cve-2019-12750

赛门铁克本地权限提升 - CVE-2019-12750 基于 Kyriakos Economou 的精彩文章： https://labs.nettitude.com/blog/cve-2019-12750-symantec-endpoint-protection-local-privilege-escalation-part-1/ 目前仅支持 x64 和较旧的 Windows 版本。...

nmap-scripts

nmap-scripts scripts nmap para as vulnerabilidades CVE-2020-0796 & CVE-2019-7238 & CVE-2019-11580 & CVE-2017-6327 CVE-2020-0796 Existe uma vulnerabilidade de execução remota de código na forma como o protocolo Microsoft Server Message Block 3.1.1 SMBv3 lida com certas requisições, conhecida como...

CVE-2019-19547

CVE-2019-19547 CVE-2019-19547 PoC Версия Symantec EDR on-prem до "4.3.0" уязвима к неаутентифицированному отраженному XSS через следующий URL: root@kitploit: https://@IPEDR/r3epmpi/v1/dx/log Ссылка...

SEP-14.2-Arbitrary-Write

CVE-2020-5837 漏洞利用程序 相关分析文章可在 RedyOps Labs 的博客中找到： https://labs.redyops.com/index.php/2020/04/27/symantec-endpoint-protection-sep-14-2-eop-via-arbitrary-write/ 第三方工具 此漏洞利用代码大量基于 James Forshaw 开发的 symboliclink-testing-tools。symboliclink-testing-tools 可在以下地址找到：...

CVE-2020-5839

CVE-2020-5839 CVE-2020-5839 POC Symantec EDR 온프레미스 버전 4.4.0 미만은 다음 URL을 통해 정보 노출 취약점에 취약합니다: root@kitploit: https://@IPEDR/r3epmpi/status/ https://@IPEDR/r3epmpi/status/routes https://@IPEDR/r3epmpi/v1/event/status/ds https://@IPEDR/atpapp/features/list 참조...

CVE-2009-3036

CVE-2009-3036 SpeeDr00t@Black Falcon bid38241 सिमैंटेक IM मैनेजर कंसोल HTML इंजेक्शन भेद्यता जानकारी चर्चा शोषण समाधान संदर्भ noexploitlink...

CVE-2020-12593

CVE-2020-12593 CVE-2020-12593 POC Symantec EDR sur site version antérieure à "4.5" est sujet à une vulnérabilité de divulgation d'informations via l'URL suivante : root@kitploit: https://@IPEDR/atpapi/v2/policies/blacklist Référence...

domainhunter

Domain Hunter Authors Joe Vest @joevest & Andrew Chiles @andrewchiles Domain name selection is an important aspect of preparation for penetration tests and especially Red Team engagements. Commonly, domains that were used previously for benign purposes and were properly categorized can be purchas...

richkit

Richkit Richkit is a python3 package that provides tools taking a domain name as input, and returns addtional information on that domain. It can be an analysis of the domain itself, looked up from data-bases, retrieved from other services, or some combination thereof. The purpose of richkit is to...

CVE-2022-37017

CVE-2022-37017 Authentifizierungsumgehung für das Benutzeroberflächen-Passwort von Symantec Endpoint Protection 14.3.5351 Client Symantec Endpoint Protection ermöglicht das Einrichten eines Passwortschutzes für die Benutzeroberfläche, um Konfigurationsänderungen zu verhindern. Diese Passwortprüfu...

CVE-2008-6827

CVE-2008-6827 Symantec Altiris Client Service 6.8.378 - Escalation dei privilegi locale Pubblicazione Exploit-DB: https://www.exploit-db.com/exploits/5625/ Autore Alex Hernandez alias @alt3kx...

CVE-2019-9702_Symantec_Encryption_Desktop_LPE_PoC

Symantec Encryption Desktop PGPwded.sys escalatione di privilegi locale — PoC Questo repository contiene una proof-of-concept per un percorso di escalatione di privilegi locale nel filtro di storage PGPwded.sys di Symantec Encryption Desktop, basata su una primitiva di lettura/scrittura raw del...

CVE-2026-74983

Mitigation bypass in the Data Loss Prevention component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1...

CVE-2026-15380

CVE-2026-15380 : A non-admin interactive user can achieve full SYSTEM code execution via a DCOM/task scheduler logic chain in Symantec ITMS. No network access or memory corruption required. Connected records confirm the vulnerability and impact as stated; no explicit exploit details, mitigations,...

CVE-2026-15380 Local privilege escalation in Symantec ITMS

A non-administrator interactive user can obtain full SYSTEM code execution through a DCOM/task scheduler logic chain — no network access, no memory corruption required ITMS 8.7.3...

GodDamn Ransomware Uses PoisonX Driver to Disable Endpoint Defenses

Cybersecurity researchers have flagged a new ransomware family called GodDamn that employs the PoisonX kernel driver to neutralize security software as part of its defense evasion strategy. According to a new report published by the Threat Hunter Team from Symantec, the ransomware was first...

CVE-2026-11626 Local Privilege Escalation in Symantec Endpoint Protection macOS CleanWipe Removal Tool

CleanWipe Removal Tool macOS, prior to 16.0.0.65, may be susceptible to an Local Privilege Escalation vulnerability, which is a type of issue whereby an attacker with limited privilege access on an affected system can escalate their privileges to gain administrative control...

CVE-2026-11626 Local Privilege Escalation in Symantec Endpoint Protection macOS CleanWipe Removal Tool

CleanWipe Removal Tool macOS, prior to 16.0.0.65, may be susceptible to an Local Privilege Escalation vulnerability, which is a type of issue whereby an attacker with limited privilege access on an affected system can escalate their privileges to gain administrative control...

CVE-2026-45208

A time-of-check time-of-use vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability...

CVE-2026-34927

An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability...