LegacyHive

LegacyHive : Windows ユーザープロファイルサービスの任意のハイブロードによる特権昇格の脆弱性 この PoC は、別の標準ユーザーの資格情報と 3 つ目のユーザー名 管理者アカウントでも可 を必要とします。PoC が成功すると、ターゲットユーザーハイブが現在のユーザーのクラスルートにマウントされます。 公開悪用を防ぐために PoC は簡略化されており、元の PoC は追加のユーザー資格情報を必要とせず、usrclass.dat ハイブに限定されていませんでした。この脆弱性を使用すれば任意のハイブをロードできましたが、PoC にそれを実行させるにはいくつかの思考力が必要で...

papers

论文 一个便捷的合集，集中收录了我公开发表的论文。 Symantec Altiris Deployment Solution 权限提升漏洞 13048 Exploit-db 出版物： https://www.exploit-db.com/docs/english/13048-symantec-altiris-deployment-solution-elevation-of-privileges-vulns.pdf March Networks DVR-CCTV 3204 安全隐患概述 13060 Exploit-db 出版物：...

-CVE-2020-8103-Bitdefender-Antivirus-Free-EoP

CVE-2020-8103 漏洞利用 该漏洞分析文章可在 RedyOps Labs 的博客中查看： https://labs.redyops.com/index.php/2020/04/24/bitdefender-antivirus-free-escalation-of-privileges/ 第三方工具 此漏洞利用代码在很大程度上基于由 James Forshaw 开发的 symboliclink-testing-tools。symboliclink-testing-tools 可在这里找到：...

PrettyPrague

PrettyPrague GenDigital Avast 杀毒软件零日权限提升漏洞 这是又一个杀毒软件厂商的零日漏洞，我不太确定，但我相信该漏洞同样影响其他 GenDigital 产品（例如 AVG、Norton……） 目前该 PoC 兼容任何版本的 Avast 杀毒软件。 该 PoC 通过滥用 Avast 沙箱中的漏洞来转储 SAM 数据库，并生成一个完整的 SYSTEM shell。在撰写本文时，该 PoC 适用于完全修补的 Avast 杀毒软件 + 已修补的 Windows 11 25H2...

HardBreacher

HardBreacher 卡巴斯基终端防病毒零日权限提升漏洞 现在这个问题已经不再局限于微软内部，之前进行了一次投票，决定是在家庭版还是商业版中寻找漏洞，投票结果是商业版。 在撰写本文时，该概念验证在完全修补的 Windows 11 25H2 和 Kaspersky for Endpoint v14.0.0.504 上有效。 这个 PoC 的状态并不理想，基本上就是胶带拼凑出来的，我只是设法让它跑通了而已。它会报错导致运行失败，所以你只能不断重试。如果成功，它会在 C:\Windows\System32\MYSNAKEISSOLID.dll 创建一个文件，并赋予当前用户完全权限。...

CVE-2026-58566

Dell PowerStore, an Incorrect Authorization vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges...

EUVD-2026-69385

Dell PowerStore, an Incorrect Authorization vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges...

CVE-2026-58566

CVE-2026-58566 is an Incorrect Authorization vulnerability in Dell PowerStore . A low-privileged attacker with remote network access could exploit it to achieve elevation of privileges , with a CVSS 3.1 base score of 8.8 (HIGH) — indicating high impact to confidentiality, integrity, and availabil...

CVE-2026-56796

Dell Command Update DCU, versions prior to 5.7.1, contain an Improper Link Resolution Before File Access 'Link Following' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges...

CVE-2026-53477

Dell Command Update (DCU) versions prior to 5.7.1 contain a Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability. A low-privileged attacker with local access can exploit this to achieve Elevation of Privileges , resulting in full compromise of confidentiality, integrity, and availabili...

CVE-2026-53477

Dell Command Update DCU, versions prior to 5.7.1, contain a Time-of-check Time-of-use TOCTOU Race Condition vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges...

CVE-2026-58565

Dell Command Update (DCU) versions prior to 5.7.1 contain a Missing Authorization vulnerability. A low-privileged attacker with local access can exploit this flaw to achieve Elevation of Privileges , resulting in full compromise of confidentiality, integrity, and availability (CVSS 3.1: 8.8 HIGH ...

EUVD-2026-62521

Dell Command Update DCU, versions prior to 5.7.1, contain a Missing Authorization vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges...

CVE-2026-67266

Dell Command Update DCU, versions prior to 5.7.1, contain an Incorrect Authorization vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges...

CVE-2026-56797

Dell Command Update (DCU) versions prior to 5.7.1 contain a TOCTOU race condition exploitable by a low-privileged local attacker, leading to elevation of privileges (CVSS 7.3 HIGH). No exploitation details are provided. Upgrade to DCU 5.7.1 or later as referenced in Dell DSA-2026-309.

CVE-2026-49816

Dell Command Update DCU, versions prior to 5.7.1, contain a Deserialization of Untrusted Data vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges...

CVE-2026-49817

Dell Command Update DCU, versions prior to 5.7.1, contain a Deserialization of Untrusted Data vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges...

CVE-2026-56796

Dell Command Update DCU, versions prior to 5.7.1, contain an Improper Link Resolution Before File Access 'Link Following' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges...

EUVD-2026-62499

Dell Command Update DCU, versions prior to 5.7.1, contain an Improper Link Resolution Before File Access 'Link Following' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges...

EUVD-2026-62419

Dell PowerPath, version 7.2 through to 8.0 SP1, contains an Improper Privilege Management vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges...