154 matches found
Compiled-PoC-Binary-For-CVE-2023-28252
CVE-2023-28252 的预编译 PoC 二进制文件 该仓库包含一个预编译的二进制文件,可在易受 CVE-2023-28252 影响的 Windows 机器上运行 该预编译二进制文件是 fortra 仓库 中 PoC 漏洞利用代码的略微修改版本。 该文件可通过以下参数运行: root@kitploit: clfseop.exe 可以是您希望以 nt system\authority 权限运行的任何载荷,前提是漏洞利用成功执行 的默认值为 1208 ,如需了解如何找到正确的偏移量,请参阅 fortra 仓库 的默认值为 1 ,如需了解如何找到正确的标志,请参阅 fortra 仓库...
Geutebrueck_GCore_X64_RCE_BO
GeutebrueckGCoreX64RCEBO 用于 Geutebrueck GCore「视频管理」系统的 Metasploit 模块。已在 1.3.8.42 和 1.4.2.37 版本上完成测试。 在安装了 Geutebrueck 产品(GCore)的 Windows(Win 2012R2、Win8.1 等)系统上,可实现以 NT/System 权限进行的完整远程代码执行。 作者: https://www.infoguard.ch Luca Cappiello Maurice Popp 感谢 xorlab https://www.xorlab.com/...
CouchPotato
CouchPotato 请自行编译以避免被检测……某些字符串在编译时进行了 XOR 处理……我不会再发布任何二进制文件。 用法:CouchPotato.exe ip port 修补 ETW 与 AMSI,并使用间接系统调用滥用 SeImpersonatePrivilege。 服务账户 || 管理员 - NT 系统...
CVE-2021-4481
Dräger Protector Software prior to version 6.4.2 contains a local privilege escalation vulnerability due to insecure file system permissions that allows local attackers to execute arbitrary code with elevated privileges. Attackers can replace binaries or loaded modules on the host system to execu...
CVE-2021-4481
CVE-2021-4481 involves Dräger Protector Software, prior to version 6.4.2, which has a local privilege escalation vulnerability caused by insecure file system permissions. According to the connected records, this allows local attackers to replace binaries or loaded modules on the host and execute ...
CVE-2021-4480
CVE-2021-4480 affects Dräger Protector Software prior to version 6.4.2. The issue is a local privilege escalation caused by insecure file system permissions that allow a local attacker to replace binaries or loaded modules and execute code with NT SYSTEM privileges. The description does not speci...
PT-2026-45860
Name of the Vulnerable Software and Affected Versions Dräger Protector Software versions prior to 6.4.2 Description Insecure file system permissions allow local attackers to execute arbitrary code with elevated privileges. This is achieved by replacing binaries or loaded modules on the host syste...
PT-2026-45861
Name of the Vulnerable Software and Affected Versions Dräger Protector Software versions prior to 6.4.2 Description Insecure file system permissions allow local attackers to execute arbitrary code with elevated privileges. This is achieved by replacing binaries or loaded modules on the host syste...
CVE-2019-12091
The Netskope client service, v57 before 57.2.0.219 and v60 before 60.2.0.214, running with NT\SYSTEM privilege, accepts network connections from localhost. The connection handling function in this service suffers from command injection vulnerability. Local users can use this vulnerability to...
EUVD-2020-5798
Malware in sbrugna...
EUVD-2020-5800
Malware in sbrugna...
EUVD-1999-0561
Malware in sbrugna...
EUVD-1999-0578
Malware in sbrugna...
EUVD-2019-2604
Malware in sbrugna...
EUVD-2020-5779
Malware in sbrugna...
EUVD-2020-5802
Malware in sbrugna...
EUVD-2020-5782
Malware in sbrugna...
EUVD-1999-0577
Malware in sbrugna...