CVE-2019-8805

CVE-2019-8805 CVE-2019-8805 Apple EndpointSecurity 框架权限提升漏洞利用 权限验证中存在一个验证问题。该问题通过改进进程权限验证得到解决。此问题已在 macOS Catalina 10.15.1 中修复。应用程序可能能够以系统权限执行任意代码。 编译与执行 编译 root@kitploit: gcc -framework Foundation appleEPSPrivEsc.m -o appleEPSPrivEsc 执行 root@kitploit: ./appleEPSPrivEsc...

CVE-2020-1048

CVE-2020-1048 Existe una vulnerabilidad de elevación de privilegios cuando el servicio Windows Print Spooler permite indebidamente la escritura arbitraria en el sistema de archivos. Un atacante que explotara con éxito esta vulnerabilidad podría ejecutar código arbitrario con privilegios elevados...

CVE-2023-36874_BOF

CVE-2023-36874 Windows 错误报告 LPE BOF 介绍 这是一个成熟且可运行的 CobaltStrike BOF 实现，基于 Filip Dragovic（@filipdragovic）的 CVE-2023-36874 Windows 错误报告 LPE 利用程序。他通过逆向相关的有漏洞的 DLL 并创建了该漏洞关键的非公开 COM 结构，在创建可用利用程序方面做了大量艰苦工作。 此 BOF 会将用户指定的 EXE 文件放置到目标机器的磁盘上，然后触发漏洞，导致该 EXE 以 SYSTEM 权限运行。 微软感谢谷歌威胁分析组披露此漏洞，然而我最初是通过...

cve-2021-1675

〖EXP〗Ladon打印机漏洞提权CVE-2021-1675复现 http://k8gege.org/p/CVE-2021-1675.html 基本情况 6月9日，微软发布6月安全更新补丁，修复了50个安全漏洞，其中包括一个Windows Print Spooler权限提升漏洞，漏洞CVE编号：CVE-2021-1675。未经身份验证的远程攻击者可利用该漏洞以SYSTEM权限在域控制器上执行任意代码，从而获得整个域的控制权。建议受影响用户及时更新漏洞补丁进行防护，做好资产自查以及预防工作，以免遭受黑客攻击。 漏洞描述 Print...

CVE-2020-1048

CVE-2020-1048 Código de exploit POC para CVE-2020-1048 PrintDemon Sistemas vulnerables Todas las versiones de Windows mencionadas en el enlace son vulnerables: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1048 Pasos para reproducir 1. Cambie las variables gPortName ...

CVE-2023-27350

CVE-2023-27350 此漏洞允许远程攻击者绕过 PaperCut NG 22.0.5 Build 63914 受影响安装上的认证。利用此漏洞无需认证。该特定缺陷存在于 SetupCompleted 类中。问题源于不正确的访问控制。攻击者可利用此漏洞绕过认证并在 SYSTEM 上下文中执行任意代码。曾是 ZDI-CAN-18987。...

CVE-2026-69665

SKYSEA Client View and SKYMEC IT Manager contain an issue with incorrect default permissions. If this vulnerability is exploited, an attacker who can log in to a Windows system on which the affected product is installed may execute arbitrary code with SYSTEM privilege...

CVE-2026-18263

Parallels RAS Client RDP Backend Service Exposed Dangerous Function Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Parallels RAS Client. An attacker must first obtain the ability to execute low-privileged cod...

CVE-2026-13121

Parallels RAS Client RDP Backend Service Exposed Dangerous Function Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Parallels RAS Client. An attacker must first obtain the ability to execute low-privileged cod...

CVE-2026-16157 Duplicati backup software v2.3.0.1 is vulnerable to an incorrect permission assignment vulnerability

Duplicati v2.3.0.1 backup software gives Authenticated Users MODIFY permissions that propagate to all subdirectories. Installing the software outside of the Program Files directory, or on a custom path, creates a LocalSystem service running from a directory that any standard local user can write...

MINI-X7XM-W8Q8-5R6P

Bulletin has no description...

CVE-2026-15380 Local privilege escalation in Symantec ITMS

A non-administrator interactive user can obtain full SYSTEM code execution through a DCOM/task scheduler logic chain — no network access, no memory corruption required ITMS 8.7.3...

CVE-2026-15380

A non-administrator interactive user can obtain full SYSTEM code execution through a DCOM/task scheduler logic chain — no network access, no memory corruption required ITMS 8.7.3...

EUVD-2026-45153

A non-administrator interactive user can obtain full SYSTEM code execution through a DCOM/task scheduler logic chain — no network access, no memory corruption required ITMS 8.7.3...

CVE-2026-15380 Local privilege escalation in Symantec ITMS

A non-administrator interactive user can obtain full SYSTEM code execution through a DCOM/task scheduler logic chain — no network access, no memory corruption required ITMS 8.7.3...

CVE-2026-15684

Glarysoft Glary Utilities Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Glarysoft Glary Utilities. An attacker must first obtain the ability to execute low-privileged code on the target system...

CVE-2026-15684

CVE-2026-15684 affects Glarysoft Glary Utilities. The flaw resides in the Disk Clean functionality, where an attacker who can run low-privileged code can abuse a folder junction to delete arbitrary files, enabling a local privilege escalation to SYSTEM and potential arbitrary code execution. The ...

CVE-2026-57895

Incorrect default permissions issue exists in Pupsman versions prior to 3.9.0. An attacker can place a malicious executable in the installation folder, which results in arbitrary code execution with SYSTEM privilege...

CVE-2026-56437

Uncontrolled search path element issue exists in Pupsman versions prior to 3.9.0. If a crafted DLL file is placed in the same folder as the affected installer and the installer is executed, arbitrary code may be executed with SYSTEM privilege...

EUVD-2026-42165

Uncontrolled search path element issue exists in Pupsman versions prior to 3.9.0. If a crafted DLL file is placed in the same folder as the affected installer and the installer is executed, arbitrary code may be executed with SYSTEM privilege...