BOF-pack-1

BOF-pack-1 Un paquete de BOFs útiles para ejercicios de red team GetAppLockerPolicy Imprime la Effective AppLockerPolicy para el dominio TokenElevate Crea un proceso con el token de winlogon incluye el privilegio Tcb habilitado por defecto y otros privilegios específicos de winlogon. Forma...

sudo-cve-2019-14287

sudo 的设计理念 Sudo 是一个旨在允许系统管理员向用户授予有限 root 权限并记录 root 活动的程序。其基本理念是：在尽可能少地赋予权限的同时，仍能让用户完成工作。 在哪里找到 sudo 在您尝试构建 sudo 之前， 请 确保您拥有当前版本。最新的 sudo 始终可以通过匿名 ftp 从 ftp.sudo.ws 的 /pub/sudo/ 目录获取，或者从 sudo 网站 https://www.sudo.ws/ 获取。 发行版的名称为 sudo-M.m.tar.gz，其中 M 是主版本号，m 是次版本号。也可能提供 sudo 的 BETA 版本。如果您加入...

CVE-2022-0441

Se encontró una vulnerabilidad clasificada como crítica en el plugin MasterStudy LMS hasta la versión 2.7.5 en WordPress WordPress Plugin. Esta vulnerabilidad afecta a una parte desconocida del componente New Account Handler. La manipulación con una entrada desconocida conduce a una vulnerabilida...

GSSC-CVE-2022-41923

CVE-2022-41923 变通方案：权限管理漏洞 概述 在未打补丁的 Grails Spring Security Core GSSC 插件中发现的漏洞 CVE-2022-41923 可能导致不恰当的权限管理。本代码库描述了如何绕过该问题。 如果您正在使用未打补丁版本的插件，我们强烈建议您升级到已修补的版本。如果您无法立即升级，我们鼓励您实施本文档中描述的变通方案。 如果您使用的是 GSSC 插件 2.x 版本，这一点尤其重要，因为没有为 2.x 版本提供补丁。 准备 为了正确配置变通方案，您需要了解以下信息： 您的应用程序使用的 GSSC 插件版本。请在您的 build.gradl...

Security Bulletin: IBM® Db2® is vulnerable to a denial of service where a specific functionality on a Db2 server can be disabled by a privileged user under certain conditions (CVE-2026-87958)

Summary IBM® Db2® is vulnerable to a denial of service where a specific functionality on a Db2 server can be disabled by a privileged user under certain conditions CVE-2026-87958 Vulnerability Details CVEID:CVE-2026-87958 DESCRIPTION: IBM Db2 is vulnerable to a denial of service where a specific...

beyondtrust-cve-2026-1232

🔍 漏洞研究 精心整理的深入漏洞分析报告合集，涵盖软件生态中的真实安全事件。每篇报告均包含完整技术分析、概念验证、IOC列表及修复指南。 目的： 教育参考与作品集。所有PoC代码仅用于检测与研究。 索引 | 漏洞| 类型| 严重程度| 日期| 状态 ---|---|---|---|---|--- 004| BeyondTrust Privilege Management for Windows CVE-2026-1232| 防篡改绕过 / 权限控制弱点| 🟠 中等| 2026年2月1日| ✅ 已完成 结构 每篇报告遵循统一格式： root@kitploit:...

CVE-2026-9055

CVE-2026-9055 — Escalada de Privilegios No Autenticada en el Plugin Amelia Booking Informe de investigación de Sentinel AI Defense. Solo análisis defensivo — no se publica aquí ningún exploit funcional ni PoC para esta vulnerabilidad. Una vulnerabilidad de escalada de privilegios no autenticada e...

CVE-2026-62183

CVE-2026-62183 — Escalada de privilegios en el autoservicio de usuario de Apache Syncope Gestión inadecuada de privilegios CWE-269 en Apache Syncope. Un usuario autenticado con pocos privilegios puede otorgarse a sí mismo roles arbitrarios y membresías de grupo, recursos externos y un nuevo realm...

secureCodingDemo

secureCodingDemo 2022年秋季 安全编码 CVE-2019-13272 : Linux 内核权限管理不当漏洞 Georgette Kendall CSEC 302 2022年11月14日，星期一 链接包含在 .txt 文件中...

CVE-2026-12858

Improper Privilege Management vulnerability in ESET AV Remover standalone allows Privilege Escalation via especially crafted RPC...

CVE-2026-12858 Local privilege escalation vulnerability in ESET AV Remover

Improper Privilege Management vulnerability in ESET AV Remover standalone allows Privilege Escalation via especially crafted RPC...

EUVD-2026-74776

Improper Privilege Management vulnerability in ESET AV Remover standalone allows Privilege Escalation via especially crafted RPC...

CVE-2026-12858

CVE-2026-12858 is a local privilege escalation vulnerability in ESET AV Remover (standalone) , caused by improper privilege management when processing especially crafted RPC requests. An attacker with low-privilege local access and no user interaction can exploit this to gain full control of the ...

PT-2026-88895

『the attacker would need to have previously obtained administrator rights to execute the attack, as the tool requires elevation to be run.』 CVE-2026-12858 CA9000 ESET Customer Advisory: Local privilege escalation vulnerability in ESET AV Remover fixed https://t.co/QLUsWHiBcZ...

CVE-2026-66818

Microsoft SQL Server is affected by an improper privilege management flaw that allows an authorized attacker to escalate privileges over a network . The vulnerability is rated CVSS 3.1 8.8 (High) with a vector of AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, meaning low privileges and no user interaction ...

Microsoft SQL Server Elevation of Privilege Vulnerability

Improper privilege management in SQL Server allows an authorized attacker to elevate privileges over a network...

Chromium: CVE-2026-84358 Improper privilege management in Downloads

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

CVE-2026-77105

CommServe contained a cryptographic signature verification issue affecting privilege management. Software customers upgrade to resolved maintenance release. Update CommServe and Web Server...

CVE-2026-77089

Command Center API contained an authentication bypass issue affecting privilege management. Software customers upgrade to resolved maintenance release. Update Command Center...

CVE-2026-77092

Content Extractor contained a deserialization of untrusted data issue affecting privilege management. Software customers upgrade to resolved maintenance release. Update Content Extractor...