CVE-2026-57239

Foxit PDF Reader LPE Preuve de concept d'exploit pour CVE-2026-3775/CVE-2026-3780 et CVE-2026-57239 qui permet d'obtenir les droits NT AUTHORITY\SYSTEM via le service de mise à jour de Foxit PDF Reader. Compilation Compilez simplement le binaire, placez-le sur votre cible et exécutez-le...

CVE-2020-5752

CVE-2020-5752: Élévation de privilèges locale de Druva inSync Un exploit en C pour le client Windows Druva inSync v6.6.3 et inférieur. L'application expose un service RPC sur le port 6064 qui est vulnérable à une injection de commande via un parcours de chemin. Cela permet à un utilisateur local...

CVE-2019-12889

CVE-2019-12889 Resumo Uma escalada de privilégios não autenticada existe no SailPoint Desktop Password Reset 7.2. Um usuário com acesso local apenas à tela de logon do Windows pode elevar seus privilégios para NT AUTHORITY\System. Um atacante precisaria de acesso local à máquina para uma exploraç...

juicy-potato

Juicy Potato Missbrauch der goldenen Privilegien Eine gezuckerte Version vonRottenPotatoNG, mit etwas Saft, d.h. ein weiteres Tool zur lokalen Privilegienausweitung, von Windows-Dienstkonten zu NT AUTHORITY\SYSTEM Zusammenfassung RottenPotatoNG und seine Varianten nutzen die...

juicy-potato

Juicy Potato abusing the golden privileges A sugared version ofRottenPotatoNG, with a bit of juice, i.e. another Local Privilege Escalation tool, from a Windows Service Accounts to NT AUTHORITY\SYSTEM Summary RottenPotatoNG and its variants leverages the privilege escalation chain based on BITS...

CVE-2024-1403

CVE-2024-1403 Bypass di Autenticazione Progress OpenEdge Un proof of concept di exploit per Progress OpenEdge CVE-2024-1403. Post sul Blog Maggiori dettagli qui: https://www.horizon3.ai/attack-research/cve-2024-1403-progress-openedge-authentication-bypass-deep-dive Utilizzo Devi fornire le tue...

EUVD-2026-63896

Remote Utilities Host =7.7.3.0 sets insecure ACLs on all DLL files in the installation directory C:\Program Files x86\Remote Utilities - Host, granting FULL CONTROL F to the built-in Everyone group BUILTIN\Everyone, S-1-1-0. A Windows service running as NT AUTHORITY\SYSTEM loads DLLs from this...

CVE-2026-0299

Local privilege escalation vulnerabilities in the Palo Alto Networks GlobalProtect™ app enable a local user to escalate their privileges to NT AUTHORITY\SYSTEM on Windows, and root on macOS and Linux. This enables a non-administrative user to execute arbitrary commands with administrative...

CVE-2026-0299 GlobalProtect App: Local Privilege Escalation Vulnerabilities

Local privilege escalation vulnerabilities in the Palo Alto Networks GlobalProtect™ app enable a local user to escalate their privileges to NT AUTHORITY\SYSTEM on Windows, and root on macOS and Linux. This enables a non-administrative user to execute arbitrary commands with administrative...

EUVD-2026-57239

A maliciously crafted input, when processed by the Autodesk Installer IPC frame parser, may trigger improper validation of an input-specified position or offset, resulting in an out-of-range substring operation. A malicious actor may leverage this vulnerability to cause the NT AUTHORITY\SYSTEM...

PT-2026-71097

A maliciously crafted input, when processed by the Autodesk Installer IPC frame parser, may trigger improper validation of an input-specified position or offset, resulting in an out-of-range substring operation. A malicious actor may leverage this vulnerability to cause the NT AUTHORITYSYSTEM...

CVE-2026-18759 An improper authentication and path traversal vulnerability exists in ASUSTOR Backup Plan and ASUSTOR EZ Sync.

The background service of ABP or AES runs as NT AUTHORITY\SYSTEM and implements a file-based inter-process communication IPC mechanism protected by AES encryption. Because the encryption key file is readable by standard users and protected using DPAPI. Any authenticated local user can recover the...

CVE-2026-13079

A local privilege escalation vulnerability in the WatchGuard Mobile VPN with SSL client for Windows allows a local attacker to escalate their privileges to NT AUTHORITY\SYSTEM on the machine where the client is installed. This issue affects the Mobile VPN with SSL client for Windows up to and...

CVE-2026-13079

CVE-2026-13079 describes a local privilege escalation in the WatchGuard Mobile VPN with SSL client for Windows . The issue allows a local attacker to escalate to NT AUTHORITY\SYSTEM on the machine hosting the Windows client. Affected scope includes the Windows client versions up to and including ...

PT-2026-55325

Name of the Vulnerable Software and Affected Versions WatchGuard Mobile VPN with SSL client for Windows versions prior to 2026.3 Description A local privilege escalation issue allows an attacker with local access to the machine where the client is installed to elevate their privileges to NT...

EUVD-2026-28530

NAVER MYBOX Explorer for Windows before 3.0.11.160 allows a local attacker to escalate privileges to NT AUTHORITY\SYSTEM via registry manipulation due to improper privilege checks...

CVE-2026-8148

NAVER MYBOX Explorer for Windows before 3.0.11.160 allows a local attacker to escalate privileges to NT AUTHORITY\SYSTEM via registry manipulation due to improper privilege checks...

TRYHACKME_FLATLINE_REPORT

TryHackMe – Flatline CTF | Penetration Testing Report !Platf...

PT-2026-20800

An attacker can exploit the update behavior of the WorkTime monitoring daemon to elevate privileges on the local system to NT AuthoritySYSTEM. A malicious executable must be named WTWatch.exe and dropped in the C:ProgramDatawtaClientExe directory, which is writable by "Everyone". The executable...

Metasploit Wrap-Up 02/13/2026

SolarWinds Web Help Desk Our very own sfewer-r7 has developed an exploit module for the SolarWinds Web Help Desk vulnerabilities CVE-2025-40536 and CVE-2025-40551. On successful exploitation the session will be as running as NT AUTHORITY\SYSTEM. For more information see the Rapid7’s SolarWinds We...