CVE-2021-36934

CVE-2021-36934 CVE-2021-36934 Scripts de PowerShell Detection.ps1 Este es un script rápido y básico para comprobar si una máquina puede ser vulnerable. Escribe un mensaje en la shell indicando si se detectó BUILTIN\Users en la lista de permisos e incluye los permisos actuales en la ruta SAM para...

w11_shadow_copies

Copias de Sombra de Windows 11 En Windows 11, la herramienta integrada vssadmin puede listar, eliminar o redimensionar las Copias de Sombra, pero Microsoft eliminó la capacidad de crearlas. Sin embargo, aún se puede hacer interactuando directamente con la API del Servicio de Copias de Sombra de...

CVE-2021-36934

CVE-2021-36934 CVE-2021-36934 HiveNightmare vulnerability checker and workaround Flow The script has the following flow: Requires it to run with Administrator privileges Check Windows 10 version is affected by the vulnerability. IF affected by vulnerability: Show Windows version may be affected b...

PyNightmare

PyNightmare PoC para CVE-2021-36934, también conocido como HiveNightmare/SeriousSAM, escrito completamente en python3 Explicación CVE-2021-36934 es una vulnerabilidad descubierta recientemente por @jonasLyk que permite a usuarios no administradores copiar todos los subárboles del registro que...

oxide_hive

Oxide Hive An exploit for the HiveNightmare/SeriousSAM vulnerability that allows you to read registry hives containing sensitive data without admin privileges. If that doesn't sound like privilege escalation I don't know what does. Usage After building the exploit with cargo build and retrieving...

CVE-2021-36934

CVE descrito en MSRC. Remediado usando elementos de configuración de ECM también conocido como SCCM: Consulte los scripts de remediación y detección en el repositorio. El elemento de configuración realiza una verificación booleana de $false para el cumplimiento. Remediación En producción,...

CVE-2021-36934-HiveNightmare-Lab

CVE-2021-36934 HiveNightmare - Laboratorio Educativo 🎯 Objetivo Reproducir y analizar la vulnerabilidad HiveNightmare en un entorno de laboratorio controlado. 📋 Tabla de Contenidos Descripción de la Vulnerabilidad Implementación Demostración Configuración del Laboratorio y Herramientas Pasos de...

Astra Linux – Vulnerability in Linux 5.10, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Validated the box size for the snooped cursor. Invalid user-space DMA surface copies could potentially cause an overflow when copying data from the surface to the snooped image, leading to crashes. To address this...

Fedora 46 : libcupsfilters (2026-5cce49502a)

The remote Fedora 46 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-5cce49502a advisory. Automatic update for libcupsfilters-2.2.1-3.fc46. Changelog Fri Sep 4 2026 Zdenek Dohnal - 1:2.2.1-3 - fix multiple copies not working for raster drivers...

EUVD-2026-64553

In the Linux kernel, the following vulnerability has been resolved: xdp: reject clones that overrun skbsharedinfo tailroom xdpfclone clones broadcast copies into a single page and sets framesz to PAGESIZE. xdpbuildskbfromframe later treats that page like a normal XDP frame and expects the usual...

CVE-2026-63297: Time-of-check Time-of-use (TOCTOU) Race Condition

An authorization bypass vulnerability in LXD due to a timing flaw during configuration merging allows an authenticated attacker to bypass target project restrictions during cross-project instance copies. When copying an instance to a target project, LXD performs restriction checks before...

CVE-2026-54727

proot-distro is a utility for managing proot containers. Prior to version 5.1.6, proot-distro restore accepted hardlink entries whose linkname referenced another installed container and did not verify that the hardlink source container matched the destination container being restored, allowing a...

CVE-2026-51268

Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...

EUVD-2026-45636

In the Linux kernel, the following vulnerability has been resolved: netfs: Fix streaming write being overwritten In order to avoid reading whilst writing, netfslib will allow "streaming writes" in which dirty data is stored directly into folios without reading them first. Such folios are marked...

EUVD-2026-45005

An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2. The vacation "fcc" feature skips the destination-mailbox ACL. A user whose vacation Sieve script used :fcc to save a copy of the sent message could deliver vacation auto-reply copies into any mailbox the script could name,...

CVE-2026-47082

An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2. The vacation "fcc" feature skips the destination-mailbox ACL. A user whose vacation Sieve script used :fcc to save a copy of the sent message could deliver vacation auto-reply copies into any mailbox the script could name,...

UBUNTU-CVE-2026-47082

An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2. The vacation "fcc" feature skips the destination-mailbox ACL. A user whose vacation Sieve script used :fcc to save a copy of the sent message could deliver vacation auto-reply copies into any mailbox the script could name,...

CVE-2026-47082

An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2. The vacation "fcc" feature skips the destination-mailbox ACL. A user whose vacation Sieve script used :fcc to save a copy of the sent message could deliver vacation auto-reply copies into any mailbox the script could name,...

CVE-2026-47082

An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2. The vacation "fcc" feature skips the destination-mailbox ACL. A user whose vacation Sieve script used :fcc to save a copy of the sent message could deliver vacation auto-reply copies into any mailbox the script could name,...

CVE-2026-47082

An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2. The vacation "fcc" feature skips the destination-mailbox ACL. A user whose vacation Sieve script used :fcc to save a copy of the sent message could deliver vacation auto-reply copies into any mailbox the script could name,...