Lucene search
+L

1355 matches found

Kitploit
Kitploit
added 2026/09/13 2:35 a.m.7 views

HTB-NanoCorp-CVE-2024-0670

CVE-2024-0670 - Escalada de Privilegios en la Reparación MSI del Agente CheckMK NanoCorp HTB Este repositorio contiene un script de PowerShell utilizado para explotar CVE-2024-0670 en la máquina NanoCorp de Hack The Box. La vulnerabilidad permite a un usuario con pocos privilegios abusar de la...

8.8CVSS7.8AI score0.00332EPSS
SaveExploits5References1
Nuclei
Nuclei
added 2026/09/13 2:04 a.m.56 views

ShokoServer System - Local File Inclusion (LFI)

ShokoServer is a media server which specializes in organizing anime. In affected versions the /api/Image/WithPath endpoint is accessible without authentication and is supposed to return default server images. The endpoint accepts the parameter serverImagePath, which is not sanitized in any way...

8.6CVSS7.8AI score0.08147EPSS
SaveExploits1References2
Kitploit
Kitploit
added 2026/09/12 11:56 p.m.8 views

SetupHijack

SetupHijack Resumen SetupHijack es una herramienta de investigación de seguridad que explota condiciones de carrera y gestión insegura de archivos en procesos de instalación y actualización de Windows. Se dirige a escenarios donde instaladores o actualizadores privilegiados colocan archivos en...

5.9AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/12 12:49 p.m.6 views

CVE-2020-0683

CVE-2020-0683 Original Poc sent to MSRC. Assigned to CVE-2020-0683 - Windows Installer Elevation of Privilege https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2020-0683 Source code for Visual Studio C++ 2017 Please read the PDF that describes all the findings and steps to...

7.8CVSS7.4AI score0.07667EPSS
SaveExploits5
Kitploit
Kitploit
added 2026/09/12 8:19 a.m.6 views

CVE-2023-20178

CVE-2023-20178 Este es un PoC para la vulnerabilidad de eliminación arbitraria de archivos en Cisco Secure Client probado en 5.0.01242 y Cisco AnyConnect probado en 4.10.06079. Cuando un usuario se conecta a la VPN, el proceso vpndownloader.exe se inicia en segundo plano y creará un directorio en...

7.8CVSS7.4AI score0.05374EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/11 6:40 a.m.8 views

msi-search

MSI 검색 Windows는 문자와 숫자로 구성된 무작위 파일 이름에 ".msi" 확장자가 붙은 MSI 파일을 C:\Windows\Installer\에 캐시합니다. 이 도구는 레드 팀 운영자와 보안 팀이 어떤 MSI 파일이 어떤 소프트웨어에 해당하는지 식별하는 작업을 단순화하고, MSI 복구를 통한 로컬 권한 상승 취약점을 조사하기 위해 관련 파일을 다운로드할 수 있게 해줍니다. MSI 복구 취약점에 대한 자세한 내용은 타사 Windows Installer를 통한 권한 상승에서 확인하세요. 작성자: Andrew Oliveau...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/11 5:50 a.m.5 views

msiscan

MSI Analyzer This Python script for Linux can analyze Microsoft Windows .msi Installer files and point out potential vulnerabilites. It was developed by Michael Baer @derbaer0 in the SEC Consult Vulnerability Lab. Currently, it is mostly suited for a local privilege escalation also described in o...

7.8CVSS7.8AI score0.06263EPSS
SaveExploits2References1
NVD
NVD
added 2026/09/08 6:20 p.m.3 views

CVE-2026-77894

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Installer allows an authorized attacker to elevate privileges locally...

7CVSS0.00156EPSS
SaveExploits0References1
NVD
NVD
added 2026/09/08 6:20 p.m.7 views

CVE-2026-72929

Improper validation of integrity check value in Windows Installer allows an authorized attacker to elevate privileges locally...

7.8CVSS0.00219EPSS
SaveExploits0References1
NVD
NVD
added 2026/09/08 6:20 p.m.6 views

CVE-2026-71339

Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally...

6.7CVSS0.00332EPSS
SaveExploits0References1
NVD
NVD
added 2026/09/08 6:19 p.m.5 views

CVE-2026-69441

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Installer allows an authorized attacker to elevate privileges locally...

7CVSS0.00193EPSS
SaveExploits0References1
NVD
NVD
added 2026/09/08 6:17 p.m.5 views

CVE-2026-62694

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally...

7CVSS0.00252EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/09/08 5:17 p.m.4 views

EUVD-2026-73723

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Installer allows an authorized attacker to elevate privileges locally...

7CVSS0.00193EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/08 5:17 p.m.13 views

CVE-2026-69441

CVE-2026-69441 is a race condition vulnerability in Windows Installer , caused by concurrent execution using a shared resource with improper synchronization . An authorized attacker can exploit this to elevate privileges locally . The vulnerability is rated CVSS 7.0 (HIGH) with a local attack vec...

7CVSS0.00193EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/09/08 5:13 p.m.4 views

EUVD-2026-73283

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Installer allows an authorized attacker to elevate privileges locally...

7CVSS0.00156EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/08 5:13 p.m.16 views

CVE-2026-77894

CVE-2026-77894 is a local privilege escalation vulnerability in Windows Installer caused by a race condition — specifically, concurrent execution of a shared resource with improper synchronization. An authorized attacker with low privileges can exploit this to gain high integrity over confidentia...

7CVSS0.00156EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/08 5:12 p.m.10 views

CVE-2026-72929

CVE-2026-72929 is an elevation of privilege vulnerability in Windows Installer , caused by improper validation of an integrity check value . An authorized local attacker can exploit this to gain elevated privileges, with the CVSS 3.1 base score of 7.8 (HIGH) reflecting full impact on confidential...

7.8CVSS0.00219EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/09/08 5:12 p.m.5 views

EUVD-2026-73105

Improper validation of integrity check value in Windows Installer allows an authorized attacker to elevate privileges locally...

7.8CVSS0.00219EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/08 5:12 p.m.10 views

CVE-2026-71339

CVE-2026-71339 is a heap-based buffer overflow in Windows Installer that allows an authorized local attacker to elevate privileges . The CVSS 3.1 score is 6.7 (MEDIUM) with a vector of AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H, indicating that while high privileges are required, the impact on confident...

6.7CVSS0.00332EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/09/08 5:12 p.m.5 views

EUVD-2026-73097

Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally...

6.7CVSS0.00332EPSS
SaveExploits0References1
Rows per page
Query Builder