Lucene search
+L

996 matches found

Kitploit
Kitploit
added 2026/09/17 4:01 p.m.13 views

LegacyHive

LegacyHive : Windows ユーザープロファイルサービスの任意のハイブロードによる特権昇格の脆弱性 この PoC は、別の標準ユーザーの資格情報と 3 つ目のユーザー名 管理者アカウントでも可 を必要とします。PoC が成功すると、ターゲットユーザーハイブが現在のユーザーのクラスルートにマウントされます。 公開悪用を防ぐために PoC は簡略化されており、元の PoC は追加のユーザー資格情報を必要とせず、usrclass.dat ハイブに限定されていませんでした。この脆弱性を使用すれば任意のハイブをロードできましたが、PoC にそれを実行させるにはいくつかの思考力が必要で...

6AI score
SaveExploits0
NVD
NVD
added 2026/09/17 3:16 p.m.3 views

CVE-2026-26950

Dell SmartFabric Manager, versions prior to 2.2.1, contains an Insufficient Verification of Data Authenticity vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges...

8.1CVSS
SaveExploits0References1
CVE
CVE
added 2026/09/17 2:58 p.m.8 views

CVE-2026-26950

Dell SmartFabric Manager versions prior to 2.2.1 contain an Insufficient Verification of Data Authenticity vulnerability. A low-privileged attacker with remote network access could exploit this to achieve elevation of privileges , resulting in high confidentiality and integrity impact with no ava...

8.1CVSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/09/17 2:27 p.m.13 views

CVE-2026-81445

Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains an Improper Privilege Management vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges...

7.2CVSS
SaveExploits0References1
CVE
CVE
added 2026/09/17 10:43 a.m.8 views

CVE-2026-81474

Dell OpenManage Server Administrator (versions prior to 11.1.0.3 ) contains a Heap-based Buffer Overflow vulnerability. A low-privileged attacker with local access and no user interaction can exploit this to achieve Elevation of Privileges , with high impact on confidentiality, integrity, and ava...

7.8CVSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/17 7:58 a.m.9 views

papers

論文 私の公開論文をすべてひとまとめにした便利なコレクションです。 Symantec Altiris Deployment Solution Elevation of Privileges Vulnerabilities 13048 Exploit-db 公開先: https://www.exploit-db.com/docs/english/13048-symantec-altiris-deployment-solution-elevation-of-privileges-vulns.pdf An Insecurity Overview of the March Networks...

5.8AI score
SaveExploits0
NVD
NVD
added 2026/09/16 5:18 p.m.6 views

CVE-2026-86359

Dell Repository Manager, versions prior to 3.5.2, contains an Incorrect Default Permissions vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges...

8.5CVSS0.00244EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/16 4:27 p.m.8 views

CVE-2026-86359

Dell Repository Manager versions prior to 3.5.2 contain an Incorrect Default Permissions vulnerability. A low-privileged attacker with remote access can exploit this to achieve Elevation of Privileges , rated CVSS 3.1 8.5 (HIGH) with a scope change. The Dell security advisory (DSA-2026-419) provi...

8.5CVSS0.00244EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/09/16 4:12 p.m.9 views

EUVD-2026-80865

Dell Update Package Framework, versions prior to 26.07.03, contains an Unchecked Return Value vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges...

8.2CVSS0.00134EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/09/16 4:12 p.m.39 views

CVE-2026-71180

Dell Update Package Framework, versions prior to 26.07.03, contains an Unchecked Return Value vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges...

8.2CVSS0.00134EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/16 4:12 p.m.16 views

CVE-2026-71180

Dell Update Package Framework versions prior to 26.07.03 are affected by an Unchecked Return Value vulnerability. A low-privileged attacker with local access can exploit this flaw, potentially achieving Elevation of Privileges . The CVSS 3.1 score is 8.2 (HIGH) with a changed scope and high impac...

8.2CVSS0.00134EPSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/16 12:00 p.m.8 views

-CVE-2020-8103-Bitdefender-Antivirus-Free-EoP

Exploit de CVE-2020-8103 El informe se puede encontrar en el blog de RedyOps Labs: https://labs.redyops.com/index.php/2020/04/24/bitdefender-antivirus-free-escalation-of-privileges/ Herramientas de Terceros Este código de exploit se basa en gran medida en symboliclink-testing-tools, desarrollado...

7.2CVSS7.2AI score0.00805EPSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/14 12:19 a.m.9 views

PrettyPrague

PrettyPrague GenDigital Avast 杀毒软件零日权限提升漏洞 这是又一个杀毒软件厂商的零日漏洞,我不太确定,但我相信该漏洞同样影响其他 GenDigital 产品(例如 AVG、Norton……) 目前该 PoC 兼容任何版本的 Avast 杀毒软件。 该 PoC 通过滥用 Avast 沙箱中的漏洞来转储 SAM 数据库,并生成一个完整的 SYSTEM shell。在撰写本文时,该 PoC 适用于完全修补的 Avast 杀毒软件 + 已修补的 Windows 11 25H2...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/12 4:47 p.m.24 views

HardBreacher

HardBreacher 卡巴斯基终端防病毒零日权限提升漏洞 现在这个问题已经不再局限于微软内部,之前进行了一次投票,决定是在家庭版还是商业版中寻找漏洞,投票结果是商业版。 在撰写本文时,该概念验证在完全修补的 Windows 11 25H2 和 Kaspersky for Endpoint v14.0.0.504 上有效。 这个 PoC 的状态并不理想,基本上就是胶带拼凑出来的,我只是设法让它跑通了而已。它会报错导致运行失败,所以你只能不断重试。如果成功,它会在 C:\Windows\System32\MYSNAKEISSOLID.dll 创建一个文件,并赋予当前用户完全权限。...

5.9AI score
SaveExploits0
EUVD
EUVD
added 2026/09/01 4:08 p.m.9 views

EUVD-2026-69385

Dell PowerStore, an Incorrect Authorization vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges...

8.8CVSS5.9AI score0.00232EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/09/01 4:08 p.m.39 views

CVE-2026-58566

Dell PowerStore, an Incorrect Authorization vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges...

8.8CVSS0.00232EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/01 4:08 p.m.26 views

CVE-2026-58566

CVE-2026-58566 is an Incorrect Authorization vulnerability in Dell PowerStore . A low-privileged attacker with remote network access could exploit it to achieve elevation of privileges , with a CVSS 3.1 base score of 8.8 (HIGH) — indicating high impact to confidentiality, integrity, and availabil...

8.8CVSS5.9AI score0.00232EPSS
SaveExploits0References1
NVD
NVD
added 2026/08/19 3:17 p.m.13 views

CVE-2026-56796

Dell Command Update DCU, versions prior to 5.7.1, contain an Improper Link Resolution Before File Access 'Link Following' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges...

6.6CVSS0.00123EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/08/19 3:04 p.m.45 views

CVE-2026-53477

Dell Command Update DCU, versions prior to 5.7.1, contain a Time-of-check Time-of-use TOCTOU Race Condition vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges...

7.8CVSS0.00084EPSS
SaveExploits0References1
CVE
CVE
added 2026/08/19 3:04 p.m.40 views

CVE-2026-53477

Dell Command Update (DCU) versions prior to 5.7.1 contain a Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability. A low-privileged attacker with local access can exploit this to achieve Elevation of Privileges , resulting in full compromise of confidentiality, integrity, and availabili...

7.8CVSS5.3AI score0.00084EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder