231 matches found
CVE-2023-27326
Parallels Desktop 虚拟机逃逸 本仓库包含针对 Parallels Desktop 漏洞（已分配编号 CVE-2023-27326）的漏洞利用代码。该漏洞允许本地攻击者在受影响的 Parallels Desktop 安装上提升权限。 该漏洞利用已在 Parallels Desktop 18.0.0 53049 版本上测试通过，该漏洞已在 18.1.1 53328 版本的安全更新中修复。 漏洞详情 具体缺陷存在于 Toolgate 组件中。问题源于在文件操作中使用用户提供的路径之前，未对其进行正确的验证。攻击者可利用此漏洞提升权限，并在主机系统上以当前用户的身份执行任意代码...
parallels-plist-escape
parallels-plist-escape 本仓库包含针对 CVE-2023-27327 和 CVE-2023-27328 的漏洞利用代码，它们可以组合使用，在 Parallels Desktop 18.1.1 之前版本中逃逸 Parallels Desktop 虚拟机。 它还包含一个所需内核模块的代码，位于 prlmod 中，该模块可利用在 /proc/driver/prltgpwn 创建的 proc 条目，从用户态发送任意 Toolgate 请求（ opcode 0x8000）。 要求 来宾系统（guest）中拥有 root 权限，以便加载内核模块 已安装 Parallels...
CVE-2023-27326
Parallels Desktop 虚拟机逃逸 该仓库包含针对 Parallels Desktop 漏洞（编号 CVE-2023-27326）的利用代码。此漏洞允许本地攻击者在受影响的 Parallels Desktop 安装实例中提升权限。 该利用代码已在 Parallels Desktop 18.0.0 53049 版本上测试通过，该漏洞已在 18.1.1 53328 安全更新 中被修复。 漏洞详情 具体缺陷存在于 Toolgate 组件中。问题源于在使用用户提供的路径进行文件操作之前，缺乏对路径的正确验证。攻击者可利用此漏洞提升权限，并在主机系统上当前用户的上下文中执行任意代码。...
CVE-2021-27260
This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desktop 16.0.1-48919. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw...
CVE-2021-31417
This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desktop 15.1.4-47270. An attacker must first obtain the ability to execute low-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw...
CVE-2021-31418
This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desktop 15.1.4-47270. An attacker must first obtain the ability to execute low-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw...
CVE-2021-31423
This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desktop 15.1.5-47309. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw...
CVE-2021-27242
This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.0.1-48919. An attacker must first obtain the ability to execute low-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within...
CVE-2021-27259
This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.0.1-48919. An attacker must first obtain the ability to execute low-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within...
EUVD-2021-21502
Malware in sbrugna...
EUVD-2021-21514
Malware in sbrugna...
EUVD-2021-21504
Malware in sbrugna...
EUVD-2021-21515
Malware in sbrugna...
EUVD-2021-14008
Malware in sbrugna...
EUVD-2021-14009
Malware in sbrugna...
EUVD-2021-14007
Malware in sbrugna...
EUVD-2021-18320
Malware in sbrugna...
EUVD-2021-18323
Malware in sbrugna...