Lucene search
+L

425 matches found

Kitploit
Kitploit
added 2026/09/03 5:16 a.m.5 views

CVE-2022-35841

CVE-2022-35841 이것은 이론에 대한 간단한 기록일 뿐입니다. 이 버그는 충돌이 있었고 실제로 제대로 테스트하지 못했기 때문입니다. EnterpriseAppMgmtSvc는 COM 개체를 구현하는 흥미로운 서비스입니다. Windows Phone에서 비롯된 것으로 보이며, 실제로 이 함수가 구현하는 대부분의 COM 인터페이스는 Windows Phone에서만 작동하는 데드 코드입니다. OneCore 덕분입니다! 비 WCOS 시스템에서 기본적으로 작동하는 유일한 coclass는...

8.8CVSS7.2AI score0.02809EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/03 12:16 a.m.6 views

CVE-2014-7911-CVE-2014-4322_get_root_privilege

CVE-2014-7911poc Nexus5 Android 4.4.4KTU8P용 로컬 루트 익스플로잇 작성자: andy 웹사이트: https://blog.csdn.net/koozxcv 빌드 방법 프로젝트를 Eclipse로 가져온 후 빌드하세요. 버그 정보 http://seclists.org/fulldisclosure/2014/Nov/51 분석...

7.2CVSS7.2AI score0.24534EPSS
SaveExploits9
Kitploit
Kitploit
added 2026/09/02 1:04 p.m.220 views

acheron

About Acheron is a library inspired by SysWhisper3/FreshyCalls/RecycledGate, with most of the functionality implemented in Go assembly. acheron package can be used to add indirect syscall capabilities to your Golang tradecraft, to bypass AV/EDRs that makes use of usermode hooks and instrumentatio...

5.7AI score
SaveExploits0References16
Kitploit
Kitploit
added 2026/09/02 10:57 a.m.6 views

CVE-2019-6329

HP Support Assistant의 로컬 권한 상승 하드 링크를 악용한 HP Support Assistant의 로컬 권한 상승 버그 연구자: Bkav의 ManhNDd 설명 HP Support Assistant GUI 에서 업데이트 및 메시지 확인Check for updates and messages 을 클릭하면 HP Support Solution Framework 서비스가 일부 작업을 실행하고, HPSAObjUtil8.exeSYSTEM 권한으로 실행를 시작하여 C:\ProgramData\Hewlett-Packard\HP...

7.8CVSS6.8AI score0.0163EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/01 9:26 p.m.6 views

CVE-2014-7911_poc

CVE-2014-7911poc Nexus5 Android 4.4.4KTU8P용 로컬 루트 익스플로잇 작성자: retme [email protected] 트위터: @returnsme, 웨이보: @retme 웹사이트: retme.net 빌드 방법 프로젝트를 Eclipse로 가져와서 빌드하세요. ./cve20147911/assets/msmattack은 CVE-2014-4322 익스플로잇의 바이너리 파일입니다. 여기에서 찾을 수 있습니다: https://github.com/retme7/CVE-2014-4322poc 버그 정보...

7.2CVSS7.2AI score0.24534EPSS
SaveExploits6References1
Kitploit
Kitploit
added 2026/08/30 7:17 a.m.6 views

omapi-cve-2015-6606-exploit

Simple Exploit for Verification of CVE-2015-6606 This is a simple exploit to verify a code injection vulnerability that exists in the SEEK smartcard service versions 3.1.0 and below CVE-2015-6606, Google internal bug ANDROID-22301786. The vulnerability allows specially crafted Android application...

9.3CVSS6.1AI score0.00773EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/08/29 7:27 a.m.4 views

CVE-2026-7791

CVE-2026-7791 PoC: Privilegiato per impostazione predefinita Proof-of-concept di ricerca per escalation dei privilegi locale in Amazon WorkSpaces TOCTOU + scrittura arbitraria di file a livello SYSTEM in Skylight Workspace Config Service. Dettagli tecnici completi: Cymulate blog | ---|--- CVE|...

8.5CVSS5.8AI score0.00122EPSS
SaveExploits0
AstraLinux
AstraLinux
added 2026/08/24 10:19 a.m.12 views

Astra Linux – Vulnerability in glib2.0

A issue was discovered in GNOME GLib before version 2.78.5, and also in versions 2.79.x and 2.80.x before 2.80.1. When a GDBus-based client subscribes to signals from a trusted system service such as NetworkManager on a shared computer, other users of the same computer can send spoofed D-Bus...

5.2CVSS6.4AI score0.00756EPSS
SaveExploits1References2
AstraLinux
AstraLinux
added 2026/08/24 10:19 a.m.9 views

Astra Linux – Vulnerability in Keepalived

In Keepalived versions up to 2.2.4, the D-Bus mechanism does not sufficiently restrict the destination of messages, allowing any user to inspect and manipulate any property. This leads to bypasses of access controls in certain situations, where a unrelated D-Bus system service has a settable...

