PowerShell-Suite

This repository is an offensive tool for Windows UAC User Account Control bypass. The tool, named "Bypass-UAC," provides a framework to perform UAC bypasses based on auto-elevating IFileOperation COM object method calls. It rewrites PowerShell's PEB Portable Executable Binary to give it the...

CVE-2015-3159

The abrt-action-install-debuginfo-to-abrt-cache help program in Automatic Bug Reporting Tool ABRT does not properly handle the process environment before invoking abrt-action-install-debuginfo, which allows local users to gain privileges...

Sandbox Breakout / Arbitrary Code Execution

Overview All versions of @zhaoyao91/eval-in-vm are vulnerable to Sandbox Escape leading to Remote Code Execution. The package fails to restrict access to the main context through this.constructor.constructor . This may allow attackers to execute arbitrary code in the system. Evaluating the payloa...

CVE-2019-11820

Information exposure through process environment vulnerability in Synology Calendar before 2.3.3-0620 allows local users to obtain credentials via cmdline...

CVE-2019-11820

Information exposure through process environment vulnerability in Synology Calendar before 2.3.3-0620 allows local users to obtain credentials via cmdline...

Information disclosure

Information exposure through process environment vulnerability in Synology Calendar before 2.3.3-0620 allows local users to obtain credentials via cmdline...

CVE-2019-11820

Synology Calendar prior to 2.3.3-0620 contains an information exposure via the process environment that allows local users to obtain credentials through the command line. Affected product: Synology Calendar. Vulnerable item: process/environment handling leading to credential leakage. Impact: cred...

CVE-2019-11820: Insufficiently Protected Credentials

Information exposure through process environment vulnerability in Synology Calendar before 2.3.3-0620 allows local users to obtain credentials via cmdline...

abrt: missing process environment sanitizaton in abrt-action-install-debuginfo-to-abrt-cache

It was discovered that the abrt-action-install-debuginfo-to-abrt-cache helper program did not properly filter the process environment before invoking abrt-action-install-debuginfo. A local attacker could use this flaw to escalate their privileges on the system...

HP Tru64 Alpha OSF1 5.1 - (ps) Information Leak Exploit

No description provided by source. !/bin/ksh osf1tru64ps.ksh exploit Tested on OSF1 V5.1 1885 alpha ps executable - information leak Author: Andrea bunker Purificato http://rawlab.mindcreations.com the ps command also /usr/ucb/ps on HP OSF1 v5.1 Alpha, developed without an eye to security, allows...

HP Tru64 Alpha OSF1 v5.1 (ps) Information Leak Exploit

No description provided by source. !/bin/ksh osf1tru64ps.ksh exploit Tested on OSF1 V5.1 1885 alpha ps executable - information leak Author: Andrea "bunker" Purificato http://rawlab.mindcreations.com the "ps" command also /usr/ucb/ps on HP OSF1 v5.1 Alpha, developed without an eye to security,...

CVE-2006-6622

Soft4Ever Look 'n' Stop LnS 2.05p2 before 20061215 relies on the Process Environment Block PEB to identify a process, which allows local users to bypass the product's controls on a process by spoofing the 1 ImagePathName, 2 CommandLine, and 3 WindowTitle fields in the PEB...

CVE-2006-6619

AVG Anti-Virus plus Firewall 7.5.431 relies on the Process Environment Block PEB to identify a process, which allows local users to bypass the product's controls on a process by spoofing the 1 ImagePathName, 2 CommandLine, and 3 WindowTitle fields in the PEB...

CVE-2006-6621

Filseclab Personal Firewall 3.0.0.8686 relies on the Process Environment Block PEB to identify a process, which allows local users to bypass the product's controls on a process by spoofing the 1 ImagePathName, 2 CommandLine, and 3 WindowTitle fields in the PEB...

CVE-2006-6620

CVE-2006-6620 affects Comodo Personal Firewall 2.3.6.81, which relies on the Process Environment Block (PEB) to identify a process. This allows local users to bypass the product’s controls on a process by spoofing the PEB fields (ImagePathName, CommandLine, WindowTitle). The provided documents do...

CVE-2006-6618

The CVE-2006-6618 entry concerns AntiHook 3.0.0.23, where the Desktop component relies on the Process Environment Block (PEB) to identify a target process. The vulnerability arises because an attacker can spoof PEB fields (ImagePathName, CommandLine, and WindowTitle), enabling local privilege con...

CVE-2006-6623: Undefined Security Weakness

Sygate Personal Firewall 5.6.2808 relies on the Process Environment Block PEB to identify a process, which allows local users to bypass the product's controls on a process by spoofing the 1 ImagePathName, 2 CommandLine, and 3 WindowTitle fields in the PEB...

CVE-2006-6622: Undefined Security Weakness

Soft4Ever Look 'n' Stop LnS 2.05p2 before 20061215 relies on the Process Environment Block PEB to identify a process, which allows local users to bypass the product's controls on a process by spoofing the 1 ImagePathName, 2 CommandLine, and 3 WindowTitle fields in the PEB...

CVE-2006-6618: Undefined Security Weakness

AntiHook 3.0.0.23 - Desktop relies on the Process Environment Block PEB to identify a process, which allows local users to bypass the product's controls on a process by spoofing the 1 ImagePathName, 2 CommandLine, and 3 WindowTitle fields in the PEB...

CVE-2006-6619: Undefined Security Weakness

AVG Anti-Virus plus Firewall 7.5.431 relies on the Process Environment Block PEB to identify a process, which allows local users to bypass the product's controls on a process by spoofing the 1 ImagePathName, 2 CommandLine, and 3 WindowTitle fields in the PEB...