Microsoft Spooler Local Privilege Elevation Exploit

This exploit leverages a file write vulnerability in the print spooler service which will restart if stopped. Because the service cannot be stopped long enough to remove the dll, there is no way to remove the dll once it is loaded by the service. Essentially, on default settings, this module adds...

Sonicwall SonicWall NetExtender Windows client Code Issue Vulnerability

Sonicwall NetExtender Windows client is a Windows-based SSL VPN Virtual Private Network client application from Sonicwall, Inc. A security vulnerability exists in SonicWall NetExtender Windows client version 10.2.300 and earlier, the source of which allows a local attacker to gain elevated...

CVE-2020-13539

An exploitable local privilege elevation vulnerability exists in the file system permissions of the Win-911 Enterprise V4.20.13 install directory via “WIN-911 Mobile Runtime” service. Depending on the vector chosen, an attacker can overwrite various executables which could lead to escalation of t...

CVE-2020-13539

Win-911 Enterprise has a local privilege elevation vulnerability (CVE-2020-13539) affecting version 4.20.13. The issue stems from insecure file-system permissions in the install directory, exposed via the WIN-911 Mobile Runtime service. According to TALOS, by default the install directory allows ...

PT-2021-9622 · Unknown · Win-911 Enterprise

Name of the Vulnerable Software and Affected Versions: Win-911 Enterprise version 4.20.13 Description: A local privilege elevation issue exists due to file system permissions in the install directory, specifically via the WIN-911 Account Change Utility. This allows an attacker to overwrite...

CVE-2020-13539: Incorrect Default Permissions

An exploitable local privilege elevation vulnerability exists in the file system permissions of the Win-911 Enterprise V4.20.13 install directory via “WIN-911 Mobile Runtime” service. Depending on the vector chosen, an attacker can overwrite various executables which could lead to escalation of t...

CVE-2020-13541: Incorrect Default Permissions

An exploitable local privilege elevation vulnerability exists in the file system permissions of the Mobile-911 Server V2.5 install directory. Depending on the vector chosen, an attacker can overwrite the service executable and execute arbitrary code with System privileges or replace other files...

CVE-2020-13540: Incorrect Default Permissions

An exploitable local privilege elevation vulnerability exists in the file system permissions of the Win-911 Enterprise V4.20.13 install directory via WIN-911 Account Change Utility. Depending on the vector chosen, an attacker can overwrite various executables which could lead to escalation of the...

Falcon Terminal Security System V9.0 suffers from local elevation of privilege vulnerability

The business scope of Beijing Falcon Security Technology Co., Ltd. includes: technology promotion, technology development, technology service, technology consulting; sales of computers, software and auxiliary equipment, electronic products and so on. Falcon Terminal Security System V9.0 has a loc...

Microsoft Windows DrawIconEx Local Privilege Escalation

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core/post/file' require 'msf/core/exploit/exe' require 'msf/core/post/windows/priv' class MetasploitModule 'Microsoft Windows DrawIconEx OOB Write Local...

CVE-2020-10003: Improper Link Resolution Before File Access

An issue existed within the path validation logic for symlinks. This issue was addressed with improved path sanitization. This issue is fixed in macOS Big Sur 11.0.1, iOS 14.2 and iPadOS 14.2, tvOS 14.2, watchOS 7.1. A local attacker may be able to elevate their privileges...

CVE-2020-13542

A local privilege elevation vulnerability exists in the file system permissions of LogicalDoc 8.5.1 installation. Depending on the vector chosen, an attacker can either replace the service binary or replace DLL files loaded by the service, both which get executed by a service thus executing...

CVE-2020-13542

A local privilege elevation vulnerability exists in the file system permissions of LogicalDoc 8.5.1 installation. Depending on the vector chosen, an attacker can either replace the service binary or replace DLL files loaded by the service, both which get executed by a service thus executing...

CVE-2020-13542

CVE-2020-13542 is a local privilege escalation in LogicalDoc 8.5.1 caused by insecure file-system permissions that allow replacing the service binary or loaded DLLs. This leads to arbitrary code execution with SYSTEM privileges when the service runs. TALOS details show the vulnerability affects t...

CVE-2020-13542: Incorrect Default Permissions

A local privilege elevation vulnerability exists in the file system permissions of LogicalDoc 8.5.1 installation. Depending on the vector chosen, an attacker can either replace the service binary or replace DLL files loaded by the service, both which get executed by a service thus executing...

PT-2020-13609

Name of the Vulnerable Software and Affected Versions LogicalDoc version 8.5.1 Description A local privilege elevation issue exists in the file system permissions of the LogicalDoc installation. An attacker can replace the service binary or DLL files loaded by the service, which are executed by a...

Broadcom CA Unified Infrastructure Management 安全漏洞

CA Unified Infrastructure Management is a powerful unified IT monitoring solution that helps organizations deliver reliable, flexible IT services. An elevation of privilege vulnerability exists in the controller component in CA Unified Infrastructure Management 20.1 and earlier versions, which ca...

CVE-2020-13537

An exploitable local privilege elevation vulnerability exists in the file system permissions of Moxa MXView series 3.1.8 installation. Depending on the vector chosen, an attacker can either add code to a script or replace a binary.By default MXViewService, which starts as a NT SYSTEM authority us...

CVE-2020-13536

An exploitable local privilege elevation vulnerability exists in the file system permissions of Moxa MXView series 3.1.8 installation. Depending on the vector chosen, an attacker can either add code to a script or replace a binary. By default MXViewService, which starts as a NT SYSTEM authority...

CVE-2020-13537

An exploitable local privilege elevation vulnerability exists in the file system permissions of Moxa MXView series 3.1.8 installation. Depending on the vector chosen, an attacker can either add code to a script or replace a binary.By default MXViewService, which starts as a NT SYSTEM authority us...