Lucene search
+L

425 matches found

Kitploit
Kitploit
added 2026/09/03 5:16 a.m.5 views

CVE-2022-35841

CVE-2022-35841 This is only a small writeup with the theory, as this bug was collided on and I never did get around to properly testing this. EnterpriseAppMgmtSvc is an interesting service implementing COM objects. Seems to date from Windows Phone and indeed, most of the COM interfaces implemente...

8.8CVSS7.3AI score0.02809EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/03 12:16 a.m.6 views

CVE-2014-7911-CVE-2014-4322_get_root_privilege

CVE-2014-7911poc Nexus5 Android 4.4.4KTU8P 用のローカル root エクスプロイト 作者: andy Webサイト: https://blog.csdn.net/koozxcv ビルド方法 プロジェクトを eclipse にインポートして、ビルドしてください。 バグ情報 http://seclists.org/fulldisclosure/2014/Nov/51 解析...

7.2CVSS7.2AI score0.24534EPSS
SaveExploits9
Kitploit
Kitploit
added 2026/09/02 1:04 p.m.220 views

acheron

About Acheron is a library inspired by SysWhisper3/FreshyCalls/RecycledGate, with most of the functionality implemented in Go assembly. acheron package can be used to add indirect syscall capabilities to your Golang tradecraft, to bypass AV/EDRs that makes use of usermode hooks and instrumentatio...

5.7AI score
SaveExploits0References16
Kitploit
Kitploit
added 2026/09/02 10:57 a.m.6 views

CVE-2019-6329

HPサポートアシスタントにおけるローカル特権昇格 ハードリンクを悪用したHPサポートアシスタントのローカル特権昇格バグ 研究者: BkavのManhNDd 説明 HPサポートアシスタントGUI で、アップデートとメッセージを確認 をクリックすると、サービスHPサポートソリューションフレームワーク がいくつかのタスクを実行し、HPSAObjUtil8.exe(SYSTEMとして実行)を起動して、C:\ProgramData\Hewlett-Packard\HP Support Framework\Logs\Temp\HPSA...

7.8CVSS6.8AI score0.0163EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/01 9:26 p.m.6 views

CVE-2014-7911_poc

CVE-2014-7911poc 针对Nexus5 Android 4.4.4KTU8P的本地root利用 作者:retme [email protected] Twitter: @returnsme,微博:@retme 网站:retme.net 如何构建 将项目导入eclipse,然后构建。 ./cve20147911/assets/msmattack 是CVE-2014-4322利用的二进制文件。你可以在此处找到:https://github.com/retme7/CVE-2014-4322poc 漏洞信息...

7.2CVSS7.2AI score0.24534EPSS
SaveExploits9References1
Kitploit
Kitploit
added 2026/08/30 7:17 a.m.6 views

omapi-cve-2015-6606-exploit

Simple Exploit for Verification of CVE-2015-6606 This is a simple exploit to verify a code injection vulnerability that exists in the SEEK smartcard service versions 3.1.0 and below CVE-2015-6606, Google internal bug ANDROID-22301786. The vulnerability allows specially crafted Android application...

9.3CVSS6.1AI score0.00773EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/08/29 7:27 a.m.4 views

CVE-2026-7791

CVE-2026-7791 PoC: Privilegiato per impostazione predefinita Proof-of-concept di ricerca per escalation dei privilegi locale in Amazon WorkSpaces TOCTOU + scrittura arbitraria di file a livello SYSTEM in Skylight Workspace Config Service. Dettagli tecnici completi: Cymulate blog | ---|--- CVE|...

8.5CVSS5.8AI score0.00122EPSS
SaveExploits0
AstraLinux
AstraLinux
added 2026/08/24 10:19 a.m.12 views

Astra Linux – Vulnerability in glib2.0

A issue was discovered in GNOME GLib before version 2.78.5, and also in versions 2.79.x and 2.80.x before 2.80.1. When a GDBus-based client subscribes to signals from a trusted system service such as NetworkManager on a shared computer, other users of the same computer can send spoofed D-Bus...

5.2CVSS6.4AI score0.00756EPSS
SaveExploits1References2
AstraLinux
AstraLinux
added 2026/08/24 10:19 a.m.9 views

Astra Linux – Vulnerability in Keepalived

In Keepalived versions up to 2.2.4, the D-Bus mechanism does not sufficiently restrict the destination of messages, allowing any user to inspect and manipulate any property. This leads to bypasses of access controls in certain situations, where a unrelated D-Bus system service has a settable...

5.5CVSS6.2AI score0.01083EPSS
SaveExploits0References2
NVD
NVD
added 2026/08/13 12:17 a.m.12 views

CVE-2026-50544

NortheBridge/luminalshine is a Sunshine-compatible game stream host for Moonlight. Prior to version 26.05.0-rc4, a latent gap exists on a default install, the file at src/platform/windows/misc.cpp lives at C:\ProgramData\LuminalShine\config\apps.json and is created by the SYSTEM service. Under...

