92 matches found
CVE-2016-6914-UniFiVideo-LPE
CVE-2016-6914 - Ubiquiti UniFi Video 3.7.3 LPE PoC 🔥 개요 이 저장소는 Ubiquiti UniFi Video 3.7.3 에 영향을 미치는 로컬 권한 상승LPE 취약점인 CVE-2016-6914 에 대한 개념 증명PoC을 포함합니다. 낮은 권한 을 가진 공격자는 C:\ProgramData\unifi-video\ 안에 있는 신뢰할 수 있는 바이너리taskkill.exe를 교체하여 SYSTEM 권한으로 악성 코드 를 실행할 수 있습니다. ⚡ 익스플로잇 악용 단계 1️⃣ taskkill.exe를...
CVE-2025-56503
CVE-2025-56503 설명 Sublime HQ Pty Ltd의 Sublime Text 4 4200에서 인증된 저권한 공격자가 설치 폴더의 제거 파일을 조작된 바이너리로 교체하여 Administrator로 권한을 상승시킬 수 있는 문제가 발견되었습니다. 영향받는 제품 Sublime Text 4, 버전 4200 제품: Seagate Toolkit 플랫폼: Windows 버전: 4200 공격 유형: 로컬 영향:로컬 권한 상승 발견자...
CVE-2019-5736
CVE-2019-5736 参考：cve-2019-5736-poc 1. stage2.cve の poc コマンドを編集する 2. Docker イメージをビルドする docker build -t cve . 3. Docker を実行する docker run -d cve /bin/bash -c "tail -f /dev/null" 4. docker-runc をバックアップする cp /usr/bin/docker-runc /usr/bin/docker-runc.bak 5. docker exec -it docker-id /bin/bash 6. run.sh...
CVE-2026-78604 Incorrect Permission Assignment for Critical Resource in Elastic Agent Leading to Local Privilege Escalation to SYSTEM
Incorrect Permission Assignment for Critical Resource CWE-732 in Elastic Agent can lead to local privilege escalation via Replace Binaries CAPEC-642. On Windows systems where Elastic Agent is installed in unprivileged mode, resources used by the agent service are created with access controls...
EUVD-2026-70057
Incorrect Permission Assignment for Critical Resource CWE-732 in Elastic Agent can lead to local privilege escalation via Replace Binaries CAPEC-642. On Windows systems where Elastic Agent is installed in unprivileged mode, resources used by the agent service are created with access controls...
CVE-2021-4480
Dräger Protector Software prior to version 6.4.2 contains a local privilege escalation vulnerability due to insecure file system permissions that allows local attackers to execute arbitrary code with elevated privileges. Attackers can replace binaries or loaded modules on the host system to execu...
CVE-2021-4480
CVE-2021-4480 affects Dräger Protector Software prior to version 6.4.2. The issue is a local privilege escalation caused by insecure file system permissions that allow a local attacker to replace binaries or loaded modules and execute code with NT SYSTEM privileges. The description does not speci...
EUVD-2026-32900
An issue was discovered in Canonical Multipass for macOS before version 1.16.3 due to an incomplete fix for CVE-2025-5199. While the patch in version 1.16.0 updated the ownership of the multipassd daemon binary to root:wheel, five co-located binaries multipass, qemu-img, qemu-system-aarch64,...
CVE-2026-6499
Incorrect Permission Assignment for Critical Resource vulnerability in ILM Informatique OpenConcerto allows Replace Binaries. This issue affects OpenConcerto: 1.7.5...
EUVD-2026-26969
Incorrect Permission Assignment for Critical Resource vulnerability in ILM Informatique OpenConcerto allows Replace Binaries. This issue affects OpenConcerto: 1.7.5...
PT-2026-36807
Name of the Vulnerable Software and Affected Versions OpenConcerto version 1.7.5 Description Incorrect permission assignment for a critical resource allows the replacement of binaries. Recommendations At the moment, there is no information about a newer version that contains a fix for this...
CVE-2021-22038
On Windows, the uninstaller binary copies itself to a fixed temporary location, which is then executed the originally called uninstaller exits, so it does not block the installation directory. This temporary location is not randomized and does not restrict access to Administrators only so a...
CVE-2022-23334
The Robot application in Ip-label Newtest before v8.5R0 was discovered to use weak signature checks on executed binaries, allowing attackers to have write access and escalate privileges via replacing NEWTESTREMOTEMANAGER.EXE...
CVE-2025-14305: Incorrect Authorization
ListCheck.exe developed by Acer has a Local Privilege Escalation vulnerability. Authenticated local attackers can replace ListCheck.exe with a malicious executable of the same name, which will be executed by the system and result in privilege escalation...
CVE-2025-10639
The WorkExaminer Professional server installation comes with an FTP server that is used to receive the client logs on TCP port 12304. An attacker with network access to this port can use weak hardcoded credentials to login to the FTP server and modify or read data, log files and gain remote code...
EUVD-2020-18762
Malware in sbrugna...
EUVD-2020-9334
Malware in sbrugna...
EUVD-2020-18763
Malware in sbrugna...