51 matches found
BadSamba
描述 此模块用于利用 Windows 组策略设置中的启动脚本执行， 这些脚本被配置为从远程 SMB 共享运行。 Windows 组策略可用于配置启动脚本，这些脚本将在操作系统每次开机时 执行，并以高权限账户 NT AUTHORITY/SYSTEM 运行。 如果攻击者能够执行流量操纵攻击，并在系统重启期间将流量重定向 到恶意 SMB 服务器，就有可能以 SYSTEM 账户 远程执行命令。 此模块接受所有形式的身份验证，无论是匿名、 域账户、空密码还是不存在的账户。它允许任何用户连接 到 SMB 服务器和共享。 它还会执行文件伪装，无论客户端原始请求的是哪个文件， 也无论客户端连接到哪个 S...
CVE-2026-69717
Untrusted pointer dereference in Windows Group Policy allows an authorized attacker to elevate privileges over a network...
CVE-2026-69717
CVE-2026-69717 is a privilege elevation vulnerability in Windows Group Policy caused by an untrusted pointer dereference . An authorized attacker with low privileges can exploit this over the network, with user interaction required, to gain high impact on confidentiality, integrity, and availabil...
EUVD-2026-73041
Untrusted pointer dereference in Windows Group Policy allows an authorized attacker to elevate privileges over a network...
Windows Group Policy Elevation of Privilege Vulnerability
Untrusted pointer dereference in Windows Group Policy allows an authorized attacker to elevate privileges over a network...
CVE-2026-50391
Improper privilege management in Windows Group Policy allows an authorized attacker to elevate privileges locally...
Windows Group Policy Elevation of Privilege Vulnerability
Improper privilege management in Windows Group Policy allows an authorized attacker to elevate privileges locally...
CVE-2026-50391: Improper Privilege Management
Improper privilege management in Windows Group Policy allows an authorized attacker to elevate privileges locally...
EUVD-2022-40600
Malicious code in bioql PyPI...
EUVD-2023-40809
Malicious code in bioql PyPI...
EUVD-2022-40599
Malicious code in bioql PyPI...
EUVD-2023-31983
Malicious code in bioql PyPI...
EUVD-2022-35411
Malicious code in bioql PyPI...
EUVD-2022-44330
Malicious code in bioql PyPI...
EUVD-2024-18372
Malicious code in bioql PyPI...
EUVD-2022-40562
Malicious code in bioql PyPI...
EUVD-2022-40582
Malicious code in bioql PyPI...
Privilege escalation
Windows Group Policy Elevation of Privilege Vulnerability...
Microsoft Windows Group Policy Security Vulnerability
Microsoft Windows is a suite of operating systems for use on personal devices from the U.S.-based Microsoft Corporation Microsoft. A security vulnerability exists in Microsoft Windows Group Policy. An attacker could exploit this vulnerability to gain elevated privileges. The following products an...
The vulnerability of the Windows Group Policy component of the operating system allows attackers to disclose sensitive information that is protected by this mechanism.
The vulnerability of the Windows Group Policy component of the operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker to disclose protected information...