Lucene search
+L

992 matches found

Kitploit
Kitploit
added 2026/09/17 4:12 a.m.13 views

LegacyHive

LegacyHive : Windows user profile service arbitrary hive load elevation of privileges vulnerability The PoC requires another standard user credentials and a third username which can be an administrator account, if the PoC is successful, it will end up mounting the target user hive in current user...

6AI score
SaveExploits0
NVD
NVD
added 2026/09/16 5:18 p.m.5 views

CVE-2026-86359

Dell Repository Manager, versions prior to 3.5.2, contains an Incorrect Default Permissions vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges...

8.5CVSS
SaveExploits0References1
CVE
CVE
added 2026/09/16 4:27 p.m.7 views

CVE-2026-86359

Dell Repository Manager versions prior to 3.5.2 contain an Incorrect Default Permissions vulnerability. A low-privileged attacker with remote access can exploit this to achieve Elevation of Privileges , rated CVSS 3.1 8.5 (HIGH) with a scope change. The Dell security advisory (DSA-2026-419) provi...

8.5CVSS
SaveExploits0References1
EUVD
EUVD
added 2026/09/16 4:12 p.m.7 views

EUVD-2026-80865

Dell Update Package Framework, versions prior to 26.07.03, contains an Unchecked Return Value vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges...

8.2CVSS
SaveExploits0References1
CVE
CVE
added 2026/09/16 4:12 p.m.13 views

CVE-2026-71180

Dell Update Package Framework versions prior to 26.07.03 are affected by an Unchecked Return Value vulnerability. A low-privileged attacker with local access can exploit this flaw, potentially achieving Elevation of Privileges . The CVSS 3.1 score is 8.2 (HIGH) with a changed scope and high impac...

8.2CVSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/09/16 4:12 p.m.17 views

CVE-2026-71180

Dell Update Package Framework, versions prior to 26.07.03, contains an Unchecked Return Value vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges...

8.2CVSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/16 12:00 p.m.8 views

-CVE-2020-8103-Bitdefender-Antivirus-Free-EoP

Exploit de CVE-2020-8103 El informe se puede encontrar en el blog de RedyOps Labs: https://labs.redyops.com/index.php/2020/04/24/bitdefender-antivirus-free-escalation-of-privileges/ Herramientas de Terceros Este código de exploit se basa en gran medida en symboliclink-testing-tools, desarrollado...

7.2CVSS7.2AI score0.00805EPSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/16 8:24 a.m.9 views

papers

论文 一个便捷的合集,集中收录了我公开发表的论文。 Symantec Altiris Deployment Solution 权限提升漏洞 13048 Exploit-db 出版物: https://www.exploit-db.com/docs/english/13048-symantec-altiris-deployment-solution-elevation-of-privileges-vulns.pdf March Networks DVR-CCTV 3204 安全隐患概述 13060 Exploit-db 出版物:...

5.8AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/14 12:19 a.m.9 views

PrettyPrague

PrettyPrague GenDigital Avast 杀毒软件零日权限提升漏洞 这是又一个杀毒软件厂商的零日漏洞,我不太确定,但我相信该漏洞同样影响其他 GenDigital 产品(例如 AVG、Norton……) 目前该 PoC 兼容任何版本的 Avast 杀毒软件。 该 PoC 通过滥用 Avast 沙箱中的漏洞来转储 SAM 数据库,并生成一个完整的 SYSTEM shell。在撰写本文时,该 PoC 适用于完全修补的 Avast 杀毒软件 + 已修补的 Windows 11 25H2...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/12 4:47 p.m.24 views

HardBreacher

HardBreacher 卡巴斯基终端防病毒零日权限提升漏洞 现在这个问题已经不再局限于微软内部,之前进行了一次投票,决定是在家庭版还是商业版中寻找漏洞,投票结果是商业版。 在撰写本文时,该概念验证在完全修补的 Windows 11 25H2 和 Kaspersky for Endpoint v14.0.0.504 上有效。 这个 PoC 的状态并不理想,基本上就是胶带拼凑出来的,我只是设法让它跑通了而已。它会报错导致运行失败,所以你只能不断重试。如果成功,它会在 C:\Windows\System32\MYSNAKEISSOLID.dll 创建一个文件,并赋予当前用户完全权限。...

5.9AI score
SaveExploits0
EUVD
EUVD
added 2026/09/01 4:08 p.m.9 views

EUVD-2026-69385

Dell PowerStore, an Incorrect Authorization vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges...

8.8CVSS5.9AI score0.00232EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/09/01 4:08 p.m.39 views

CVE-2026-58566

Dell PowerStore, an Incorrect Authorization vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges...

8.8CVSS0.00232EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/01 4:08 p.m.26 views

CVE-2026-58566

CVE-2026-58566 is an Incorrect Authorization vulnerability in Dell PowerStore . A low-privileged attacker with remote network access could exploit it to achieve elevation of privileges , with a CVSS 3.1 base score of 8.8 (HIGH) — indicating high impact to confidentiality, integrity, and availabil...

8.8CVSS5.9AI score0.00232EPSS
SaveExploits0References1
NVD
NVD
added 2026/08/19 3:17 p.m.13 views

CVE-2026-56796

Dell Command Update DCU, versions prior to 5.7.1, contain an Improper Link Resolution Before File Access 'Link Following' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges...

6.6CVSS0.00123EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/08/19 3:04 p.m.45 views

CVE-2026-53477

Dell Command Update DCU, versions prior to 5.7.1, contain a Time-of-check Time-of-use TOCTOU Race Condition vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges...

7.8CVSS0.00084EPSS
SaveExploits0References1
CVE
CVE
added 2026/08/19 3:04 p.m.39 views

CVE-2026-53477

Dell Command Update (DCU) versions prior to 5.7.1 contain a Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability. A low-privileged attacker with local access can exploit this to achieve Elevation of Privileges , resulting in full compromise of confidentiality, integrity, and availabili...

7.8CVSS5.3AI score0.00084EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2026/08/19 2:59 p.m.51 views

CVE-2026-58565

Dell Command Update (DCU) versions prior to 5.7.1 contain a Missing Authorization vulnerability. A low-privileged attacker with local access can exploit this flaw to achieve Elevation of Privileges , resulting in full compromise of confidentiality, integrity, and availability (CVSS 3.1: 8.8 HIGH ...

8.8CVSS5.3AI score0.00093EPSS
SaveExploits0References1Affected Software1
EUVD
EUVD
added 2026/08/19 2:59 p.m.17 views

EUVD-2026-62521

Dell Command Update DCU, versions prior to 5.7.1, contain a Missing Authorization vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges...

8.8CVSS5.3AI score0.00093EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/08/19 2:57 p.m.46 views

CVE-2026-67266

Dell Command Update DCU, versions prior to 5.7.1, contain an Incorrect Authorization vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges...

5.5CVSS0.00084EPSS
SaveExploits0References1
CVE
CVE
added 2026/08/19 2:51 p.m.39 views

CVE-2026-56797

Dell Command Update (DCU) versions prior to 5.7.1 contain a TOCTOU race condition exploitable by a low-privileged local attacker, leading to elevation of privileges (CVSS 7.3 HIGH). No exploitation details are provided. Upgrade to DCU 5.7.1 or later as referenced in Dell DSA-2026-309.

7.3CVSS5.3AI score0.00082EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder