The vulnerability of the CSC Service in Windows operating systems allows attackers to escalate their privileges.

The vulnerability of the CSC Service for Windows operating systems is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges...

CVE-2021-1652

Windows CSC Service Elevation of Privilege Vulnerability...

PT-2021-1605 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to errors in privilege management within the Windows operating system's CSC service. It allows an attacker to potentially elevate their privileges, affecting the system...

PT-2021-1601 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to errors in privilege management within the Windows CSC service, allowing an attacker to potentially elevate their privileges. This could affect the system, enabling t...

Trojan.Win32.Bayrob.cgau Insecure Permissions / Privilege Escalation

Discovery / credits: malvuln - Malvuln.com c 2021 Original source: http://malvuln.com/advisory/099a169f81089dc493ea300ef0309f70.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Trojan.Win32.Bayrob.cgau Vulnerability: Insecure Permissions EoP SYSTEM Description: Change permissio...

KMSpico (Service KMSELDI) 17.1.0.0 - Unquoted Service Path Vulnerability

Exploit Title: KMSpico 17.1.0.0 - 'Service KMSELDI' Unquoted Service Path Exploit Author : SamAlucard Vendor : KMSpico Version : ServiceKMS 17.1.0.0 Vendor Homepage : https://official-kmspico.com/ Tested on OS: Windows 7 Pro Analyze PoC : ============== C:\sc qc "Service KMSELDI" SC...

Vulnerabilities of operating systems tvOS, iOS, iCloud for Windows service, Safari browser, and iTunes multimedia player, related to the use of memory after its release, allowing attackers to execute arbitrary code.

Vulnerabilities of operating systems such as tvOS and iOS, the iCloud for Windows service, the Safari browser, and the multimedia player iTunes are related to the use of memory after it is freed. Exploiting these vulnerabilities can allow a malicious actor to execute arbitrary code remotely...

shadowbroker

This repository, xyx2524/shadowbroker, contains a collection of exploits and tools for various vulnerabilities. The repository includes a README file that links to a Steemit post and an archive of a GitHub repository, misterch0c/shadowbroker. The post and repository contain information on a group...

CVE-2020-7327

Improperly implemented security check in McAfee MVISION Endpoint Detection and Response Client MVEDR prior to 3.2.0 may allow local administrators to execute malicious code via stopping a core Windows service leaving McAfee core trust component in an inconsistent state resulting in MVEDR failing...

CVE-2020-7327

Improperly implemented security check in McAfee MVISION Endpoint Detection and Response Client MVEDR prior to 3.2.0 may allow local administrators to execute malicious code via stopping a core Windows service leaving McAfee core trust component in an inconsistent state resulting in MVEDR failing...

CVE-2020-7326

Improperly implemented security check in McAfee Active Response MAR prior to 2.4.4 may allow local administrators to execute malicious code via stopping a core Windows service leaving McAfee core trust component in an inconsistent state resulting in MAR failing open rather than closed...

Design/Logic Flaw

Improperly implemented security check in McAfee Active Response MAR prior to 2.4.4 may allow local administrators to execute malicious code via stopping a core Windows service leaving McAfee core trust component in an inconsistent state resulting in MAR failing open rather than closed...

Design/Logic Flaw

Improperly implemented security check in McAfee MVISION Endpoint Detection and Response Client MVEDR prior to 3.2.0 may allow local administrators to execute malicious code via stopping a core Windows service leaving McAfee core trust component in an inconsistent state resulting in MVEDR failing...

CVE-2020-7327 McAfee MVEDR - Improperly implemented security check

Improperly implemented security check in McAfee MVISION Endpoint Detection and Response Client MVEDR prior to 3.2.0 may allow local administrators to execute malicious code via stopping a core Windows service leaving McAfee core trust component in an inconsistent state resulting in MVEDR failing...

CVE-2020-7327

The CVE-2020-7327 entry affects McAfee MVISION Endpoint Detection and Response Client (MVEDR) prior to version 3.2.0. The root cause is an improperly implemented security check that can let local administrators run malicious code by stopping a core Windows service, which leaves the McAfee core tr...

CVE-2020-7327

Improperly implemented security check in McAfee MVISION Endpoint Detection and Response Client MVEDR prior to 3.2.0 may allow local administrators to execute malicious code via stopping a core Windows service leaving McAfee core trust component in an inconsistent state resulting in MVEDR failing...

The vulnerability of the CSC Service in Windows operating systems allows attackers to escalate their privileges.

The vulnerability of the CSC Service for Windows operating systems is related to incorrect handling of objects in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...

CVE-2020-24574

The client aka GalaxyClientService.exe in GOG GALAXY through 2.0.41 as of 12:58 AM Eastern, 9/26/21 allows local privilege escalation from any authenticated user to SYSTEM by instructing the Windows service to execute arbitrary commands. This occurs because the attacker can inject a DLL into...

CVE-2020-24574

The client aka GalaxyClientService.exe in GOG GALAXY through 2.0.41 as of 12:58 AM Eastern, 9/26/21 allows local privilege escalation from any authenticated user to SYSTEM by instructing the Windows service to execute arbitrary commands. This occurs because the attacker can inject a DLL into...

CVE-2020-24574

CVE-2020-24574 affects GOG GALAXY up to version 2.0.41. The vulnerability arises in GalaxyClientService.exe via DLL injection into GalaxyClient.exe, defeating the TCP-based trusted-client protection and enabling local privilege escalation from an authenticated user to SYSTEM. Multiple sources (NV...