CVE-2019-9730

CVE-2019-9730：Synaptics 音频驱动程序本地权限提升 此驱动程序包中的漏洞存在于 CxUtilSvc 系统服务中。它托管了一个 COM 对象，低权限代码可以利用该对象以 SYSTEM 身份对注册表执行任意读取和写入。该 .NET 代码添加了 IRegistryHelper COM 接口作为引用，以调用其方法。 在利用方面，采用了一种较为直接的方法：将给定服务的二进制路径替换为一条创建本地管理员账户的命令。虽然标准用户账户无法启动/停止每一个服务，但通常存在一小部分他们可以操控的服务（例如 ose）。如果无法立即启动某个服务，他们也可以重启系统。...

MoreImpacketExamples

MoreImpacketExamples 本仓库包含一些使用 Impacket 库编写的简短 Python 脚本。本项目的主要目标是帮助我自己以及那些希望从使用现成的 impacket 示例过渡到修改/创建自己脚本的人。这些脚本不一定针对实用性或 OPSEC 考虑进行过优化，但我已尽可能让它们保持动态化，以防有人想要更改其默认行为。 wmiregexec.py wmiregexec.py 脚本旨在通过写入 Windows 注册表的方式，完全经由 WMI 执行文件。它首先将 base64 编码的文件与 PowerShell AMSI/ETW 绕过一起写入目标的注册表位置。然后，使用一个...

CVE-2026-34773

Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to versions 38.8.6, 39.8.1, 40.8.1, and 41.0.0, on Windows, app.setAsDefaultProtocolClientprotocol did not validate the protocol name before writing to the registry. Apps that pass...

GHSA-MWMH-MQ4G-G6GR Electron: Registry key path injection in app.setAsDefaultProtocolClient on Windows

Impact On Windows, app.setAsDefaultProtocolClientprotocol did not validate the protocol name before writing to the registry. Apps that pass untrusted input as the protocol name may allow an attacker to write to arbitrary subkeys under HKCU\Software\Classes, potentially hijacking existing protocol...

CVE-2023-25011

PC settings tool Ver10.1.26.0 and earlier, PC settings tool Ver11.0.22.0 and earlier allows a attacker to write to the registry as administrator privileges with standard user privileges...

CVE-2023-25011

PC settings tool Ver10.1.26.0 and earlier, PC settings tool Ver11.0.22.0 and earlier allows a attacker to write to the registry as administrator privileges with standard user privileges...

CVE-2023-25011

PC settings tool Ver10.1.26.0 and earlier, PC settings tool Ver11.0.22.0 and earlier allows a attacker to write to the registry as administrator privileges with standard user privileges...

CVE-2023-25011

PC settings tool Ver10.1.26.0 and earlier, PC settings tool Ver11.0.22.0 and earlier allows a attacker to write to the registry as administrator privileges with standard user privileges...

CVE-2021-37909

WriteRegistry function in TSSServiSign component does not filter and verify users’ input, remote attackers can rewrite to the registry without permissions thus perform hijack attacks to execute arbitrary code...

Opto 22 SoftPAC Project Access Control Error Vulnerability

Opto 22 SoftPAC Project is an automation software suite from Opto 22 USA. The product is capable of providing industrial automation, process control, building automation, remote monitoring, data acquisition and industrial IoT. An Access Control Error vulnerability exists in Opto 22 SoftPAC Projec...

CVE-2020-10612

Opto 22 SoftPAC Project Version 9.6 and prior. SoftPACAgent communicates with SoftPACMonitor over network Port 22000. However, this port is open without any restrictions. This allows an attacker with network access to control the SoftPACAgent service including updating SoftPAC firmware, starting ...

CVE-2019-3969

Comodo Antivirus versions up to 12.0.0.6810 are vulnerable to Local Privilege Escalation due to CmdAgent's handling of COM clients. A local process can bypass the signature check enforced by CmdAgent via process hollowing which can then allow the process to invoke sensitive COM methods in CmdAgen...

CVE-2019-3969

Comodo Antivirus versions up to 12.0.0.6810 are vulnerable to Local Privilege Escalation due to CmdAgent's handling of COM clients. A local process can bypass the signature check enforced by CmdAgent via process hollowing which can then allow the process to invoke sensitive COM methods in CmdAgen...

CVE-2019-3969

CVE-2019-3969 – Comodo Antivirus Local Privilege Escalation : Affected product: Comodo Antivirus versions up to 12.0.0.6810. Root cause: CmdAgent’s handling of COM clients allows a local process to bypass CmdAgent’s signature check via process hollowing, enabling invocation of sensitive COM metho...