857 matches found
betwixt
Betwixt vous aidera à analyser le trafic web en dehors du navigateur en utilisant l'interface familière de Chrome DevTools. Installation Téléchargez la dernière version pour votre système d'exploitation, construisez votre propre bundle ou exécutez Betwixt à partir du code source. Configuration Af...
SirepRAT
SirepRAT - RCE от имени SYSTEM на Windows IoT Core SirepRAT предоставляет полные возможности RAT без необходимости написания реального вредоносного RAT на целевом устройстве. Контекст Метод использует встроенную службу Sirep Test Service, которая предустановлена и работает в официальных образах,...
CVE-2024-31317-Deployer
CVE-2024-31317 Deployer 🔒 Заявление о безопасности Данный проект предназначен исключительно для исследований в области безопасности и образовательных целей. Использование этого инструмента для несанкционированного тестирования незаконно. Автор не несет ответственности за любое неправомерное...
CVE-2026-23520
CVE-2026-23520 MCP API Remote Command Execution RCE PoC 📌 Обзор Этот репозиторий содержит Proof-of-Concept PoC эксплойт для уязвимости удалённого выполнения команд RCE, затрагивающей приложения, которые предоставляют уязвимую конечную точку MCP API обычно /api/mcp/connect. Уязвимость позволяет...
Enumprotections_BOF
Enumprotections BOF 이 BOF는 시스템 프로세스를 열거하고 각 프로세스의 보호 수준을 식별하는 데 사용할 수 있습니다. 서비스 연관성, 사용자, 세션, 경로와 같은 추가 정보도 함께 반환됩니다. 이러한 정보를 조합하면 SYSTEM 수준 DLL 하이재킹을 탐색할 좋은 후보를 식별하는 데 사용할 수 있습니다. 이상적인 프로세스는 다음과 같습니다: 1. 보호되지 않음 2. 서비스와 연결되어 있어 시작/중지가 가능함 3. 타사 소프트웨어. Microsoft는 Microsoft 구성 요소의 하이재킹을 식별하는 데...
CVE-2026-76350
CVE-2026-76350 is an improper privilege management vulnerability in Splunk Enterprise affecting versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14 . A user holding the schedule_search role capability can configure PDF attachments in the email alert action workflow. When the alert fires, the search...
CVE-2026-18759
The background service of ABP or AES runs as NT AUTHORITY\SYSTEM and implements a file-based inter-process communication IPC mechanism protected by AES encryption. Because the encryption key file is readable by standard users and protected using DPAPI. Any authenticated local user can recover the...
EUVD-2026-52064
In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11004276; Issue ID: MSV-7748...
PT-2026-70737
Name of the Vulnerable Software and Affected Versions Microsoft Windows Ancillary Function Driver for WinSock affected versions not specified Description A use-after-free condition exists in the Windows Ancillary Function Driver for WinSock. This issue allows an authorized attacker with existing...
CVE-2026-15379
CVE-2026-15379 : The Altiris WMI provider exposes the AltirisAgent_Stream class, allowing any local standard user to read files accessible to the SYSTEM context, bypassing filesystem ACLs. The provider uses LocalSystem context for WMI queries without re-impersonating the caller, enabling read acc...
CVE-2026-7162
Successful exploitation of the integer overflow vulnerability could allow an attacker to achieve system-level access to the affected software...
CVE-2026-7162
Successful exploitation of the integer overflow vulnerability could allow an attacker to achieve system-level access to the affected software...
CVE-2026-7162
Successful exploitation of the integer overflow vulnerability could allow an attacker to achieve system-level access to the affected software...
EUVD-2026-43268
Successful exploitation of the integer overflow vulnerability could allow an attacker to achieve system-level access to the affected software...
CVE-2026-7162
Successful exploitation of the integer overflow vulnerability could allow an attacker to achieve system-level access to the affected software...
CVE-2026-7162
CVE-2026-7162 involves an integer overflow that could allow an attacker to achieve system-level access to the affected software. The linked sources indicate a local attack vector with high impact (confidentiality, integrity, and availability all rated high) and require no user interaction, with p...
PT-2026-57622
Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description An integer overflow occurs, which could allow an attacker to achieve system-level access to the affected software. An integer overflow is a condition where an...
Security Bulletin: Security vulnerability in IBM Storage Protect Client leads to unauthorized access to IBM Storage Protect Snapshot for Windows Standalone Configuration
Summary Security vulnerability in IBM Storage Protect Client leads to unauthorized access to IBM Storage Protect Snapshot for Windows Standalone Configuration. CVE-2026-12628 Vulnerability Details CVEID:CVE-2026-12628 DESCRIPTION: IBM Storage Protect Client 8.1.0.0 through 8.2.1.0 and IBM Storage...
CVE-2026-7569
Quest NetVault Backup viewclient Cross-Site Scripting Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of Quest NetVault Backup. User interaction is required to exploit this vulnerability in that the target must vis...
CVE-2026-9787
Quest NetVault Backup NVBULogDaemon Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Quest NetVault Backup. Although authentication is required to exploit this vulnerability, the existing...