HIGH) — indicating high impact to confidentiality, integrity, and availabil...

CVE-2026-56796

Dell Command Update DCU, versions prior to 5.7.1, contain an Improper Link Resolution Before File Access 'Link Following' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges...

CVE-2026-53477

Dell Command Update DCU, versions prior to 5.7.1, contain a Time-of-check Time-of-use TOCTOU Race Condition vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges...

CVE-2026-53477

Dell Command Update (DCU) versions prior to 5.7.1 contain a Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability. A low-privileged attacker with local access can exploit this to achieve Elevation of Privileges , resulting in full compromise of confidentiality, integrity, and availabili...