CVE-2014-7911-CVE-2014-4322_get_root_privilege

CVE-2014-7911poc Эксплойт для получения root-доступа локально на Nexus5 с Android 4.4.4 KTU8P автор: andy веб-сайт: https://blog.csdn.net/koozxcv как собрать Импортируйте проект в Eclipse и соберите. информация об уязвимости http://seclists.org/fulldisclosure/2014/Nov/51 анализ...

CVE-2022-35841

CVE-2022-35841 Это лишь небольшая заметка с теорией, так как этот баг был обнаружен, и я так и не дошел до его полноценного тестирования. EnterpriseAppMgmtSvc — это интересный сервис, реализующий COM-объекты. Похоже, он ведет свое начало с Windows Phone, и действительно, большинство...

acheron

About Acheron is a library inspired by SysWhisper3/FreshyCalls/RecycledGate, with most of the functionality implemented in Go assembly. acheron package can be used to add indirect syscall capabilities to your Golang tradecraft, to bypass AV/EDRs that makes use of usermode hooks and instrumentatio...

CVE-2019-6329

Локальное повышение привилегий в HP Support Assistant Ошибка локального повышения привилегий в HP Support Assistant с помощью жесткой ссылки Исследователь: ManhNDd из Bkav Описание В HP Support Assistant GUI , когда вы нажимаете Check for updates and messages , служба HP Support Solution Framewor...

CVE-2014-7911_poc

CVE-2014-7911poc Локальный root-эксплойт для Nexus5 Android 4.4.4KTU8P автор: retme [email protected] @returnsme в twitter & @retme в weibo веб-сайт: retme.net как собрать Импортируйте проект в Eclipse и соберите. ./cve20147911/assets/msmattack это бинарный файл эксплойта CVE-2014-4322.Вы...

CVE-2026-76699

A buffer overflow vulnerability exists in a system service within the underlying operating system of HPE Networking EdgeConnect SD-WAN Gateways that could allow an unauthenticated adjacent attacker to cause a denial-of-service. Successful exploitation could allow an attacker to crash the impacted...

CVE-2026-76699

CVE-2026-76699 is a buffer overflow in a system service within the underlying operating system of HPE Networking EdgeConnect SD-WAN Gateways . An unauthenticated adjacent attacker with high attack complexity can crash the service, causing temporary disruption to network operations. The CVSS 3.1 s...

EUVD-2026-79225

A buffer overflow vulnerability exists in a system service within the underlying operating system of HPE Networking EdgeConnect SD-WAN Gateways that could allow an unauthenticated adjacent attacker to cause a denial-of-service. Successful exploitation could allow an attacker to crash the impacted...

Astra Linux – Vulnerability in Keepalived

In Keepalived versions up to 2.2.4, the D-Bus mechanism does not sufficiently restrict the destination of messages, allowing any user to inspect and manipulate any property. This leads to bypasses of access controls in certain situations, where a unrelated D-Bus system service has a settable...

omapi-cve-2015-6606-exploit

Простой эксплойт для проверки CVE-2015-6606 Это простой эксплойт для проверки уязвимости внедрения кода, существующей в службе смарт-карт SEEK версий 3.1.0 и ниже CVE-2015-6606, внутренний номер бага Google ANDROID-22301786. Уязвимость позволяет специально созданным пакетам приложений Android...

CVE-2026-7791

CVE-2026-7791 PoC: Привилегированный по умолчанию Исследовательское доказательство концепции для локального повышения привилегий в Amazon WorkSpaces TOCTOU + запись произвольных файлов на уровне SYSTEM в Skylight Workspace Config Service. Полные технические подробности: блог Cymulate | ---|--- CV...

Astra Linux – Vulnerability in glib2.0

A issue was discovered in GNOME GLib before version 2.78.5, and also in versions 2.79.x and 2.80.x before 2.80.1. When a GDBus-based client subscribes to signals from a trusted system service such as NetworkManager on a shared computer, other users of the same computer can send spoofed D-Bus...

CVE-2026-50544

NortheBridge/luminalshine is a Sunshine-compatible game stream host for Moonlight. Prior to version 26.05.0-rc4, a latent gap exists on a default install, the file at src/platform/windows/misc.cpp lives at C:\ProgramData\LuminalShine\config\apps.json and is created by the SYSTEM service. Under...

CVE-2026-50544 NortheBridge/luminalshine has Incorrect Permission Assignment for Critical Resource and Creation of Temporary File in Directory with Insecure Permissions

NortheBridge/luminalshine is a Sunshine-compatible game stream host for Moonlight. Prior to version 26.05.0-rc4, a latent gap exists on a default install, the file at src/platform/windows/misc.cpp lives at C:\ProgramData\LuminalShine\config\apps.json and is created by the SYSTEM service. Under...

CVE-2026-50544

NortheBridge/luminalshine is a Sunshine-compatible game stream host for Moonlight. Prior to version 26.05.0-rc4, a latent gap exists on a default install, the file at src/platform/windows/misc.cpp lives at C:\ProgramData\LuminalShine\config\apps.json and is created by the SYSTEM service. Under...

EUVD-2026-57698

NortheBridge/luminalshine is a Sunshine-compatible game stream host for Moonlight. Prior to version 26.05.0-rc4, a latent gap exists on a default install, the file at src/platform/windows/misc.cpp lives at C:\ProgramData\LuminalShine\config\apps.json and is created by the SYSTEM service. Under...

CVE-2026-50544 NortheBridge/luminalshine has Incorrect Permission Assignment for Critical Resource and Creation of Temporary File in Directory with Insecure Permissions

NortheBridge/luminalshine is a Sunshine-compatible game stream host for Moonlight. Prior to version 26.05.0-rc4, a latent gap exists on a default install, the file at src/platform/windows/misc.cpp lives at C:\ProgramData\LuminalShine\config\apps.json and is created by the SYSTEM service. Under...

CVE-2026-14479

A maliciously crafted input, when processed by the Autodesk Installer IPC frame parser, may trigger improper validation of an input-specified position or offset, resulting in an out-of-range substring operation. A malicious actor may leverage this vulnerability to cause the NT AUTHORITY\SYSTEM...

CVE-2026-14479

CVE-2026-14479 affects the Autodesk Installer IPC frame parser. A maliciously crafted input can cause improper validation of an input-specified position or offset, producing an out-of-range substring operation. The resulting condition may cause the NT AUTHORITY\SYSTEM service to terminate, yieldi...

CVE-2026-14479 Denial of Service in Autodesk Installer IPC Channel

A maliciously crafted input, when processed by the Autodesk Installer IPC frame parser, may trigger improper validation of an input-specified position or offset, resulting in an out-of-range substring operation. A malicious actor may leverage this vulnerability to cause the NT AUTHORITY\SYSTEM...