Lucene search
+L

4579 matches found

Kitploit
Kitploit
added 2026/09/12 5:57 a.m.6 views

BOF-pack-1

BOF-pack-1 Un paquete de BOFs útiles para ejercicios de red team GetAppLockerPolicy Imprime la Effective AppLockerPolicy para el dominio TokenElevate Crea un proceso con el token de winlogon incluye el privilegio Tcb habilitado por defecto y otros privilegios específicos de winlogon. Forma...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/12 12:04 a.m.7 views

sudo-cve-2019-14287

sudo 的设计理念 Sudo 是一个旨在允许系统管理员向用户授予有限 root 权限并记录 root 活动的程序。其基本理念是:在尽可能少地赋予权限的同时,仍能让用户完成工作。 在哪里找到 sudo 在您尝试构建 sudo 之前, 请 确保您拥有当前版本。最新的 sudo 始终可以通过匿名 ftp 从 ftp.sudo.ws 的 /pub/sudo/ 目录获取,或者从 sudo 网站 https://www.sudo.ws/ 获取。 发行版的名称为 sudo-M.m.tar.gz,其中 M 是主版本号,m 是次版本号。也可能提供 sudo 的 BETA 版本。如果您加入...

9CVSS7.4AI score0.63764EPSS
SaveExploits12
Kitploit
Kitploit
added 2026/09/11 10:21 p.m.6 views

CVE-2022-0441

Se encontró una vulnerabilidad clasificada como crítica en el plugin MasterStudy LMS hasta la versión 2.7.5 en WordPress WordPress Plugin. Esta vulnerabilidad afecta a una parte desconocida del componente New Account Handler. La manipulación con una entrada desconocida conduce a una vulnerabilida...

9.8CVSS8.1AI score0.85334EPSS
SaveExploits9
Kitploit
Kitploit
added 2026/09/10 11:56 p.m.7 views

GSSC-CVE-2022-41923

CVE-2022-41923 变通方案:权限管理漏洞 概述 在未打补丁的 Grails Spring Security Core GSSC 插件中发现的漏洞 CVE-2022-41923 可能导致不恰当的权限管理。本代码库描述了如何绕过该问题。 如果您正在使用未打补丁版本的插件,我们强烈建议您升级到已修补的版本。如果您无法立即升级,我们鼓励您实施本文档中描述的变通方案。 如果您使用的是 GSSC 插件 2.x 版本,这一点尤其重要,因为没有为 2.x 版本提供补丁。 准备 为了正确配置变通方案,您需要了解以下信息: 您的应用程序使用的 GSSC 插件版本。请在您的 build.gradl...

9.8CVSS8.2AI score0.01742EPSS
SaveExploits0References4
IBM Security Bulletins
IBM Security Bulletins
added 2026/09/10 9:02 p.m.8 views

Security Bulletin: IBM® Db2® is vulnerable to a denial of service where a specific functionality on a Db2 server can be disabled by a privileged user under certain conditions (CVE-2026-87958)

Summary IBM® Db2® is vulnerable to a denial of service where a specific functionality on a Db2 server can be disabled by a privileged user under certain conditions CVE-2026-87958 Vulnerability Details CVEID:CVE-2026-87958 DESCRIPTION: IBM Db2 is vulnerable to a denial of service where a specific...

8.1CVSS0.0021EPSS
SaveExploits0Affected Software1
Kitploit
Kitploit
added 2026/09/10 6:14 p.m.6 views

beyondtrust-cve-2026-1232

🔍 漏洞研究 精心整理的深入漏洞分析报告合集,涵盖软件生态中的真实安全事件。每篇报告均包含完整技术分析、概念验证、IOC列表及修复指南。 目的: 教育参考与作品集。所有PoC代码仅用于检测与研究。 索引 | 漏洞| 类型| 严重程度| 日期| 状态 ---|---|---|---|---|--- 004| BeyondTrust Privilege Management for Windows CVE-2026-1232| 防篡改绕过 / 权限控制弱点| 🟠 中等| 2026年2月1日| ✅ 已完成 结构 每篇报告遵循统一格式: root@kitploit:...

6.8CVSS6AI score0.00125EPSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/09 5:39 p.m.9 views

CVE-2026-9055

CVE-2026-9055 — Escalada de Privilegios No Autenticada en el Plugin Amelia Booking Informe de investigación de Sentinel AI Defense. Solo análisis defensivo — no se publica aquí ningún exploit funcional ni PoC para esta vulnerabilidad. Una vulnerabilidad de escalada de privilegios no autenticada e...

