CVE-2026-76699

CVE-2026-76699 is a buffer overflow in a system service within the underlying operating system of HPE Networking EdgeConnect SD-WAN Gateways . An unauthenticated adjacent attacker with high attack complexity can crash the service, causing temporary disruption to network operations. The CVSS 3.1 s...

EUVD-2026-79225

A buffer overflow vulnerability exists in a system service within the underlying operating system of HPE Networking EdgeConnect SD-WAN Gateways that could allow an unauthenticated adjacent attacker to cause a denial-of-service. Successful exploitation could allow an attacker to crash the impacted...

acheron

About Acheron is a library inspired by SysWhisper3/FreshyCalls/RecycledGate, with most of the functionality implemented in Go assembly. acheron package can be used to add indirect syscall capabilities to your Golang tradecraft, to bypass AV/EDRs that makes use of usermode hooks and instrumentatio...

CVE-2022-35841

CVE-2022-35841 This is only a small writeup with the theory, as this bug was collided on and I never did get around to properly testing this. EnterpriseAppMgmtSvc is an interesting service implementing COM objects. Seems to date from Windows Phone and indeed, most of the COM interfaces implemente...

CVE-2014-7911-CVE-2014-4322_get_root_privilege

CVE-2014-7911poc 适用于Nexus5 Android 4.4.4KTU8P的本地root利用程序 作者：andy 网站：https://blog.csdn.net/koozxcv 构建方法 将项目导入Eclipse并进行构建。 漏洞信息 http://seclists.org/fulldisclosure/2014/Nov/51 分析...

omapi-cve-2015-6606-exploit

CVE-2015-6606の検証用シンプルエクスプロイト これは、SEEKスマートカードサービスバージョン3.1.0以下に存在するコードインジェクション脆弱性（CVE-2015-6606、Google内部バグ ANDROID-22301786）を検証するためのシンプルなエクスプロイトです。この脆弱性により、細工されたAndroidアプリケーションパッケージがスマートカードシステムサービスの実行コンテキストに任意のコードを注入できます。このコードは、このシステムサービスに付与されたすべての権限を継承します。これには、通常サードパーティアプリには付与されない署名またはシステム権限が含まれます...

CVE-2026-7791

CVE-2026-7791 PoC: 기본적으로 높은 권한 Amazon WorkSpaces의 로컬 권한 상승 에 대한 연구 개념 증명 Skylight Workspace Config Service의 TOCTOU + SYSTEM 수준 임의 파일 쓰기. 전체 기술 세부 정보: Cymulate 블로그 | ---|--- CVE| CVE-2026-7791 공급업체| AWS Security Bulletin 2026-025-AWS 패치 버전| Skylight 2.6.2034.0 작성자| Ben Zamir, Cymulate Research Lab...

CVE-2019-6329

HPサポートアシスタントにおけるローカル特権昇格 ハードリンクを悪用したHPサポートアシスタントのローカル特権昇格バグ 研究者: BkavのManhNDd 説明 HPサポートアシスタントGUI で、アップデートとメッセージを確認 をクリックすると、サービスHPサポートソリューションフレームワーク がいくつかのタスクを実行し、HPSAObjUtil8.exe（SYSTEMとして実行）を起動して、C:\ProgramData\Hewlett-Packard\HP Support Framework\Logs\Temp\HPSA...

CVE-2014-7911_poc

CVE-2014-7911poc Nexus5 Android 4.4.4KTU8P 用ローカルrootエクスプロイト 著者: retme [email protected] Twitter: @returnsme & Weibo: @retme ウェブサイト: retme.net ビルド方法 プロジェクトをEclipseにインポートしてビルドします。 ./cve20147911/assets/msmattack は CVE-2014-4322 エクスプロイトのバイナリファイルです。こちらで入手できます:...

Astra Linux – Vulnerability in glib2.0

A issue was discovered in GNOME GLib before version 2.78.5, and also in versions 2.79.x and 2.80.x before 2.80.1. When a GDBus-based client subscribes to signals from a trusted system service such as NetworkManager on a shared computer, other users of the same computer can send spoofed D-Bus...

Astra Linux – Vulnerability in Keepalived

In Keepalived versions up to 2.2.4, the D-Bus mechanism does not sufficiently restrict the destination of messages, allowing any user to inspect and manipulate any property. This leads to bypasses of access controls in certain situations, where a unrelated D-Bus system service has a settable...

CVE-2026-50544

NortheBridge/luminalshine is a Sunshine-compatible game stream host for Moonlight. Prior to version 26.05.0-rc4, a latent gap exists on a default install, the file at src/platform/windows/misc.cpp lives at C:\ProgramData\LuminalShine\config\apps.json and is created by the SYSTEM service. Under...

CVE-2026-50544 NortheBridge/luminalshine has Incorrect Permission Assignment for Critical Resource and Creation of Temporary File in Directory with Insecure Permissions

NortheBridge/luminalshine is a Sunshine-compatible game stream host for Moonlight. Prior to version 26.05.0-rc4, a latent gap exists on a default install, the file at src/platform/windows/misc.cpp lives at C:\ProgramData\LuminalShine\config\apps.json and is created by the SYSTEM service. Under...

CVE-2026-50544

NortheBridge/luminalshine is a Sunshine-compatible game stream host for Moonlight. Prior to version 26.05.0-rc4, a latent gap exists on a default install, the file at src/platform/windows/misc.cpp lives at C:\ProgramData\LuminalShine\config\apps.json and is created by the SYSTEM service. Under...

EUVD-2026-57698

NortheBridge/luminalshine is a Sunshine-compatible game stream host for Moonlight. Prior to version 26.05.0-rc4, a latent gap exists on a default install, the file at src/platform/windows/misc.cpp lives at C:\ProgramData\LuminalShine\config\apps.json and is created by the SYSTEM service. Under...

CVE-2026-50544 NortheBridge/luminalshine has Incorrect Permission Assignment for Critical Resource and Creation of Temporary File in Directory with Insecure Permissions

NortheBridge/luminalshine is a Sunshine-compatible game stream host for Moonlight. Prior to version 26.05.0-rc4, a latent gap exists on a default install, the file at src/platform/windows/misc.cpp lives at C:\ProgramData\LuminalShine\config\apps.json and is created by the SYSTEM service. Under...

CVE-2026-14479

A maliciously crafted input, when processed by the Autodesk Installer IPC frame parser, may trigger improper validation of an input-specified position or offset, resulting in an out-of-range substring operation. A malicious actor may leverage this vulnerability to cause the NT AUTHORITY\SYSTEM...

CVE-2026-14479

CVE-2026-14479 affects the Autodesk Installer IPC frame parser. A maliciously crafted input can cause improper validation of an input-specified position or offset, producing an out-of-range substring operation. The resulting condition may cause the NT AUTHORITY\SYSTEM service to terminate, yieldi...

CVE-2026-14479 Denial of Service in Autodesk Installer IPC Channel

A maliciously crafted input, when processed by the Autodesk Installer IPC frame parser, may trigger improper validation of an input-specified position or offset, resulting in an out-of-range substring operation. A malicious actor may leverage this vulnerability to cause the NT AUTHORITY\SYSTEM...

Security Bulletin: Vulnerability in SSSD affects IBM Netezza Appliance

Summary The SSSD package is used by IBM Netezza Appliance . IBM Netezza Appliance has addressed the applicable CVE CVE-2026-14474 Vulnerability Details CVEID:CVE-2026-14474 DESCRIPTION: A flaw was found in SSSD's LDAP sudo provider. When the ldapsudosearchbase option is not explicitly configured,...