678 matches found
CVE-2024-1403
CVE-2024-1403 Progress OpenEdge Bypass de Autenticación Una prueba de concepto de exploit para Progress OpenEdge CVE-2024-1403. Publicación en el Blog Más detalles aquí: https://www.horizon3.ai/attack-research/cve-2024-1403-progress-openedge-authentication-bypass-deep-dive Uso Debe proporcionar s...
Citrix_Secure_Access_LPE_0DAY
Escalada de privilegios local en Citric Secure Access He descubierto una vulnerabilidad de escalada de privilegios local en el cliente de Windows de Citrix Secure Access. Esta vulnerabilidad permite que un administrador privilegiado inyecte una carga útil maliciosa para obtener privilegios de NT...
CVE-2026-57239
Foxit PDF Reader LPE CVE-2026-3775/CVE-2026-3780 और CVE-2026-57239 के लिए प्रूफ ऑफ कॉन्सेप्ट एक्सप्लॉइट, जो आपको Foxit PDF Reader अपडेटर सेवा के माध्यम से NT AUTHORITY\SYSTEM अधिकार प्राप्त करने देता है। Build बस बाइनरी बनाएँ, इसे अपने लक्ष्य पर डालें और चलाएँ। root@kitploit: cargo build --releas...
CVE-2019-1388
CVE-2019-1388 CVE-2019-1388 Злоупотребление диалогом сертификатов UAC Windows Описание: Эта эксплуатация CVE направлена на злоупотребление диалогом сертификатов UAC Windows для выполнения ссылки издателя сертификата от имени пользователя NT Authority и открытия браузера, работающего под учетной...
CVE-2020-5752
CVE-2020-5752: Élévation de privilèges locale de Druva inSync Un exploit en C pour le client Windows Druva inSync v6.6.3 et inférieur. L'application expose un service RPC sur le port 6064 qui est vulnérable à une injection de commande via un parcours de chemin. Cela permet à un utilisateur local...
CVE-2019-12889
CVE-2019-12889 Resumo Uma escalada de privilégios não autenticada existe no SailPoint Desktop Password Reset 7.2. Um usuário com acesso local apenas à tela de logon do Windows pode elevar seus privilégios para NT AUTHORITY\System. Um atacante precisaria de acesso local à máquina para uma exploraç...
juicy-potato
Juicy Potato Missbrauch der goldenen Privilegien Eine gezuckerte Version vonRottenPotatoNG, mit etwas Saft, d.h. ein weiteres Tool zur lokalen Privilegienausweitung, von Windows-Dienstkonten zu NT AUTHORITY\SYSTEM Zusammenfassung RottenPotatoNG und seine Varianten nutzen die...
juicy-potato
Juicy Potato abusing the golden privileges A sugared version ofRottenPotatoNG, with a bit of juice, i.e. another Local Privilege Escalation tool, from a Windows Service Accounts to NT AUTHORITY\SYSTEM Summary RottenPotatoNG and its variants leverages the privilege escalation chain based on BITS...
KINGSOFT-WPS-Office-LPE
Avviso JVN https://jvn.jp/en/vu/JVNVU90673830/ I seguenti numeri CVE sono stati assegnati: CVE-2022-25943 KINGSOFT WPS Office LPE WPS Office è una suite per ufficio per Microsoft Windows, macOS, Linux, iOS, Android e HarmonyOS sviluppata dallo sviluppatore di software cinese Kingsoft, con sede a...
EUVD-2026-63896
Remote Utilities Host =7.7.3.0 sets insecure ACLs on all DLL files in the installation directory C:\Program Files x86\Remote Utilities - Host, granting FULL CONTROL F to the built-in Everyone group BUILTIN\Everyone, S-1-1-0. A Windows service running as NT AUTHORITY\SYSTEM loads DLLs from this...
EUVD-2026-57713
Local privilege escalation vulnerabilities in the Palo Alto Networks GlobalProtect™ app enable a local user to escalate their privileges to NT AUTHORITY\SYSTEM on Windows, and root on macOS and Linux. This enables a non-administrative user to execute arbitrary commands with administrative...
CVE-2026-0299
Local privilege escalation vulnerabilities in the Palo Alto Networks GlobalProtect™ app enable a local user to escalate their privileges to NT AUTHORITY\SYSTEM on Windows, and root on macOS and Linux. This enables a non-administrative user to execute arbitrary commands with administrative...
CVE-2026-0299 GlobalProtect App: Local Privilege Escalation Vulnerabilities
Local privilege escalation vulnerabilities in the Palo Alto Networks GlobalProtect™ app enable a local user to escalate their privileges to NT AUTHORITY\SYSTEM on Windows, and root on macOS and Linux. This enables a non-administrative user to execute arbitrary commands with administrative...
EUVD-2026-57239
A maliciously crafted input, when processed by the Autodesk Installer IPC frame parser, may trigger improper validation of an input-specified position or offset, resulting in an out-of-range substring operation. A malicious actor may leverage this vulnerability to cause the NT AUTHORITY\SYSTEM...
PT-2026-71097
A maliciously crafted input, when processed by the Autodesk Installer IPC frame parser, may trigger improper validation of an input-specified position or offset, resulting in an out-of-range substring operation. A malicious actor may leverage this vulnerability to cause the NT AUTHORITYSYSTEM...
CVE-2026-18759 An improper authentication and path traversal vulnerability exists in ASUSTOR Backup Plan and ASUSTOR EZ Sync.
The background service of ABP or AES runs as NT AUTHORITY\SYSTEM and implements a file-based inter-process communication IPC mechanism protected by AES encryption. Because the encryption key file is readable by standard users and protected using DPAPI. Any authenticated local user can recover the...
CVE-2026-13079
A local privilege escalation vulnerability in the WatchGuard Mobile VPN with SSL client for Windows allows a local attacker to escalate their privileges to NT AUTHORITY\SYSTEM on the machine where the client is installed. This issue affects the Mobile VPN with SSL client for Windows up to and...
CVE-2026-13079
CVE-2026-13079 describes a local privilege escalation in the WatchGuard Mobile VPN with SSL client for Windows . The issue allows a local attacker to escalate to NT AUTHORITY\SYSTEM on the machine hosting the Windows client. Affected scope includes the Windows client versions up to and including ...
PT-2026-55325
Name of the Vulnerable Software and Affected Versions WatchGuard Mobile VPN with SSL client for Windows versions prior to 2026.3 Description A local privilege escalation issue allows an attacker with local access to the machine where the client is installed to elevate their privileges to NT...