5.5CVSS6.2AI score0.01083EPSS
SaveExploits0References2
NVD
NVD
added 2026/08/13 12:17 a.m.12 views

CVE-2026-50544

NortheBridge/luminalshine is a Sunshine-compatible game stream host for Moonlight. Prior to version 26.05.0-rc4, a latent gap exists on a default install, the file at src/platform/windows/misc.cpp lives at C:\ProgramData\LuminalShine\config\apps.json and is created by the SYSTEM service. Under...

6.3CVSS0.00089EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/08/12 11:18 p.m.37 views

CVE-2026-50544 NortheBridge/luminalshine has Incorrect Permission Assignment for Critical Resource and Creation of Temporary File in Directory with Insecure Permissions

NortheBridge/luminalshine is a Sunshine-compatible game stream host for Moonlight. Prior to version 26.05.0-rc4, a latent gap exists on a default install, the file at src/platform/windows/misc.cpp lives at C:\ProgramData\LuminalShine\config\apps.json and is created by the SYSTEM service. Under...

6.3CVSS0.00089EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/08/12 11:18 p.m.10 views

CVE-2026-50544

NortheBridge/luminalshine is a Sunshine-compatible game stream host for Moonlight. Prior to version 26.05.0-rc4, a latent gap exists on a default install, the file at src/platform/windows/misc.cpp lives at C:\ProgramData\LuminalShine\config\apps.json and is created by the SYSTEM service. Under...

6.3CVSS5.2AI score0.00089EPSS
SaveExploits0References2Affected Software1
EUVD
EUVD
added 2026/08/12 11:18 p.m.11 views

EUVD-2026-57698

NortheBridge/luminalshine is a Sunshine-compatible game stream host for Moonlight. Prior to version 26.05.0-rc4, a latent gap exists on a default install, the file at src/platform/windows/misc.cpp lives at C:\ProgramData\LuminalShine\config\apps.json and is created by the SYSTEM service. Under...

6.3CVSS5.2AI score0.00089EPSS
SaveExploits0References1
OSV
OSV
added 2026/08/12 11:18 p.m.15 views

CVE-2026-50544 NortheBridge/luminalshine has Incorrect Permission Assignment for Critical Resource and Creation of Temporary File in Directory with Insecure Permissions

NortheBridge/luminalshine is a Sunshine-compatible game stream host for Moonlight. Prior to version 26.05.0-rc4, a latent gap exists on a default install, the file at src/platform/windows/misc.cpp lives at C:\ProgramData\LuminalShine\config\apps.json and is created by the SYSTEM service. Under...

6.3CVSS5.3AI score
SaveExploits0References3
NVD
NVD
added 2026/08/12 3:17 p.m.11 views

CVE-2026-14479

A maliciously crafted input, when processed by the Autodesk Installer IPC frame parser, may trigger improper validation of an input-specified position or offset, resulting in an out-of-range substring operation. A malicious actor may leverage this vulnerability to cause the NT AUTHORITY\SYSTEM...

5.5CVSS0.00114EPSS
SaveExploits0References2
CVE
CVE
added 2026/08/12 2:54 p.m.40 views

CVE-2026-14479

CVE-2026-14479 affects the Autodesk Installer IPC frame parser. A maliciously crafted input can cause improper validation of an input-specified position or offset, producing an out-of-range substring operation. The resulting condition may cause the NT AUTHORITY\SYSTEM service to terminate, yieldi...

5.5CVSS5.3AI score0.00114EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/08/12 2:54 p.m.34 views

CVE-2026-14479 Denial of Service in Autodesk Installer IPC Channel

A maliciously crafted input, when processed by the Autodesk Installer IPC frame parser, may trigger improper validation of an input-specified position or offset, resulting in an out-of-range substring operation. A malicious actor may leverage this vulnerability to cause the NT AUTHORITY\SYSTEM...

5.5CVSS0.00114EPSS
SaveExploits0References2
IBM Security Bulletins
IBM Security Bulletins
added 2026/08/11 8:48 a.m.11 views

Security Bulletin: Vulnerability in SSSD affects IBM Netezza Appliance

Summary The SSSD package is used by IBM Netezza Appliance . IBM Netezza Appliance has addressed the applicable CVE CVE-2026-14474 Vulnerability Details CVEID:CVE-2026-14474 DESCRIPTION: A flaw was found in SSSD's LDAP sudo provider. When the ldapsudosearchbase option is not explicitly configured,...

8.8CVSS5.3AI score0.00568EPSS
SaveExploits0Affected Software1
RedHat Linux
RedHat Linux
added 2026/07/27 10:33 a.m.14 views

Important: Red Hat Security Advisory: sssd security update

An update for sssd is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

8.8CVSS5.9AI score0.00668EPSS
SaveExploits0References3
OSSF Malicious Packages
OSSF Malicious Packages
added 2026/07/23 8:06 p.m.24 views

Malicious code in govapkg (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6960d465fbaca432a24450044c48aaaeb6f4c687171c4c0c4305005cccceffaf govapkg presents itself as a client for pkg.go.dev but on any use of its public API get/package/module invokes an internal helper...

6AI score
SaveExploits0References4
Rows per page
Query Builder