LegacyHive

LegacyHive : ثغرة ترقية الامتيازات عبر تحميل خلية عشوائية في خدمة ملف تعريف المستخدم في ويندوز يتطلب إثبات المفهوم وجود بيانات اعتماد مستخدم عادي آخر واسم مستخدم ثالث يمكن أن يكون حساب مسؤول، وفي حال نجاح إثبات المفهوم، سيؤدي ذلك إلى تحميل خلية المستخدم الهدف في جذر الفئات للمستخدم الحالي. تم تجر...

PrettyPrague

PrettyPrague ثغرة تصعيد الصلاحيات من المستوى صفر في برنامج GenDigital Avast Antivirus ثغرة أخرى من المستوى صفر في أحد مزودي برامج مكافحة الفيروسات، لست متأكدًا لكنني أعتقد أن هذه الثغرة تؤثر أيضًا على منتجات GenDigital الأخرى مثل AVG و Norton... حاليًا، الكود الاستغلالي PoC متوافق مع أي إصدار من...

-CVE-2020-8103-Bitdefender-Antivirus-Free-EoP

CVE-2020-8103 शोषण लिखित विवरण RedyOps Labs के ब्लॉग में पाया जा सकता है: https://labs.redyops.com/index.php/2020/04/24/bitdefender-antivirus-free-escalation-of-privileges/ तृतीय-पक्ष उपकरण यह शोषण कोड, symboliclink-testing-tools पर भारी रूप से आधारित है, जिसे James Forshaw द्वारा विकसित किया गया...

papers

論文 私の公開論文をすべてひとまとめにした便利なコレクションです。 Symantec Altiris Deployment Solution Elevation of Privileges Vulnerabilities 13048 Exploit-db 公開先: https://www.exploit-db.com/docs/english/13048-symantec-altiris-deployment-solution-elevation-of-privileges-vulns.pdf An Insecurity Overview of the March Networks...

EUVD-2026-69385

Dell PowerStore, an Incorrect Authorization vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges...

CVE-2026-58566

Dell PowerStore, an Incorrect Authorization vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges...

CVE-2026-58566

CVE-2026-58566 is an Incorrect Authorization vulnerability in Dell PowerStore . A low-privileged attacker with remote network access could exploit it to achieve elevation of privileges , with a CVSS 3.1 base score of 8.8 (HIGH) — indicating high impact to confidentiality, integrity, and availabil...

HardBreacher

HardBreacher Vulnerabilità di Elevazione dei Privilegi ZeroDay in Kaspersky Antivirus per Endpoint Il problema ora sta trapelando al di fuori di Microsoft: è stato condotto un sondaggio per decidere se trovare un bug nella versione home o in quella commerciale, e i risultati del sondaggio hanno...

CVE-2026-56796

Dell Command Update DCU, versions prior to 5.7.1, contain an Improper Link Resolution Before File Access 'Link Following' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges...

CVE-2026-53477

Dell Command Update (DCU) versions prior to 5.7.1 contain a Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability. A low-privileged attacker with local access can exploit this to achieve Elevation of Privileges , resulting in full compromise of confidentiality, integrity, and availabili...

CVE-2026-53477

Dell Command Update DCU, versions prior to 5.7.1, contain a Time-of-check Time-of-use TOCTOU Race Condition vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges...

CVE-2026-58565

Dell Command Update (DCU) versions prior to 5.7.1 contain a Missing Authorization vulnerability. A low-privileged attacker with local access can exploit this flaw to achieve Elevation of Privileges , resulting in full compromise of confidentiality, integrity, and availability (CVSS 3.1: 8.8 HIGH ...

EUVD-2026-62521

Dell Command Update DCU, versions prior to 5.7.1, contain a Missing Authorization vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges...

CVE-2026-67266

Dell Command Update DCU, versions prior to 5.7.1, contain an Incorrect Authorization vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges...

CVE-2026-56797

Dell Command Update (DCU) versions prior to 5.7.1 contain a TOCTOU race condition exploitable by a low-privileged local attacker, leading to elevation of privileges (CVSS 7.3 HIGH). No exploitation details are provided. Upgrade to DCU 5.7.1 or later as referenced in Dell DSA-2026-309.

CVE-2026-49816

Dell Command Update DCU, versions prior to 5.7.1, contain a Deserialization of Untrusted Data vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges...

CVE-2026-49817

Dell Command Update DCU, versions prior to 5.7.1, contain a Deserialization of Untrusted Data vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges...

CVE-2026-56796

Dell Command Update DCU, versions prior to 5.7.1, contain an Improper Link Resolution Before File Access 'Link Following' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges...

EUVD-2026-62499

Dell Command Update DCU, versions prior to 5.7.1, contain an Improper Link Resolution Before File Access 'Link Following' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges...

EUVD-2026-62419

Dell PowerPath, version 7.2 through to 8.0 SP1, contains an Improper Privilege Management vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges...