HardBreacher

HardBreacher Vulnerabilidad de Elevación de Privilegios ZeroDay en Kaspersky Antivirus para Endpoint El problema ahora está saliendo del ámbito de Microsoft; se realizó una votación para decidir entre encontrar un fallo en la versión doméstica o en la comercial, y el resultado de la votación fue ...

LegacyHive

LegacyHive：Windows 用户配置文件服务任意配置单元加载权限提升漏洞 该PoC需要另一个标准用户凭据以及第三个用户名（可以是管理员账户），如果PoC成功，它将最终将目标用户配置单元挂载到当前用户的类根目录下。 该PoC已被简化，以防止公开利用；原始PoC不需要额外用户凭据，并且不限于usrclass.dat配置单元，任何配置单元都可以利用此漏洞加载，但你需要动点脑筋才能让PoC做到这一点。 该PoC在安装了2026年7月补丁的所有当前支持的桌面和服务器系统中完全有效。...

papers

论文 一个便捷的合集，集中收录了我公开发表的论文。 Symantec Altiris Deployment Solution 权限提升漏洞 13048 Exploit-db 出版物： https://www.exploit-db.com/docs/english/13048-symantec-altiris-deployment-solution-elevation-of-privileges-vulns.pdf March Networks DVR-CCTV 3204 安全隐患概述 13060 Exploit-db 出版物：...

PrettyPrague

PrettyPrague Vulnerabilidad de Elevación de Privilegios ZeroDay en GenDigital Avast Antivirus Otro zeroday en un proveedor de antimalware, no estoy seguro, pero creo que esta vulnerabilidad también afecta a otros productos de GenDigital como AVG, Norton... Por ahora el PoC es compatible con...

-CVE-2020-8103-Bitdefender-Antivirus-Free-EoP

CVE-2020-8103 漏洞利用 该漏洞分析文章可在 RedyOps Labs 的博客中查看： https://labs.redyops.com/index.php/2020/04/24/bitdefender-antivirus-free-escalation-of-privileges/ 第三方工具 此漏洞利用代码在很大程度上基于由 James Forshaw 开发的 symboliclink-testing-tools。symboliclink-testing-tools 可在这里找到：...

CVE-2026-58566

Dell PowerStore, an Incorrect Authorization vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges...

EUVD-2026-69385

Dell PowerStore, an Incorrect Authorization vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges...

CVE-2026-58566

CVE-2026-58566 is an Incorrect Authorization vulnerability in Dell PowerStore . A low-privileged attacker with remote network access could exploit it to achieve elevation of privileges , with a CVSS 3.1 base score of 8.8 (HIGH) — indicating high impact to confidentiality, integrity, and availabil...

CVE-2026-56796

Dell Command Update DCU, versions prior to 5.7.1, contain an Improper Link Resolution Before File Access 'Link Following' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges...

CVE-2026-53477

Dell Command Update DCU, versions prior to 5.7.1, contain a Time-of-check Time-of-use TOCTOU Race Condition vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges...

CVE-2026-53477

Dell Command Update (DCU) versions prior to 5.7.1 contain a Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability. A low-privileged attacker with local access can exploit this to achieve Elevation of Privileges , resulting in full compromise of confidentiality, integrity, and availabili...

CVE-2026-58565

Dell Command Update (DCU) versions prior to 5.7.1 contain a Missing Authorization vulnerability. A low-privileged attacker with local access can exploit this flaw to achieve Elevation of Privileges , resulting in full compromise of confidentiality, integrity, and availability (CVSS 3.1: 8.8 HIGH ...

EUVD-2026-62521

Dell Command Update DCU, versions prior to 5.7.1, contain a Missing Authorization vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges...

CVE-2026-67266

Dell Command Update DCU, versions prior to 5.7.1, contain an Incorrect Authorization vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges...

CVE-2026-56797

Dell Command Update (DCU) versions prior to 5.7.1 contain a TOCTOU race condition exploitable by a low-privileged local attacker, leading to elevation of privileges (CVSS 7.3 HIGH). No exploitation details are provided. Upgrade to DCU 5.7.1 or later as referenced in Dell DSA-2026-309.

CVE-2026-49816

Dell Command Update DCU, versions prior to 5.7.1, contain a Deserialization of Untrusted Data vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges...

CVE-2026-49817

Dell Command Update DCU, versions prior to 5.7.1, contain a Deserialization of Untrusted Data vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges...

CVE-2026-56796

Dell Command Update DCU, versions prior to 5.7.1, contain an Improper Link Resolution Before File Access 'Link Following' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges...

EUVD-2026-62499

Dell Command Update DCU, versions prior to 5.7.1, contain an Improper Link Resolution Before File Access 'Link Following' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges...

EUVD-2026-62419

Dell PowerPath, version 7.2 through to 8.0 SP1, contains an Improper Privilege Management vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges...