CVE-2019-9745

Автор: Arn Vollebregt Введение Творческий подход лежит в основе тестирования на проникновение, что делает нашу работу интересной. Однако одной из ловушек является склонность к «переусложнению» сценариев атак и сосредоточению исключительно на ошибках условиях ошибок. Дефекты непредусмотренное...

CVE-2020-1313

CVE-2020-1313 सारांश Windows Update Orchestrator Service एक DCOM सेवा है जिसका उपयोग अन्य घटकों द्वारा पहले से डाउनलोड किए गए Windows अपडेट को स्थापित करने के लिए किया जाता है। USO कॉल करने वालों के अनुचित प्राधिकरण के कारण विशेषाधिकार उन्नयन किसी भी उपयोगकर्ता से स्थानीय सिस्टम तक की चपेट में था...

CVE-2020-11493

CVE-2020-11492 Windows के लिए Docker Desktop में विशेषाधिकार वृद्धि भेद्यता privilege escalation vulnerability का Proof-of-Concept PoC। यह भेद्यता Docker संस्करण 2.3.0.2 में 11 मई, 2020 को पैच की गई थी। यह PoC निम्नलिखित कार्य करता है: डॉकर नामित पाइप \.\pipe\dockerLifecycleServer की नकल करते...

CVE-2023-27532-RCE-Only

फोर्क किया गया संस्करण केवल RCE रिपॉजिटरी को फोर्क किया गया और क्रेडेंशियल लीक वाला हिस्सा हटा दिया गया। संकलन compilation के लिए सुधार लागू किए गए। CVE-2023-27532 CVE-2023-27532 का शोषण करने और या तो प्लेनटेक्स्ट क्रेडेंशियल लीक करने या रिमोट कमांड निष्पादन करने हेतु प्रूफ-ऑफ-कॉन्सेप्ट कोड। अवलो...

RogueWinRM

RogueWinRM RogueWinRM एक स्थानीय विशेषाधिकार वृद्धि शोषण है जो सेवा खाते SeImpersonatePrivilege के साथ से स्थानीय सिस्टम खाते में वृद्धि करने की अनुमति देता है यदि WinRM सेवा चल रही नहीं है Win10 पर डिफ़ॉल्ट लेकिन Windows Server 2019 पर नहीं। संक्षेप में, यह पोर्ट 5985 पर आने वाले कनेक्शन के लिए...

CVE-2022-26503

CVE-2022-26503 الملخص: ثغرة CVE-2022-26503 في وكيل Veeam لنظام التشغيل Microsoft Windows تسمح بتصعيد الامتيازات محليًا. يمكن للمهاجم الذي نجح في استغلال هذه الثغرة تنفيذ تعليمات برمجية عشوائية بصلاحيات LOCAL SYSTEM. شكر خاص لـ @ultrayoba التصحيح: التصحيح المُطبَّق يُظهر أثر إلغاء التسلسل: مركز...

HPLIP: HPLIP: Privilege escalation and arbitrary code execution via operating system command injection

A flaw was found in the HP Linux Imaging and Printing Software HPLIP. This vulnerability may allow a local attacker to achieve escalation of privileges and/or arbitrary code execution through operating system command injection. This could lead to an attacker gaining unauthorized control over the...

dotnet: .NET Framework: Privilege escalation via code injection

A flaw was found in .NET Framework. This vulnerability, caused by improper control of code generation, allows an unauthorized attacker to inject malicious code. Successful exploitation can lead to local privilege escalation, enabling the attacker to gain higher access rights on the affected syste...

CVE-2026-15379

CVE-2026-15379 : The Altiris WMI provider exposes the AltirisAgent_Stream class, allowing any local standard user to read files accessible to the SYSTEM context, bypassing filesystem ACLs. The provider uses LocalSystem context for WMI queries without re-impersonating the caller, enabling read acc...

Exploit for Improper Privilege Management in Microsoft

CVE-2026-49176 SYSTEM Shell PoC Local privilege-escalation pr...

CVE-2020-37252

Realtek Audio Service 1.0.0.55 contains an unquoted service path vulnerability in RtkAudioService64.exe that allows local attackers to escalate privileges by injecting malicious code. Attackers can place executable files in the unquoted service path directory to execute arbitrary code with...

CVE-2023-54353

Chromacam 4.0.3.0 contains an unquoted service path vulnerability in the PsyFrameGrabberService that allows local attackers to execute arbitrary code by placing malicious executables in unquoted path directories. Attackers with write access to C:\ or subdirectories like C:\Program Files...

CVE-2020-37254

Wondershare PDFelement 5.2.9 contains a privilege escalation vulnerability due to an unquoted service path in the WsAppService Windows service. Local attackers can place a malicious executable in the service path and execute code with LocalSystem privileges upon service restart or system reboot...

CVE-2020-37254

Wondershare PDFelement 5.2.9 is affected by a privilege escalation due to an unquoted service path in the WsAppService Windows service. Local attackers could place a malicious executable in the service path and gain code execution with LocalSystem privileges when the service restarts or the syste...

CVE-2020-37254 Wondershare PDFelement 5.2.9 Privilege Escalation via Unquoted Service Path

Wondershare PDFelement 5.2.9 contains a privilege escalation vulnerability due to an unquoted service path in the WsAppService Windows service. Local attackers can place a malicious executable in the service path and execute code with LocalSystem privileges upon service restart or system reboot...

CVE-2020-37252 Realtek Audio Service 1.0.0.55 Unquoted Service Path Privilege Escalation

Realtek Audio Service 1.0.0.55 contains an unquoted service path vulnerability in RtkAudioService64.exe that allows local attackers to escalate privileges by injecting malicious code. Attackers can place executable files in the unquoted service path directory to execute arbitrary code with...

EUVD-2020-31252

RealTimes Desktop Service 18.1.4 contains an unquoted service path vulnerability in the rpdsvc.exe binary that allows local attackers to escalate privileges. Attackers can place malicious executables in unquoted path directories to execute arbitrary code with LocalSystem privileges during service...

CVE-2020-37252

Realtek Audio Service 1.0.0.55 contains an unquoted service path vulnerability in RtkAudioService64.exe that allows local attackers to escalate privileges by injecting malicious code. Attackers can place executable files in the unquoted service path directory to execute arbitrary code with...

CVE-2020-37252

CVE-2020-37252 describes an unquoted service path vulnerability in Realtek Audio Service 1.0.0.55, specifically in RtkAudioService64.exe. The root cause is the unquoted service path, enabling local attackers to escalate privileges by placing a malicious executable in the unquoted directory, which...

EUVD-2020-31251

TFTP Broadband 4.3.0.1465 contains an unquoted service path vulnerability in the tftpt.exe service binary that allows local attackers to execute arbitrary code with system privileges. Attackers can place a malicious executable in the Program Files directory path that will be executed during servi...