Astra Linux – Vulnerability in freerdp2

FreeRDP is a free implementation of the Remote Desktop Protocol RDP. In versions prior to 2.7.0, NT LAN Manager NTLM authentication does not properly abort when someone provides an empty password value. This issue affects FreeRDP-based RDP Server implementations. RDP clients are not affected. The...

CVE-2026-110746 CVE-2026-110746

A local privilege escalation vulnerability in TotalAV allows an unprivileged local user to forge the gRPC IPC authentication token, through loading IPC.dll and abuse the SYSTEM service's within TotalAV to execute arbitrary code as NT AUTHORITY\SYSTEM...

CVE-2026-110746

A local privilege escalation vulnerability exists in TotalAV that allows an unprivileged local user to execute arbitrary code as NT AUTHORITYSYSTEM . The root cause is the ability for an attacker to forge the gRPC IPC authentication token by loading IPC.dll and abusing the SYSTEM service within t...

EUVD-2026-102075

A local privilege escalation vulnerability in TotalAV allows an unprivileged local user to forge the gRPC IPC authentication token, through loading IPC.dll and abuse the SYSTEM service's within TotalAV to execute arbitrary code as NT AUTHORITY\SYSTEM...

CVE-2026-110746 CVE-2026-110746

A local privilege escalation vulnerability in TotalAV allows an unprivileged local user to forge the gRPC IPC authentication token, through loading IPC.dll and abuse the SYSTEM service's within TotalAV to execute arbitrary code as NT AUTHORITY\SYSTEM...

CVE-2026-110746: Improper Limitation of a Pathname to a Restricted Directory

A local privilege escalation vulnerability in TotalAV allows an unprivileged local user to forge the gRPC IPC authentication token, through loading IPC.dll and abuse the SYSTEM service's within TotalAV to execute arbitrary code as NT AUTHORITY\SYSTEM...

PT-2026-114946

A local privilege escalation vulnerability in TotalAV allows an unprivileged local user to forge the gRPC IPC authentication token, through loading IPC.dll and abuse the SYSTEM service's within TotalAV to execute arbitrary code as NT AUTHORITYSYSTEM...

...[ More ]

SmarterMail contains multiple vulnerabilities that can be chained to achieve remote code execution with NT AUTHORITY\SYSTEM privileges. The issues include a mutation-based cross site scripting vulnerability involving iCalendar attachments, improper session token invalidation that allows...

TotalSecurity TotalAV has a path traversal vulnerability

TotalSecurity TotalAV versions 7.1.17 and earlier have a security vulnerability. This vulnerability stems from an issue with local privilege escalation, allowing non-privileged local users to forge GRPC IPC authentication tokens by loading IPC.dll. These users can then abuse the SYSTEM service in...

CVE-2026-78632 Insecure Default File Permissions in Okta RADIUS Agent Windows Installer

The Okta RADIUS Agent Windows installer assigns write permissions to the NT SERVICE\ALL SERVICES and CREATOR OWNER security principals on the directories containing the agent configuration, AES encryption key, and logs. These permissions allow any local service account on the host to read the AES...

EUVD-2026-100484

The Okta RADIUS Agent Windows installer assigns write permissions to the NT SERVICE\ALL SERVICES and CREATOR OWNER security principals on the directories containing the agent configuration, AES encryption key, and logs. These permissions allow any local service account on the host to read the AES...

Exploit for CVE-2026-58222

KDSExtract Exploit for CVE-2026-58222 affecting Samba AD...

juicy-potato

Juicy Potato abusando de los privilegios dorados Una versión azucarada deRottenPotatoNG, con un poco de jugo, es decir, otra herramienta de Elevación de Privilegios Local, desde una Cuenta de Servicio de Windows a NT AUTHORITY\SYSTEM Resumen RottenPotatoNG y sus variantes aprovechan la cadena de...

assless-chaps

assless-chaps Rompe desafíos/respuestas de MSCHAPv2/NTLMv1 rápidamente usando una base de datos de hashes NT Introducción Assless CHAPs es una forma eficiente de recuperar el hash NT utilizado en un intercambio MSCHAPv2/NTLMv1 si tienes el desafío y la respuesta por ejemplo, de un ataque WiFi EAP...

Linux Distros Unpatched Vulnerability : CVE-2026-98318

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: smb: client: validate absolute native symlink targets before NT fixups With symlinkroot unse...

PT-2026-107901

Improper link resolution and external control of file paths in the administrative command-line operations of hMailServer.exe in Progressive Robot hMailServer 6.3.4 and 6.3.5 allow a local attacker who already runs code as the low-privilege service account to escalate privilege. On Windows,...

SUSE CVE-2026-98318

In the Linux kernel, the following vulnerability has been resolved: smb: client: validate absolute native symlink targets before NT fixups With symlinkroot unset, an absolute target is copied without conversion to an NT drive path. Later code still assumes an NT prefix is present when modifying t...

PT-2026-107482

Name of the Vulnerable Software and Affected Versions patool versions prior to 4.0.6 Description An OS command injection issue exists on Windows when the shell quote nt function fails to properly escape cmd.exe metacharacters or embedded double quotes within archive filenames. This allows attacke...

CVE-2026-98318 smb: client: validate absolute native symlink targets before NT fixups

In the Linux kernel, the following vulnerability has been resolved: smb: client: validate absolute native symlink targets before NT fixups With symlinkroot unset, an absolute target is copied without conversion to an NT drive path. Later code still assumes an NT prefix is present when modifying t...

CVE-2026-98318

In the Linux kernel, the following vulnerability has been resolved: smb: client: validate absolute native symlink targets before NT fixups With symlinkroot unset, an absolute target is copied without conversion to an NT drive path. Later code still assumes an NT prefix is present when modifying t...