995 matches found
Citrix_Secure_Access_LPE_0DAY
Citric Secure Access: локальное повышение привилегий Я обнаружил уязвимость локального повышения привилегий в Windows-клиенте Citrix Secure Access. Данная уязвимость позволяет привилегированному администратору внедрить вредоносную нагрузку для получения привилегий NT Authority. Затронутые версии...
raven
Raven Внешний C2 для CobaltStrike поверх Websockets Дополнительная информация: https://www.cobaltstrike.com/help-externalc2 Сборка сервера Ubuntu Скопируйте папку сервера на ваш VPS. Запустите ./setup.sh от имени root или через sudo Сборка клиента Windows Скопируйте папку клиента на хост разработ...
GlobalUnProtect
GlobalUnProtect PoC-инструмент для расшифровки и сбора конфигурации GlobalProtect, файлов cookie и HIP-файлов из клиентских установок Windows. Статья в блоге: https://rotarydrone.medium.com/4a1d8fc7773e Использование Запускается как автономный инструмент или в памяти через execute-assembly или...
CVE-2026-3502-Scanner---TrueConf-Vulnerability-Detection-Tool
🔍 CVE-2026-3502 Scanner — инструмент обнаружения уязвимости TrueConf ⚠️ ПРЕДУПРЕЖДЕНИЕ Только для образовательных целей и авторизованного тестирования. 📋 Описание Инструмент обнаружения для CVE-2026-3502. Сканирует серверы TrueConf без проверки обновлений, обнаруживает уязвимые клиенты Windows...
CVE-2020-5752-Druva-inSync-Windows-Client-6.6.3---Local-Privilege-Escalation-PowerShell-
CVE-2020-5752: Druva-inSync-Windows-Client-6.6.3---Local-Privilege-Escalation-PowerShell- Druva inSync Windows Client 6.6.3 - 로컬 권한 상승 PowerShell 시스템 권한으로 리버스 셸을 얻도록 수정됨...
CVE-2026-84386
A unverified ownership vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.7, FortiClientWindows 7.2 all versions may allow attacker to improper access control via via an exposed minifilter communication port...
PT-2026-87178
A unverified ownership vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.7, FortiClientWindows 7.2 all versions may allow attacker to improper access control via...
PALLET CONTROL products vulnerable to improper access control
Overview PALLET CONTROL products provided by JAL Digital Co.,Ltd. include multiple service programs that run in the background and provide certain functions. However, access to these service programs is not properly restricted, allowing non-administrative users to access them. Improper access...
UBUNTU-CVE-2026-68579
FreeRDP before 3.30.0 = 3.29.0 contains a heap-based buffer overflow in the Windows clipboard client's CliprdrStreamRead function client/Windows/wfcliprdr.c. When an OLE paste consumer e.g. explorer.exe calls IStream::Read with a fixed-size buffer of cb bytes, CliprdrStreamRead requests file...
CVE-2026-67305
FreeRDP Windows client before 3.29.0 contains a heap buffer overflow vulnerability in the clipboard virtual channel when processing CLIPRDRFILECONTENTSRESPONSE PDUs without validating the server-provided size against the destination buffer. A malicious RDP server can send a response with a data...
EUVD-2026-51862
FreeRDP Windows client before 3.29.0 contains a heap buffer overflow vulnerability in the clipboard virtual channel when processing CLIPRDRFILECONTENTSRESPONSE PDUs without validating the server-provided size against the destination buffer. A malicious RDP server can send a response with a data...
CVE-2026-67305
FreeRDP Windows client before 3.29.0 contains a heap buffer overflow vulnerability in the clipboard virtual channel when processing CLIPRDRFILECONTENTSRESPONSE PDUs without validating the server-provided size against the destination buffer. A malicious RDP server can send a response with a data...
CVE-2026-67305
FreeRDP Windows client (before 3.29.0) has a heap buffer overflow in the clipboard virtual channel (CLIPRDR_FILE_CONTENTS_RESPONSE PDUs) due to lack of validation of the server-provided size against the destination buffer. A malicious RDP server could send a payload larger than requested, causing...
PT-2026-67285
Name of the Vulnerable Software and Affected Versions FreeRDP Windows client versions prior to 3.29.0 Description A heap buffer overflow occurs in the clipboard virtual channel when processing CLIPRDR FILE CONTENTS RESPONSE PDUs Protocol Data Units because the server-provided size is not validate...
CVE-2026-53410
CVE-2026-53410 describes a TOCTOU race condition in the installation and uninstallation flow of certain Zoom Clients for Windows that could allow an authenticated local user to escalate privileges. Affected components include Zoom Workplace for Windows, Zoom Workplace VDI Client, Zoom Workplace V...
CVE-2026-40952
CVE-2026-40952 is a privilege misconfiguration in the Secure Access installer for the Windows client and server prior to version 14.55. Attackers with local access to the client or server can use it to elevate privileges to Administrator when Secure Access is installed in a non-default location...
CVE-2026-40952 Privilge misconfiguration in Secure Access installers
CVE-2026-40952 is a privilege misconfiguration in the Secure Access installer for the Windows client and server prior to version 14.55. Attackers with local access to the client or server can use it to elevate privileges to Administrator when Secure Access is installed in a non-default location...
CVE-2026-40952: Incorrect Default Permissions
CVE-2026-40952 is a privilege misconfiguration in the Secure Access installer for the Windows client and server prior to version 14.55. Attackers with local access to the client or server can use it to elevate privileges to Administrator when Secure Access is installed in a non-default location...