9.8CVSS5.9AI score0.00291EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/09 10:45 a.m.5 views

CVE-2026-62183

CVE-2026-62183 — Escalada de privilegios en el autoservicio de usuario de Apache Syncope Gestión inadecuada de privilegios CWE-269 en Apache Syncope. Un usuario autenticado con pocos privilegios puede otorgarse a sí mismo roles arbitrarios y membresías de grupo, recursos externos y un nuevo realm...

9.8CVSS5.9AI score0.0069EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/09 9:46 a.m.11 views

secureCodingDemo

secureCodingDemo 2022年秋季 安全编码 CVE-2019-13272 : Linux 内核权限管理不当漏洞 Georgette Kendall CSEC 302 2022年11月14日,星期一 链接包含在 .txt 文件中...

7.8CVSS7.1AI score0.52199EPSS
SaveExploits22
NVD
NVD
added 2026/09/09 9:17 a.m.3 views

CVE-2026-12858

Improper Privilege Management vulnerability in ESET AV Remover standalone allows Privilege Escalation via especially crafted RPC...

8.5CVSS0.00096EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/09/09 8:29 a.m.31 views

CVE-2026-12858 Local privilege escalation vulnerability in ESET AV Remover

Improper Privilege Management vulnerability in ESET AV Remover standalone allows Privilege Escalation via especially crafted RPC...

8.5CVSS0.00096EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/09/09 8:29 a.m.6 views

EUVD-2026-74776

Improper Privilege Management vulnerability in ESET AV Remover standalone allows Privilege Escalation via especially crafted RPC...

8.5CVSS5.8AI score0.00096EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/09 8:29 a.m.27 views

CVE-2026-12858

CVE-2026-12858 is a local privilege escalation vulnerability in ESET AV Remover (standalone) , caused by improper privilege management when processing especially crafted RPC requests. An attacker with low-privilege local access and no user interaction can exploit this to gain full control of the ...

8.5CVSS0.00096EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/09/09 12:00 a.m.7 views

PT-2026-88895

『the attacker would need to have previously obtained administrator rights to execute the attack, as the tool requires elevation to be run.』 CVE-2026-12858 CA9000 ESET Customer Advisory: Local privilege escalation vulnerability in ESET AV Remover fixed https://t.co/QLUsWHiBcZ...

8.5CVSS0.00096EPSS
SaveExploits0References3
CVE
CVE
added 2026/09/08 5:14 p.m.14 views

CVE-2026-66818

Microsoft SQL Server is affected by an improper privilege management flaw that allows an authorized attacker to escalate privileges over a network . The vulnerability is rated CVSS 3.1 8.8 (High) with a vector of AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, meaning low privileges and no user interaction ...

8.8CVSS0.00588EPSS
SaveExploits0References1
Microsoft CVE
Microsoft CVE
added 2026/09/08 2:00 p.m.8 views

Microsoft SQL Server Elevation of Privilege Vulnerability

Improper privilege management in SQL Server allows an authorized attacker to elevate privileges over a network...

8.8CVSS0.00588EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2026/09/08 2:00 p.m.116 views

Chromium: CVE-2026-84358 Improper privilege management in Downloads

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

4.2CVSS5.8AI score0.00134EPSS
SaveExploits0
NVD
NVD
added 2026/09/08 1:17 p.m.7 views

CVE-2026-77105

CommServe contained a cryptographic signature verification issue affecting privilege management. Software customers upgrade to resolved maintenance release. Update CommServe and Web Server...

8.8CVSS0.00177EPSS
SaveExploits0References1
NVD
NVD
added 2026/09/08 1:17 p.m.5 views

CVE-2026-77089

Command Center API contained an authentication bypass issue affecting privilege management. Software customers upgrade to resolved maintenance release. Update Command Center...

9.8CVSS0.00329EPSS
SaveExploits0References1
NVD
NVD
added 2026/09/08 1:17 p.m.4 views

CVE-2026-77092

Content Extractor contained a deserialization of untrusted data issue affecting privilege management. Software customers upgrade to resolved maintenance release. Update Content Extractor...

9.8CVSS0.00185EPSS
SaveExploits0References1
Rows per page
Query Builder