293 matches found
CVE-2020-1048
CVE-2020-1048 Windows Print Spooler 서비스가 파일 시스템에 임의로 쓰기를 허용하는 부적절한 방식으로 인해 권한 상승 취약점이 존재합니다. 이 취약점을 성공적으로 악용한 공격자는 상승된 시스템 권한으로 임의 코드를 실행할 수 있습니다. 공격자는 이후 프로그램을 설치하거나 데이터를 보기, 변경, 삭제하거나 전체 사용자 권한으로 새 계정을 만들 수 있습니다. 이 취약점을 악용하려면 공격자는 영향을 받는 시스템에 로그온한 후 특수 제작된 스크립트나 애플리케이션을 실행해야 합니다. Microsoft...
CVE-2023-36874_BOF
CVE-2023-36874 Windows 오류 보고 LPE BOF 소개 이것은 Filip Dragovic@filipdragovic의 CVE-2023-36874 Windows 오류 보고 LPE 익스플로잇을 구현한 성숙하고 작동 가능한 CobaltStrike BOF입니다. 그는 취약한 DLL을 리버싱하고 이 익스플로잇에 중요한 문서화되지 않은 COM 구조체를 만들어 작업 익스플로잇을 만드는 데 큰 기여를 했습니다. 이 BOF는 사용자가 지정한 EXE를 대상 머신의 디스크에 드롭한 후 취약점을 트리거하여 EXE가 SYSTEM에 의해...
cve-2021-1675
〖ЭКСП〗Уязвимость повышения привилегий принтера Ladon CVE-2021-1675 воспроизведена http://k8gege.org/p/CVE-2021-1675.html Общая информация 9 июня Microsoft выпустила обновление безопасности за июнь, исправляющее 50 уязвимостей, включая уязвимость повышения привилегий в Windows Print Spooler, котор...
CVE-2019-8805
CVE-2019-8805 CVE-2019-8805 Apple EndpointSecurity 프레임워크 권한 상승 익스플로잇 권한 확인에 검증 문제가 존재했습니다. 이 문제는 프로세스 권한 검증을 개선하여 해결되었습니다. 이 문제는 macOS Catalina 10.15.1에서 수정되었습니다. 응용 프로그램이 시스템 권한으로 임의 코드를 실행할 수 있는 문제입니다. 컴파일 및 실행 컴파일 gcc -framework Foundation appleEPSPrivEsc.m -o appleEPSPrivEsc 실행 ./appleEPSPriv...
CVE-2020-1048
CVE-2020-1048 CVE-2020-1048PrintDemon에 대한 POC 익스플로잇 코드 취약한 시스템 아래 링크에 명시된 모든 Windows 버전이 취약합니다: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1048 재현 단계 1. Source.c 상단에 있는 변수 gPortName 및 gInputFile을 변경합니다. 2. Visual Studio를 사용하여 컴파일 및 실행합니다. 3. 프린터 서비스spoolsv를 다시 시작하...
CVE-2023-27350
CVE-2023-27350 Эта уязвимость позволяет удаленным злоумышленникам обойти аутентификацию на уязвимых установках PaperCut NG 22.0.5 Build 63914. Для эксплуатации этой уязвимости аутентификация не требуется. Конкретная ошибка существует в классе SetupCompleted. Проблема возникает из-за неправильного...
CVE-2026-91812
A vulnerability in the Foxit PDF Editor/Reader update mechanism (specifically FoxitUpdater ) allows man-in-the-middle attackers to bypass certificate validation and package integrity checks . This flaw could potentially enable arbitrary code execution with system privileges . No specific remediat...
CVE-2026-92253
WatchDog Anti-Virus 1.8.640 on Windows is affected by an improper link resolution vulnerability in its quarantine restoration process . A local, low-privileged attacker can create a directory junction at the original path of a quarantined file and, by persuading an administrator to restore that f...
CVE-2026-12518
A local privilege escalation vulnerability in the Logitech Logi Options+ updater service on Windows allows a low-privileged local user to execute arbitrary code as SYSTEM...
CVE-2026-69665
SKYSEA Client View and SKYMEC IT Manager contain an issue with incorrect default permissions. If this vulnerability is exploited, an attacker who can log in to a Windows system on which the affected product is installed may execute arbitrary code with SYSTEM privilege...
CVE-2026-18263
Parallels RAS Client RDP Backend Service Exposed Dangerous Function Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Parallels RAS Client. An attacker must first obtain the ability to execute low-privileged cod...
CVE-2026-13121
Parallels RAS Client RDP Backend Service Exposed Dangerous Function Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Parallels RAS Client. An attacker must first obtain the ability to execute low-privileged cod...
CVE-2026-18262 Parallels RAS Client RDP Backend Service Exposed Dangerous Function Local Privilege Escalation Vulnerability
Parallels RAS Client RDP Backend Service Exposed Dangerous Function Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Parallels RAS Client. An attacker must first obtain the ability to execute low-privileged cod...
Parallels RAS Client RDP Backend Service Exposed Dangerous Function Local Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of Parallels RAS Client. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the RAS RDP...
CVE-2026-13268
G DATA Total Security Backup Service Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of G DATA Total Security. An attacker must first obtain the ability to execute low-privileged code on the target...
CVE-2026-16157 Duplicati backup software v2.3.0.1 is vulnerable to an incorrect permission assignment vulnerability
Duplicati v2.3.0.1 backup software gives Authenticated Users MODIFY permissions that propagate to all subdirectories. Installing the software outside of the Program Files directory, or on a custom path, creates a LocalSystem service running from a directory that any standard local user can write...
CVE-2026-16157 Duplicati backup software v2.3.0.1 is vulnerable to an incorrect permission assignment vulnerability
Duplicati v2.3.0.1 backup software gives Authenticated Users MODIFY permissions that propagate to all subdirectories. Installing the software outside of the Program Files directory, or on a custom path, creates a LocalSystem service running from a directory that any standard local user can write...
CVE-2026-15380
A non-administrator interactive user can obtain full SYSTEM code execution through a DCOM/task scheduler logic chain — no network access, no memory corruption required ITMS 8.7.3...
CVE-2026-15380 Local privilege escalation in Symantec ITMS
A non-administrator interactive user can obtain full SYSTEM code execution through a DCOM/task scheduler logic chain — no network access, no memory corruption required ITMS 8.7.3...
