33367 matches found
PT-2026-7173
Tanium addressed a local privilege escalation vulnerability in Tanium Module Server...
Tanium Patch Endpoint Tools 安全漏洞
Tanium Patch Endpoint Tools is a patch management component developed by the American company Tanium. Tanium Patch Endpoint Tools has a security vulnerability, which stems from an increase in local privileges...
Tanium Server 安全漏洞
Tanium Server is a security management platform provided by the American company Tanium. There is a security vulnerability in Tanium Server, which stems from local privilege escalation. This vulnerability may allow attackers with low privileges access to Appliances to escalate their local...
📄 Microsoft Windows 11 Pro 23H2 Kernel IOCTL Access Control
This Metasploit module exploits an insufficient access control vulnerability in the Windows Kernel through exposed IOCTL handlers. The vulnerability allows non-privileged users to access kernel-level functionality leading to privilege escalation...
Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Iolo System_Shield
VulnDrivers-n-LOLDrivers-POCs List of POCs I have done for som...
CVE-2025-13818
Local privilege escalation vulnerability via insecure temporary batch file execution in ESET Management Agent...
Veridium SprintWork 安全漏洞
Veridium SprintWork is a web blocking software developed by Veridium Corporation. Version 2.3.1 of Veridium SprintWork contains a security vulnerability. This vulnerability stems from insecure permissions for files, services, and folders on Windows systems, which may lead to an increase in local...
CVE-2020-37160 SprintWork 2.3.1 - Local Privilege Escalation
SprintWork 2.3.1 contains multiple local privilege escalation vulnerabilities through insecure file, service, and folder permissions on Windows systems. Local unprivileged users can exploit missing executable files and weak service configurations to create a new administrative user and gain...
CVE-2020-37160 SprintWork 2.3.1 - Local Privilege Escalation
SprintWork 2.3.1 contains multiple local privilege escalation vulnerabilities through insecure file, service, and folder permissions on Windows systems. Local unprivileged users can exploit missing executable files and weak service configurations to create a new administrative user and gain...
CVE-2019-25304
SecurOS Enterprise 10.2 contains an unquoted service path vulnerability in the SecurosCtrlService that allows local users to potentially execute code with elevated privileges. Attackers can exploit the unquoted path in C:\Program Files x86\ISS\SecurOS\ to insert malicious code that would execute...
CVE-2019-25302
Acer Launch Manager 6.1.7600.16385 contains an unquoted service path vulnerability in the DsiWMIService that allows local users to potentially execute code with elevated privileges. Attackers can exploit the unquoted path in C:\Program Files x86\Launch Manager\dsiwmis.exe to insert malicious code...
CVE-2019-25292
Alps HID Monitor Service 8.1.0.10 contains an unquoted service path vulnerability that allows local attackers to potentially execute arbitrary code with elevated privileges. Attackers can exploit the unquoted path in C:\Program Files\Apoint2K\HidMonitorSvc.exe to inject malicious executables and...
CVE-2019-25293 Blue Stacks App Player 2.4.44.62.57 - "BstHdLogRotatorSvc" Unquote Service Path
BlueStacks App Player 2.4.44.62.57 contains an unquoted service path vulnerability in the BstHdLogRotatorSvc service that allows local attackers to potentially execute arbitrary code. Attackers can exploit the unquoted path in C:\Program Files x86\Bluestacks\HD-LogRotatorService.exe to inject...
CVE-2019-25304
SecurOS Enterprise 10.2 contains an unquoted service path vulnerability in the SecurosCtrlService that allows local users to potentially execute code with elevated privileges. Attackers can exploit the unquoted path in C:\Program Files x86\ISS\SecurOS\ to insert malicious code that would execute...
CVE-2019-25304 Intelligent Security System SecurOS Enterprise 10.2 - 'SecurosCtrlService' Unquoted Service Path
SecurOS Enterprise 10.2 contains an unquoted service path vulnerability in the SecurosCtrlService that allows local users to potentially execute code with elevated privileges. Attackers can exploit the unquoted path in C:\Program Files x86\ISS\SecurOS\ to insert malicious code that would execute...
CVE-2019-25304 Intelligent Security System SecurOS Enterprise 10.2 - 'SecurosCtrlService' Unquoted Service Path
SecurOS Enterprise 10.2 contains an unquoted service path vulnerability in the SecurosCtrlService that allows local users to potentially execute code with elevated privileges. Attackers can exploit the unquoted path in C:\Program Files x86\ISS\SecurOS\ to insert malicious code that would execute...
EUVD-2019-19406
SecurOS Enterprise 10.2 contains an unquoted service path vulnerability in the SecurosCtrlService that allows local users to potentially execute code with elevated privileges. Attackers can exploit the unquoted path in C:\Program Files x86\ISS\SecurOS\ to insert malicious code that would execute...
CVE-2019-25304
CVE-2019-25304 affects SecurOS Enterprise 10.2, specifically the SecurosCtrlService which uses an unquoted service path at C:\Program Files (x86)\ISS\SecurOS\ during startup. This can allow local users to insert malicious code and execute with system-level privileges. Exploitation details and pub...
CVE-2019-25302
Acer Launch Manager 6.1.7600.16385 contains an unquoted service path vulnerability in the DsiWMIService that allows local users to potentially execute code with elevated privileges. Attackers can exploit the unquoted path in C:\Program Files x86\Launch Manager\dsiwmis.exe to insert malicious code...
CVE-2019-25302 Acer Launch Manager 6.1.7600.16385 - 'DsiWMIService' Unquoted Service Path
Acer Launch Manager 6.1.7600.16385 contains an unquoted service path vulnerability in the DsiWMIService that allows local users to potentially execute code with elevated privileges. Attackers can exploit the unquoted path in C:\Program Files x86\Launch Manager\dsiwmis.exe to insert malicious code...