Dell UnityVSA < 5.5 - Remote Command Injection

Dell Unity, versions 5.5 and prior, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. id: CVE-2025-36604 info: name: Dell UnityVSA 5.5 - Remote Command Injection author: DhiyaneshDK,watchtowr severity: critical description: | Dell...

Dell-Driver-EoP-CVE-2021-21551

Dell Driver EoP CVE-2021-21551 楽しいので、Dell ドライバのバグ CVE-2021-21551 の簡単なエクスプロイトを作成しました。素晴らしい発見は @kasifdekel によるものです。解析記事は こちら で見られます。このエクスプロイトは Windows バージョン 1809 および 20H2 でテストされています。トークンオフセットは他のバージョンでは異なる可能性があります。...

cve-2018-1207

cve-2018-1207 iDRAC 7 & 8 ファームウェア 2.52.52.52 を悪用する 説明 Dell EMC iDRAC7/iDRAC8（バージョン2.52.52.52未満）にはCGIインジェクションの脆弱性が存在し、リモートコード実行に悪用される可能性があります。リモートの認証されていない攻撃者がCGI変数を使用してリモートコードを実行できる可能性があります。 このコードにより、iDRACサービスがrootユーザーとしてリバースシェルを開くようになります。 使用方法 ローカルリスナーを起動: nc -v -l -p localport nc -v -l -p 5500...

CVE-2021-21551

CVE-2021-21551 CVE-2021-21551 の SYSTEM への権限昇格エクスプロイト SeImpersonatePrivileges を使用した SpoolPrinter の権限昇格は、@ForrestOrr のおかげで実現しました。https://github.com/forrest-orr/DoubleStar/tree/main/Payloads/Source/Stage3SpoolPotato 私は基本的に彼のコードにエクスプロイト関数を放り込み、ごくわずかに変更しただけです。 NtQuerySystemInformation は @VoidSec の...

CVE-2019-3719

Dell SupportAssist RCE 概念実証 これは CVE-2019-3719 の概念実証ソースコードです。この脆弱性は、ほぼすべての Dell マシンに影響し、リモートコード実行を可能にしていました。 使用方法 python3 main.py Interface Name Victim IP Gateway IP Payload Filename...

CVE-2021-21551

CVE-2021-21551 Dellのdbutil23ドライバを悪用するPoC。HVCIが無効になっているシステムでコード実行を実現します（下図参照）： 出力： このコードの解説はこちら：https://ch3rn0byl.com/2021/05/a-dell-cve-2021-21551/...

Dell iDRAC7/8 Devices - Remote Code Injection

Dell EMC iDRAC7/iDRAC8, versions prior to 2.52.52.52, contain a CGI injection vulnerability which could be used to execute remote code. A remote unauthenticated attacker may potentially be able to use CGI variables to execute remote code. id: CVE-2018-1207 info: name: Dell iDRAC7/8 Devices - Remo...

CVE-2021-21551

CVE-2021-21551 通过启动系统命令来利用CVE-2021-21551进行本地权限提升（LPE）的简单PoC。 https://vulners.com/cve/CVE-2021-21551 在签名的戴尔Windows驱动程序（dbutil23.sys）中发现了一个问题，可能导致整个本地系统被攻陷。该驱动程序的ioctl调度例程缺乏对用户提供的缓冲区的验证。 IOCTL 任何人都可以创建句柄并向这些ioctl代码发出ioctl请求，从而破坏Windows安全模型： 0x9b0c1f40 - 任意物理内存读取 0x9b0c1f44 - 任意物理内存写入 0x9b0c1ec4 -...

CVE-2026-82164

Dell Trusted Device Client, versions prior to 8.1.359.0, contain an Incorrect Permission Assignment for Critical Resource vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information tampering...

CVE-2026-81455

Dell ThinOS 10, versions prior to SecurityAddon2605.10.2766T10, contain a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access...

CVE-2026-81473

Dell Rugged Control Center RCC, versions prior to 5.2.206, contain an Improper Authorization vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges...

CVE-2026-82157

Dell ThinOS 10, versions prior to SecurityAddon2605.10.2766T10, contains an Improper Certificate Validation vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Protection mechanism bypass and Unauthorized access...

CVE-2026-56792

Dell Rugged Control Center RCC, versions prior to 5.2.206, contain an Improper Authorization vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges...

EUVD-2026-86407

Dell Trusted Device Client, versions prior to 8.1.359.0, contain an Incorrect Permission Assignment for Critical Resource vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information tampering...

CVE-2026-82164

Dell Trusted Device Client versions prior to 8.1.359.0 are vulnerable to an Incorrect Permission Assignment for Critical Resource vulnerability. A low privileged attacker with local access could potentially exploit this flaw to cause Information tampering . No specific exploit details or in-the-w...

CVE-2026-82164

Dell Trusted Device Client, versions prior to 8.1.359.0, contain an Incorrect Permission Assignment for Critical Resource vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information tampering...

EUVD-2026-86402

Dell Rugged Control Center RCC, versions prior to 5.2.206, contain an Improper Authorization vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges...

CVE-2026-56792

Dell Rugged Control Center RCC, versions prior to 5.2.206, contain an Improper Authorization vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges...

CVE-2026-56792

Versions prior to 5.2.206 of Dell Rugged Control Center (RCC) are affected by an Improper Authorization vulnerability. A low privileged attacker with local access could potentially exploit this flaw to achieve Elevation of Privileges . No specific exploitation details or exploit links are provide...

CVE-2026-81473

Versions prior to 5.2.206 of Dell Rugged Control Center (RCC) are affected by an Improper Authorization vulnerability. A low-privileged attacker with local access could exploit this flaw to achieve Elevation of Privileges . While specific technical details regarding the root cause are not provide...