CVE-2024-0670

CVE-2024-0670 – CheckMK एजेंट में स्थानीय विशेषाधिकार वृद्धि PowerShell PoC सारांश यह रिपॉजिटरी CVE-2024-0670 के लिए एक स्वतंत्र PowerShell प्रूफ ऑफ कॉन्सेप्ट प्रस्तुत करती है, जो CheckMK एजेंट में विंडोज स्थानीय विशेषाधिकार वृद्धि की कमजोरी है। यह कमजोरी एक कम-विशेषाधिकार वाले स्थानीय उपयोगकर्ता...

HTB-NanoCorp-CVE-2024-0670

CVE-2024-0670 - CheckMK एजेंट MSI रिपेयर विशेषाधिकार वृद्धि NanoCorp HTB इस रिपॉजिटरी में एक PowerShell स्क्रिप्ट है जिसका उपयोग Hack The Box के NanoCorp मशीन पर CVE-2024-0670 का शोषण करने के लिए किया जाता है। यह कमजोरी एक निम्न-विशेषाधिकार वाले उपयोगकर्ता को CheckMK Windows एजेंट MSI रिपेयर...

CVE-2024-0670-CheckMK-Agent-Local-Privilege-Escalation-Exploit

CVE-2024-0670 – CheckMK एजेंट लोकल प्रिविलेज एस्केलेशन PoC इस रिपॉजिटरी में CVE-2024-0670 के लिए एक सरल और स्वच्छ प्रूफ-ऑफ-कॉन्सेप्ट है, जो CheckMK विंडोज एजेंट में एक लोकल प्रिविलेज एस्केलेशन भेद्यता है। कम-विशेषाधिकार वाला उपयोगकर्ता MSI मरम्मत के दौरान निष्पादित लिखने योग्य अस्थायी फ़ाइल पथों ...

msi-search

البحث عن MSI تخزّن Windows ملفات MSI في C:\Windows\Installer\ بأسماء ملفات عشوائية تتكوّن من أحرف وأرقام متبوعة بامتداد ".msi". تسهّل هذه الأداة على مشغّلي الفرق الحمراء وفرق الأمان مهمة تحديد ملفات MSI المقابلة لكل برنامج، وتمكّنهم من تنزيل الملف المعني للتحقيق في ثغرات رفع الامتيازات المحلية عب...

mindmanager-poc

mindmanager-poc प्रभावित एप्लिकेशन: MindManager23setup.exe प्लेटफ़ॉर्म: Windows समस्या: MSI इंस्टॉलर रिपेयर मोड के माध्यम से स्थानीय विशेषाधिकार वृद्धि EXE हाईजैकिंग रेस कंडीशन खोज और रिपोर्ट: Pawel Karwowski और Julian Horoszkiewicz Eviden Red Team प्रस्तावित शमन उपाय:...

Rockwell Automation FactoryTalk Linx

RISK EVALUATION Successful exploitation of these vulnerabilities may allow full access to all files, processes, and system resources. 2. RECOMMENDED PRACTICES CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures. CISA also...

EUVD-2025-34183

A security issue exists within the Rockwell Automation Driver Package x64 Microsoft Installer File MSI repair functionality, installed with FTLinx. Authenticated attackers with valid Windows Users credentials can initiate a repair and hijack the resulting console window for vbpinstall.exe. This...

CVE-2025-9068

CVE-2025-9068 affects Rockwell Automation Driver Package x64 MSI repair functionality (installed with FTLinx). Authenticated Windows users can initiate a repair and hijack the console window for vbpinstall.exe, spawning a SYSTEM-level command prompt with full access to files, processes, and syste...

PT-2025-41917

Name of the Vulnerable Software and Affected Versions Rockwell Automation Driver Package x64 affected versions not specified Description A security issue exists in the Rockwell Automation Driver Package x64 Microsoft Installer File MSI repair functionality, installed with FTLinx. An authenticated...

EUVD-2023-51280

Malicious code in bioql PyPI...

EUVD-2023-29352

Malicious code in bioql PyPI...

CVE-2023-47145

IBM Db2 for Windows includes Db2 Connect Server 10.5, 11.1, and 11.5 could allow a local user to escalate their privileges to the SYSTEM user using the MSI repair functionality. IBM X-Force ID: 270402...

CVE-2023-25396

Privilege escalation in the MSI repair functionality in Caphyon Advanced Installer 20.0 and below allows attackers to access and manipulate system files...

PT-2024-7800 · Palo Alto Networks +1 · Palo Alto Networks Globalprotect +1

Name of the Vulnerable Software and Affected Versions: Palo Alto Networks GlobalProtect App versions prior to 6.2.5 Description: A privilege escalation issue in the Palo Alto Networks GlobalProtect app on Windows allows a locally authenticated non-administrative Windows user to escalate their...

Design/Logic Flaw

The C:\Program Files x86\Splashtop\Splashtop Software Updater\uninst.exe process creates a folder at C:\Windows\Tempnsu.tmp and copies itself to it as Au.exe. The C:\Windows\Tempnsu.tmp\Au.exe file is automatically launched as SYSTEM when the system reboots or when a standard user runs an MSI...

CVE-2023-47145

IBM Db2 for Windows includes Db2 Connect Server 10.5, 11.1, and 11.5 could allow a local user to escalate their privileges to the SYSTEM user using the MSI repair functionality. IBM X-Force ID: 270402...

Code injection

IBM Db2 for Windows includes Db2 Connect Server 10.5, 11.1, and 11.5 could allow a local user to escalate their privileges to the SYSTEM user using the MSI repair functionality. IBM X-Force ID: 270402...

CVE-2023-47145 IBM Db2 for Windows privilege escalation

IBM Db2 for Windows includes Db2 Connect Server 10.5, 11.1, and 11.5 could allow a local user to escalate their privileges to the SYSTEM user using the MSI repair functionality. IBM X-Force ID: 270402...

CVE-2023-47145 IBM Db2 for Windows privilege escalation

IBM Db2 for Windows includes Db2 Connect Server 10.5, 11.1, and 11.5 could allow a local user to escalate their privileges to the SYSTEM user using the MSI repair functionality. IBM X-Force ID: 270402...

PT-2024-1064 · Ibm · Ibm Db2

Name of the Vulnerable Software and Affected Versions: IBM Db2 for Windows includes Db2 Connect Server versions 10.5 through 11.5 Description: The issue is related to insufficient access control in IBM DB2 and DB2 Connect Server, which could allow a local user to escalate their privileges to the...