678 matches found
KINGSOFT-WPS-Office-LPE
Avviso JVN https://jvn.jp/en/vu/JVNVU90673830/ I seguenti numeri CVE sono stati assegnati: CVE-2022-25943 KINGSOFT WPS Office LPE WPS Office è una suite per ufficio per Microsoft Windows, macOS, Linux, iOS, Android e HarmonyOS sviluppata dallo sviluppatore di software cinese Kingsoft, con sede a...
CVE-2026-57239
Foxit PDF Reader LPE Prova di concetto di exploit per CVE-2026-3775/CVE-2026-3780 e CVE-2026-57239 che consente di ottenere i diritti NT AUTHORITY\SYSTEM tramite il servizio di aggiornamento di Foxit PDF Reader. Compilazione È sufficiente compilare il binario, copiarlo sul sistema target ed...
CVE-2019-1388
CVE-2019-1388 CVE-2019-1388 Abuso do Diálogo de Certificado do Windows UAC Descrição: Esta exploração de CVE tende a abusar do diálogo de certificado do Windows UAC para executar o link do emissor do certificado como um usuário NT Authority e abrir um navegador que está sob o usuário NT Authority...
CVE-2019-12889
CVE-2019-12889 Resumo Uma escalada de privilégios não autenticada existe no SailPoint Desktop Password Reset 7.2. Um usuário com acesso local apenas à tela de logon do Windows pode elevar seus privilégios para NT AUTHORITY\System. Um atacante precisaria de acesso local à máquina para uma exploraç...
CVE-2020-5752
CVE-2020-5752: Druva inSync - Escalation locale dei privilegi Un exploit basato su C per il Druva inSync Windows Client v6.6.3 e versioni precedenti. L'applicazione espone un servizio RPC sulla porta 6064 vulnerabile a un'iniezione di comandi tramite path traversal. Ciò consente a un utente local...
CVE-2024-1403
CVE-2024-1403 Bypass di Autenticazione Progress OpenEdge Un proof of concept di exploit per Progress OpenEdge CVE-2024-1403. Post sul Blog Maggiori dettagli qui: https://www.horizon3.ai/attack-research/cve-2024-1403-progress-openedge-authentication-bypass-deep-dive Utilizzo Devi fornire le tue...
juicy-potato
Juicy Potato abuso dei privilegi d'oro Una versione zuccherata diRottenPotatoNG, con un po' di succo, ovvero un altro strumento di Escalation dei Privilegi Locali, da Account di Servizio Windows a NT AUTHORITY\SYSTEM Riepilogo RottenPotatoNG e le sue varianti sfruttano la catena di escalation dei...
juicy-potato
Juicy Potato abusing the golden privileges A sugared version ofRottenPotatoNG, with a bit of juice, i.e. another Local Privilege Escalation tool, from a Windows Service Accounts to NT AUTHORITY\SYSTEM Summary RottenPotatoNG and its variants leverages the privilege escalation chain based on BITS...
EUVD-2026-63896
Remote Utilities Host =7.7.3.0 sets insecure ACLs on all DLL files in the installation directory C:\Program Files x86\Remote Utilities - Host, granting FULL CONTROL F to the built-in Everyone group BUILTIN\Everyone, S-1-1-0. A Windows service running as NT AUTHORITY\SYSTEM loads DLLs from this...
Citrix_Secure_Access_LPE_0DAY
Lokale Rechteausweitung bei Citric Secure Access Ich habe eine Schwachstelle zur lokalen Rechteausweitung im Citrix Secure Access Windows Client entdeckt. Diese Schwachstelle ermöglicht es einem privilegierten Administrator, eine bösartige Nutzlast einzuschleusen, um NT-Authority-Berechtigungen z...
EUVD-2026-57713
Local privilege escalation vulnerabilities in the Palo Alto Networks GlobalProtect™ app enable a local user to escalate their privileges to NT AUTHORITY\SYSTEM on Windows, and root on macOS and Linux. This enables a non-administrative user to execute arbitrary commands with administrative...
CVE-2026-0299
Local privilege escalation vulnerabilities in the Palo Alto Networks GlobalProtect™ app enable a local user to escalate their privileges to NT AUTHORITY\SYSTEM on Windows, and root on macOS and Linux. This enables a non-administrative user to execute arbitrary commands with administrative...
CVE-2026-0299 GlobalProtect App: Local Privilege Escalation Vulnerabilities
Local privilege escalation vulnerabilities in the Palo Alto Networks GlobalProtect™ app enable a local user to escalate their privileges to NT AUTHORITY\SYSTEM on Windows, and root on macOS and Linux. This enables a non-administrative user to execute arbitrary commands with administrative...
EUVD-2026-57239
A maliciously crafted input, when processed by the Autodesk Installer IPC frame parser, may trigger improper validation of an input-specified position or offset, resulting in an out-of-range substring operation. A malicious actor may leverage this vulnerability to cause the NT AUTHORITY\SYSTEM...
PT-2026-71097
A maliciously crafted input, when processed by the Autodesk Installer IPC frame parser, may trigger improper validation of an input-specified position or offset, resulting in an out-of-range substring operation. A malicious actor may leverage this vulnerability to cause the NT AUTHORITYSYSTEM...
CVE-2026-18759 An improper authentication and path traversal vulnerability exists in ASUSTOR Backup Plan and ASUSTOR EZ Sync.
The background service of ABP or AES runs as NT AUTHORITY\SYSTEM and implements a file-based inter-process communication IPC mechanism protected by AES encryption. Because the encryption key file is readable by standard users and protected using DPAPI. Any authenticated local user can recover the...
CVE-2026-13079
A local privilege escalation vulnerability in the WatchGuard Mobile VPN with SSL client for Windows allows a local attacker to escalate their privileges to NT AUTHORITY\SYSTEM on the machine where the client is installed. This issue affects the Mobile VPN with SSL client for Windows up to and...
CVE-2026-13079
CVE-2026-13079 describes a local privilege escalation in the WatchGuard Mobile VPN with SSL client for Windows . The issue allows a local attacker to escalate to NT AUTHORITY\SYSTEM on the machine hosting the Windows client. Affected scope includes the Windows client versions up to and including ...
PT-2026-55325
Name of the Vulnerable Software and Affected Versions WatchGuard Mobile VPN with SSL client for Windows versions prior to 2026.3 Description A local privilege escalation issue allows an attacker with local access to the machine where the client is installed to elevate their privileges to NT...