4558 matches found
sagex3-cve-2020-7388-poc
sagex3-cve-2020-7388-poc Código de exploração de prova de conceito para CVE-2020-7388, um RCE não autenticado como SYSTEM no serviço AdxDSrv do Sage X3 Visão Geral O Sage X3 expõe um serviço administrativo na porta TCP/1818 padrão, mas alterável sob o processo "AdxDSrv.exe", parte do componente...
CVE-2025-1910-WatchGuard-Privilege-Escalation
WatchGuard Mobile VPN with SSL Client Privilege Escalation CVE-2025-1910 Eine Privilege-Escalation-Schwachstelle in WatchGuards Mobile VPN with SSL MD5SUM Pack into a .wgssl file tar -czf ../clientexploit.wgssl client.ovpn MD5SUM run.bat cd .. 5. Stelle die schädliche client.wgssl-Datei über flas...
SeRestoreAbuse
SeRestoreAbuse जब SeRestorePrivilege निर्दिष्ट हो, तो SYSTEM के रूप में एक कमांड निष्पादित करता है। यदि यह अक्षम है, तो प्रोग्राम इसे आपके लिए सक्षम कर देगा। उपयोग: SeRestoreAbuse.exe "cmd /c ..."...
CVE-2024-34329
CVE-2024-34329 Getestetes Produkt: Datacard XPS Card Printer Driver Version: = 8.4 Beschreibung: Die Anwendung ist anfällig für eine Local Privilege Escalation LPE-Schwachstelle aufgrund unsicherer Datei-/Ordnerberechtigungen bei ihrer Standardinstallation, durch die es jedem die Rechte zur...
CVE-2026-49176_BOF
CVE-2026-49176 Cobalt Strike BOF Cobalt Strike Beacon Object File BOF für lokale Privilegienerweiterung über Windows WalletService CVE-2026-49176 , behoben im Juli 2026. Aus einem Beacon mit mittlerer Integrität Standardbenutzer staged dieses Tool eine manipulierte Wallet-ESE-Datenbank, leitet...
CVE-2020-0688
CVE-2020-0688 In Microsoft Exchange Server besteht eine Remote-Codeausführung-Schwachstelle, wenn der Server bei der Installation keine ordnungsgemäß eindeutigen Schlüssel erzeugt. Die Kenntnis des Validierungsschlüssels ermöglicht es einem authentifizierten Benutzer mit einem Postfach, beliebige...
CVE-2020-9442
Exploit-Titel: OpenVPN Connect für Windows MSI - 3.1.0.361 - Privilegieneskalation Datum: 2020-02-28 Autor: Andrew Hess Software-Link: https://openvpn.net/client-connect-vpn-for-windows/ Version: 3.1.0.361 MSI CVE: CVE-2020-9442 Verlauf 2019.12.15 - Schwachstelle entdeckt 2019.12.15 - Erster...
adups-get-super-serial
adups-get-super-serial CVE-2015-2231 प्रूफ ऑफ कॉन्सेप्ट मैं CVE-2015-2231 'गेट सुपर सीरियल' को प्रदर्शित करने के लिए जिस पीओसी का उपयोग कर रहा था। कुछ लोगों ने इसे पोस्ट करने के लिए कहा ताकि वे अन्य ADUPS फर्मवेयर आधारित उपकरणों पर समान चीजों का उपयोग कर सकें जिनमें यह कमजोरी है। लैपटॉप को साफ कर...
HTB-NanoCorp-CVE-2024-0670
CVE-2024-0670 - Escalation dei privilegi tramite riparazione MSI dell'agente CheckMK NanoCorp HTB Questo repository contiene uno script PowerShell utilizzato per sfruttare CVE-2024-0670 sulla macchina NanoCorp di Hack The Box. La vulnerabilità consente a un utente con privilegi limitati di abusar...
pyGPOAbuse
pyGPOAbuse Aggiunte di Filtri di D4RKMATT3R AVVISO: Questo è stato testato solo brevemente in un ambiente AD locale; non mi assumo alcuna responsabilità per comportamenti imprevisti o malfunzionamenti. Viene fornito così com'è, solo per test autorizzati, interamente a proprio rischio. Ora support...
CVE-2024-0670-CheckMK-Agent-Local-Privilege-Escalation-Exploit
CVE-2024-0670 – CheckMK Agent Lokale Privilegienausweitung PoC Dieses Repository enthält einen einfachen und sauberen Proof-of-Concept für CVE-2024-0670, eine lokale Privilegienausweitungsschwachstelle im CheckMK Windows Agent. Ein Benutzer mit niedrigen Berechtigungen kann SYSTEM-Berechtigungen...
hershell
Hershell NOTE: the project has been forked on this repo, check there for any other developments. Hershell is a simple TCP reverse shell written in Go. It uses TLS to secure the communications, and provide a certificate public key fingerprint pinning feature, preventing from traffic interception...
CVE-2024-31317-Deployer
CVE-2024-31317 Deployer 🔒 Dichiarazione di ricerca sulla sicurezza Questo progetto è destinato esclusivamente a scopi di ricerca sulla sicurezza e didattici. L'utilizzo di questo strumento per test non autorizzati è illegale. L'autore non si assume alcuna responsabilità per abusi o danni. 📋...
dameflare
DameFlare RCE non autenticata tramite bypass dell'autenticazione Smart Card in SolarWinds Dameware MRC CVE-2019-3980 | CVSS 9.8 Critico | TCP/6129 Ricerca originale e POC: Tenable, Inc. TRA-2019-43 Strumento Python 3: David Boyd @Fir3d0g Come Funziona Dameware MRC espone un servizio di controllo...
CVE-2024-34474
CVE-2024-34474 Clario fino al 2024-04-11 per Windows Desktop ha permessi deboli per %PROGRAMDATA%\Clario e tenta di caricare DLL da lì come SYSTEM. Descrizione: L'applicazione desktop Clario per Windows tenta di caricare librerie DLL inesistenti da C:\ProgramData\Clario\ e...
CVE-2026-14208 Local Privilege Escalation via Insecure DLL Permissions in Remote Utilities Host <=7.7.3.0
Remote Utilities Host =7.7.3.0 sets insecure ACLs on all DLL files in the installation directory C:\Program Files x86\Remote Utilities - Host, granting FULL CONTROL F to the built-in Everyone group BUILTIN\Everyone, S-1-1-0. A Windows service running as NT AUTHORITY\SYSTEM loads DLLs from this...
CVE-2026-21548
CVE-2026-21548 is confirmed in the connected records as a flaw in the nr modem arising from improper input validation, which could enable remote denial of service with system execution privileges required. The issue is described with network access, no user interaction, and no privileges required...
EUVD-2026-50279
An out-of-bounds write vulnerability was found in the BFD library's DLX ELF backend bfd/elf32-dlx.c in GNU binutils. The dlxrtypetohowto function maps ELF relocation types to internal howto structures but fails to perform adequate bounds checking on attacker-controlled relocation type values via...
CVE-2026-9323
The urwid web display backend urwid/display/web.py generates web session identifiers urwidid in Screen.start by concatenating two random.randrange109 calls that use Python's Mersenne Twister PRNG, which is not cryptographically secure. Each call consumes approximately 30 bits of PRNG state, and t...