go-secdump

go-secdump Description Package go-secdump is a tool built to remotely extract hashes from the SAM registry hive as well as LSA secrets and cached hashes from the SECURITY hive without any remote agent and without touching disk. The tool is built on top of the library go-smb and use it to...

Perfusion

Perfusion Windows 7 、Windows Server 2008R2 、Windows 8 、Windows Server 2012 では、RpcEptMapper および DnsCache（7/2008R2 のみ）サービスのレジストリキーに弱いアクセス許可が設定されています。任意のローカルユーザーが Performance サブキーを作成し、 Windows パフォーマンスカウンター を利用して、WMI サービスのコンテキストで NT AUTHORITY\SYSTEM として任意の DLL をロードできます（これがツール名の由来です）。...

CVE-2025-10576

CVE-2025-10576 HP Sound Research SECOMNService の権限昇格。レジストリの権限が弱いため、任意のユーザーがレジストリシンボリックリンクを作成し、SECOMNService サービスに任意のレジストリキーを作成させることができます。 手順: root@kitploit: 1. soundresearchpoc.exe prepare 2. SECOMNService またはマシンを再起動する 3. soundresearchpoc.exe exploit "whoami /all C:\Windows\soundresearch.txt" 4...

Exploit for Improper Privilege Management in Microsoft

CVE-2026-21533 Scanner: Windows RDP Local Privilege Escalation...

EUVD-2000-0258

Malware in sbrugna...

EUVD-2001-0045

Malware in sbrugna...

EUVD-2020-29340

Malware in sbrugna...

EUVD-2021-24387

Malware in sbrugna...

EUVD-2001-0046

Malware in sbrugna...

EUVD-2001-0047

Malware in sbrugna...

EUVD-2024-54801

Malicious code in bioql PyPI...

EUVD-2022-48327

Malicious code in bioql PyPI...

MedDream PACS Premium Security Bypass Vulnerability

MedDream PACS Premium is an enterprise-class image storage and management server suite from MedDream. A security bypass vulnerability exists in MedDream PACS Premium that stems from improper default permissions in the CServerSettings::SetRegistryValues function, which can be exploited by an...

CVE-2024-13972

A vulnerability related to registry permissions in the Intercept X for Windows updater prior to Core Agent version 2024.3.2 can lead to a local user gaining SYSTEM level privileges during a product upgrade...

CVE-2024-13972

A vulnerability related to registry permissions in the Intercept X for Windows updater prior to Core Agent version 2024.3.2 can lead to a local user gaining SYSTEM level privileges during a product upgrade...

CVE-2024-13972

A vulnerability related to registry permissions in the Intercept X for Windows updater prior to Core Agent version 2024.3.2 can lead to a local user gaining SYSTEM level privileges during a product upgrade...

CVE-2024-13972

A vulnerability related to registry permissions in the Intercept X for Windows updater prior to Core Agent version 2024.3.2 can lead to a local user gaining SYSTEM level privileges during a product upgrade...

CVE-2024-13972

CVE-2024-13972 affects Sophos Intercept X for Windows updater prior to Core Agent 2024.3.2. The root cause is mishandling of registry permissions that allows a local user to escalate to SYSTEM during a product upgrade. CVSSv3.1 vector: LOCAL, LOW attack complexity, PR: LOW, UI: NONE, Scope: CHANG...

PT-2025-29949 · Sophos · Intercept X For Windows

Name of the Vulnerable Software and Affected Versions: Intercept X for Windows versions prior to 2024.3.2 Description: A vulnerability related to registry permissions in the Intercept X for Windows updater can allow a local user to gain SYSTEM level privileges during a product upgrade...

Sophos Intercept X 安全漏洞

Sophos Intercept X is an endpoint protection from Sophos UK. It protects against unknown malware, exploits and ransomware. A security vulnerability exists in Sophos Intercept X versions prior to 2024.3.2, which stems from mishandling of registry permissions and could lead to a local user gaining...