6.3CVSS0.00089EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/08/12 11:18 p.m.37 views

CVE-2026-50544 NortheBridge/luminalshine has Incorrect Permission Assignment for Critical Resource and Creation of Temporary File in Directory with Insecure Permissions

NortheBridge/luminalshine is a Sunshine-compatible game stream host for Moonlight. Prior to version 26.05.0-rc4, a latent gap exists on a default install, the file at src/platform/windows/misc.cpp lives at C:\ProgramData\LuminalShine\config\apps.json and is created by the SYSTEM service. Under...

6.3CVSS0.00089EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/08/12 11:18 p.m.8 views

CVE-2026-50544

NortheBridge/luminalshine is a Sunshine-compatible game stream host for Moonlight. Prior to version 26.05.0-rc4, a latent gap exists on a default install, the file at src/platform/windows/misc.cpp lives at C:\ProgramData\LuminalShine\config\apps.json and is created by the SYSTEM service. Under...

6.3CVSS5.2AI score0.00089EPSS
SaveExploits0References2Affected Software1
EUVD
EUVD
added 2026/08/12 11:18 p.m.11 views

EUVD-2026-57698

NortheBridge/luminalshine is a Sunshine-compatible game stream host for Moonlight. Prior to version 26.05.0-rc4, a latent gap exists on a default install, the file at src/platform/windows/misc.cpp lives at C:\ProgramData\LuminalShine\config\apps.json and is created by the SYSTEM service. Under...

6.3CVSS5.2AI score0.00089EPSS
SaveExploits0References1
OSV
OSV
added 2026/08/12 11:18 p.m.14 views

CVE-2026-50544 NortheBridge/luminalshine has Incorrect Permission Assignment for Critical Resource and Creation of Temporary File in Directory with Insecure Permissions

NortheBridge/luminalshine is a Sunshine-compatible game stream host for Moonlight. Prior to version 26.05.0-rc4, a latent gap exists on a default install, the file at src/platform/windows/misc.cpp lives at C:\ProgramData\LuminalShine\config\apps.json and is created by the SYSTEM service. Under...

6.3CVSS5.3AI score
SaveExploits0References3
NVD
NVD
added 2026/08/12 3:17 p.m.11 views

CVE-2026-14479

A maliciously crafted input, when processed by the Autodesk Installer IPC frame parser, may trigger improper validation of an input-specified position or offset, resulting in an out-of-range substring operation. A malicious actor may leverage this vulnerability to cause the NT AUTHORITY\SYSTEM...

5.5CVSS0.00114EPSS
SaveExploits0References2
CVE
CVE
added 2026/08/12 2:54 p.m.40 views

CVE-2026-14479

CVE-2026-14479 affects the Autodesk Installer IPC frame parser. A maliciously crafted input can cause improper validation of an input-specified position or offset, producing an out-of-range substring operation. The resulting condition may cause the NT AUTHORITY\SYSTEM service to terminate, yieldi...

5.5CVSS5.3AI score0.00114EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/08/12 2:54 p.m.34 views

CVE-2026-14479 Denial of Service in Autodesk Installer IPC Channel

A maliciously crafted input, when processed by the Autodesk Installer IPC frame parser, may trigger improper validation of an input-specified position or offset, resulting in an out-of-range substring operation. A malicious actor may leverage this vulnerability to cause the NT AUTHORITY\SYSTEM...

5.5CVSS0.00114EPSS
SaveExploits0References2
IBM Security Bulletins
IBM Security Bulletins
added 2026/08/11 8:48 a.m.11 views

Security Bulletin: Vulnerability in SSSD affects IBM Netezza Appliance

Summary The SSSD package is used by IBM Netezza Appliance . IBM Netezza Appliance has addressed the applicable CVE CVE-2026-14474 Vulnerability Details CVEID:CVE-2026-14474 DESCRIPTION: A flaw was found in SSSD's LDAP sudo provider. When the ldapsudosearchbase option is not explicitly configured,...

8.8CVSS5.3AI score0.00568EPSS
SaveExploits0Affected Software1
RedHat Linux
RedHat Linux
added 2026/07/27 10:33 a.m.14 views

Important: Red Hat Security Advisory: sssd security update

An update for sssd is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

8.8CVSS5.9AI score0.00668EPSS
SaveExploits0References3
OSSF Malicious Packages
OSSF Malicious Packages
added 2026/07/23 8:06 p.m.24 views

Malicious code in govapkg (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6960d465fbaca432a24450044c48aaaeb6f4c687171c4c0c4305005cccceffaf govapkg presents itself as a client for pkg.go.dev but on any use of its public API get/package/module invokes an internal helper...

6AI score
SaveExploits0References4
Rows per page
Query Builder