53 matches found
CVE-2024-44193
้่ฟ iTunes ๆปๅป Windowsโโๆฌๅฐๆ้ๆๅ 0day ไป็ป CVE-2024โ44193 ๆฌๆๆฏ CVE-2024โ44193 ็ๅๆๆฅๅ๏ผ่ฏฅๆผๆดๆฏ iTunes 12.13.2.3 ็ๆฌไธญ็ไธไธชๆฌๅฐๆ้ๆๅๆผๆดใ ่ฏฅๆผๆดไบ 2024 ๅนด 9 ๆ 12 ๆฅ็ฑ Apple ไฟฎๅคใ Apple ๅฎๅ จๅ ฌๅ้พๆฅ๏ผApple ๅฎๅ จๅ ฌๅ iTunes 12.13.2.3 ็ๆฌไผๅฎ่ฃ Apple ่ฎพๅคๅ็ฐๆๅก๏ผ C:\Program Files\Common Files\Apple\Mobile Device...
CVE-2026-41091-PoC-Exploit
โ๏ธ CVE-2026-41091 - RedSun SolarFlare - Microsoft Defender ๆฌๅฐๆ้ๆๅๆผๆด Microsoft Defender ้พๆฅ่ท้ๆผๆด - ๆฌๅฐๆ้ๆๅ่ณ NT AUTHORITY\SYSTEM ่ฏฅๆผๆด่ขซ็งฐไธบ "RedSun" ๐ฏ๏ผ"SolarFlare" ๆฏๆ็ปๆ็ๆผๆดๅฉ็จๅ็ๅๅญใ โ ๐ ๆฆ่ฟฐ ๆญคไปๅบๅ ๅซ้ๅฏน CVE-2026-41091 ๏ผMicrosoft Defender / Microsoft ๆถๆ่ฝฏไปถ้ฒๆคๅผๆไธญ็ๅ ณ้ฎๆฌๅฐๆ้ๆๅๆผๆด๏ผ็ๅฎๆดๅทฅไฝๆฆๅฟต้ช่ฏ PoC ๆผๆดๅฉ็จใ้่ฟๅฉ็จไธๆญฃ็กฎ็้พๆฅ่งฃๆ...
CVE-2024-27518
CVE-2024-27518 - SUPERAntiSpyware Professional X ๆฌๅฐๆ้ๆๅๆฆๅฟต้ช่ฏ ๆญคๆผๆด็ฑ Secunnix ๆผๆด็ ็ฉถๅข้็ M. Akil Gรผndoฤan ๅ็ฐๅนถๅ ฌๅผๆซ้ฒใๆฌไปๅบๅฐๅ ๅซๆฆๅฟต้ช่ฏไปฃ็ ๅ็ธๅ ณๅ ฌๅใ ่ฏฆๆ ๏ผ ไบงๅ๏ผ SUPERAntiSpyware Professional X ๅๆๆ็ๆฌใ ๅๅฝฑๅ็ๆฌ๏ผ =10.0.1262 ๅๆๆฐ็ๆฌ 10.0.1264 CVE ID๏ผ CVE-2024-27518 ๆไฝ็ณป็ป๏ผ ๆๆๅๆฏๆ็ Windows ็ๆฌ๏ผๅทฒๅจ Windows 10 Pro ไธๆต่ฏ ็ถๆ๏ผ ๅ ฌๅ ฑ่ด่ดฃไปป็ๆซ้ฒใ ๅๅธๆฅๆ๏ผ...
CVE-2026-81572
CodeMeter Runtime (WibuSystems) on Windows is vulnerable to a local privilege escalation via a predictable temporary file. The cmu.exe executable, when invoked with --create-io --file C:, creates a temporary file under C:\CM-Stick without checking the directory and file paths for NTFS reparse poi...
CVE-2026-81572 Local Privilege Escalation in CodeMeter Runtime on Windows
In CodeMeter Runtime from version 8.40 to excluding 8.41a and 9.00 to excluding 9.10, cmu.exe --create-io --file C: creates a predictable temporary file under C:\CM-Stick. The directory and file paths are not properly checked for NTFS reparse points, such as junctions or symbolic links, before fi...
PT-2026-82475
Name of the Vulnerable Software and Affected Versions CodeMeter Runtime affected versions not specified Description The cmu.exe utility creates a predictable temporary file in the C:CM-Stick directory when the --create-io flag is used with the --file parameter. The application fails to properly...
CVE-2026-41091-PoC-Exploit Full-PoCv2
โ๏ธ CVE-2026-41091 - RedSun SolarFlare - Microsoft Defender LPE Exploit Microsoft Defender Link Following Vulnerability - Local Privilege Escalation to NT AUTHORITY\SYSTEM The vulnerability is known as "RedSun" ๐ฏ, "SolarFlare" is the name I gave to my exploit. โ ๐ Overview This repository contains...
EUVD-2020-7120
Malware in sbrugna...
EUVD-2021-22906
Malware in sbrugna...
EUVD-2014-0599
Malware in sbrugna...
EUVD-2014-8975
Malware in sbrugna...
EUVD-2023-31852
Malicious code in bioql PyPI...
CVE-2020-14990
IOBit Advanced SystemCare Free 13.5.0.263 allows local users to gain privileges for file deletion by manipulating the Clean & Optimize feature with an NTFS junction and an Object Manager symbolic link...
CVE-2020-15401
IOBit Malware Fighter Pro 8.0.2.547 allows local users to gain privileges for file deletion by manipulating malicious flagged file locations with an NTFS junction and an Object Manager symbolic link...
Microsoft Windows NTFS Junction Heap-based Buffer Overflow Local Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling of NT...
CVE-2023-50915
An issue exists in GalaxyClientService.exe in GOG Galaxy Beta 2.0.67.2 through 2.0.71.2 that could allow authenticated users to overwrite and corrupt critical system files via a combination of an NTFS Junction and an RPC Object Manager symbolic link and could result in a denial of service...
CVE-2023-50915
An issue exists in GalaxyClientService.exe in GOG Galaxy Beta 2.0.67.2 through 2.0.71.2 that could allow authenticated users to overwrite and corrupt critical system files via a combination of an NTFS Junction and an RPC Object Manager symbolic link and could result in a denial of service...
CVE-2023-50915
CVE-2023-50915 affects GOG Galaxy (Beta) 2.0.67.2โ2.0.71.2. The issue exists in GalaxyClientService.exe and could allow an authenticated user to overwrite and corrupt critical system files by abusing a combination of an NTFS Junction and an RPC Object Manager symbolic link, potentially leading to...
PT-2024-14007 ยท Gog ยท Gog Galaxy
Name of the Vulnerable Software and Affected Versions: GOG Galaxy Beta versions 2.0.67.2 through 2.0.71.2 Description: An issue exists in GalaxyClientService.exe that could allow authenticated users to overwrite and corrupt critical system files via a combination of an NTFS Junction and an RPC...
PT-2024-1710 ยท Microsoft ยท Windows Ntfsย +2
Name of the Vulnerable Software and Affected Versions: Windows Kernel affected versions not specified Microsoft Windows NTFS affected versions not specified Description: The issue is related to an elevation of privilege vulnerability in the Windows Kernel, which can be exploited due to...