CVE-2019-15511

Exploit de GOG Galaxy para CVE-2019-15511 usage: exploit.py -h --action LaunchElevatedRequest,FixDirectoryPrivilegesRequest,CreateDirectoryRequest,QueryProcessInfoRequest,InstallServiceRequest,DeleteServiceRequest,MoveAndVerifyGlobalDependencyRequest target positional arguments: target optional...

CVE-2020-25769

GOG Galaxy 本地权限提升 - CVE-2020-25769 GOG Galaxy 2.0 是 CD Projekt 开发的一个平台，设计为商店、软件分发、社交网络和统一游戏启动器。在 Windows 下，客户端依赖 GalaxyClientService 组件处理特权任务。应用程序未能正确验证请求特权任务的身份。此情况可能被滥用以获得本地权限提升漏洞。 概要 Title: GOG Galaxy 中的本地权限提升 CVE Name: CVE-2020-25769 Permalink:...

EUVD-2020-17293

Malware in sbrugna...

EUVD-2019-6498

Malware in sbrugna...

CVE-2020-7352

The GalaxyClientService component of GOG Galaxy runs with elevated SYSTEM privileges in a Windows environment. Due to the software shipping with embedded, static RSA private key, an attacker with this key material and local user permissions can effectively send any operating system command to the...

CVE-2020-7352: Use of Hard-coded Credentials

The GalaxyClientService component of GOG Galaxy runs with elevated SYSTEM privileges in a Windows environment. Due to the software shipping with embedded, static RSA private key, an attacker with this key material and local user permissions can effectively send any operating system command to the...

GOG GalaxyClientService Privilege Escalation

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core/post/windows/services' require 'openssl' class MetasploitModule 'GOG GalaxyClientService Privilege Escalation', 'Description' = %q This module will sen...

GOG GalaxyClientService Privilege Escalation Exploit

This Metasploit module will send arbitrary filepaths to the GOG GalaxyClientService, which will be executed with SYSTEM privileges verified on GOG Galaxy Client v1.2.62 and v2.0.12; prior versions are also likely affected. This module requires Metasploit: https://metasploit.com/download Current...

GOG Galaxy elevation of privilege vulnerability (CNVD-2020-02829)

GOG Galaxy is a game client program. The program is used to install, launch and update games. An elevation of privilege vulnerability exists in the GalaxyClientService installed by GOG Galaxy, which stems from faulty access control. An attacker can exploit this vulnerability by sending...

CVE-2019-15511: Missing Authentication for Critical Function

An exploitable local privilege escalation vulnerability exists in the GalaxyClientService installed by GOG Galaxy. Due to Improper Access Control, an attacker can send unauthenticated local TCP packets to the service to gain SYSTEM privileges in Windows system where GOG Galaxy software is...