Lucene search
+L

64 matches found

Kitploit
Kitploit
added 2026/09/04 4:13 a.m.4 views

CVE-2025-21420-PoC

CVE-2025-21420 PoC Vulnerabilidad de Elevación de Privilegios en la Herramienta de Liberación de Espacio en Disco de Windows Hasta donde sé, aunque incompleto, este es el primer PoC para esta CVE. https://nvd.nist.gov/vuln/detail/CVE-2025-21420 https://vulners.com/cve/CVE-2025-21420 Encontramos u...

7.8CVSS7.7AI score0.03627EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/03 10:26 p.m.5 views

WFH

Windows Feature Hunter WFH Windows Feature Hunter WFH es un script de Python de prueba de concepto que utiliza Frida, un conjunto de herramientas de instrumentación dinámica, para ayudar a identificar potencialmente "vulnerabilidades" o "características" comunes en ejecutables de Windows. WFH...

5.8AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/03 5:29 p.m.7 views

Chimera

Chimera Unlea$ed Antecedentes de la Herramienta Aunque la carga lateral de DLL se puede usar con fines legítimos, como cargar las bibliotecas necesarias para que un programa funcione, también se puede usar con fines maliciosos. Los atacantes pueden usar la carga lateral de DLL para ejecutar códig...

6.4AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/03 1:25 a.m.5 views

CVE-2026-3796

CVE-2026-3796 En QAX Virus Removal, versión del 2025-10-22 y anteriores, el controlador afectado QKSecureIOImp.sys depende de la imagen del proceso llamador para determinar si se le permite comunicarse con el controlador mini filter. Los atacantes podrían suplantar la imagen de un proceso llamado...

7.8CVSS5.5AI score0.00215EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/01 5:54 a.m.4 views

NimDllSideload

Sideloading de DLL en Nim Este repositorio te permite generar fácilmente DLLs de Nim que puedes usar para sideloading/proxy loading. Si no estás familiarizado con lo que es el sideloading de DLL, échale un vistazo a esta entrada de blog. ¿Cómo uso esto? Pon la DLL legítima o varias DLLs a las que...

5.4AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/08/30 3:27 p.m.3 views

OneDriveUpdaterSideloading

Sideloading de DLL de OneDriveUpdater Este repositorio contiene el código fuente para el sideloading de DLL de version.dll para OneDriveUpdater.exe/OneDriveStandaloneUpdater.exe. El payload se basa en las subrutinas descritas en el artículo del blog de PaloAltoNetworks Unit42. Mi artículo de blog...

5.4AI score
SaveExploits0References3
NVD
NVD
added 2026/08/18 1:17 p.m.5 views

CVE-2026-59781

When Zabbix Agent was installed on Windows into a custom installation directory, the installer did not verify whether the selected directory had secure access permissions. If the target directory allowed unauthorized users to modify its contents, an attacker could place a malicious DLL that could...

5.4CVSS0.00113EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/08/18 12:21 p.m.24 views

CVE-2026-59781 Improper validation of custom installation directories on Windows could allow installation into locations with unsafe permissions, increasing the risk of DLL sideloading.

When Zabbix Agent was installed on Windows into a custom installation directory, the installer did not verify whether the selected directory had secure access permissions. If the target directory allowed unauthorized users to modify its contents, an attacker could place a malicious DLL that could...

5.4CVSS0.00113EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/08/18 12:21 p.m.9 views

EUVD-2026-60742

When Zabbix Agent was installed on Windows into a custom installation directory, the installer did not verify whether the selected directory had secure access permissions. If the target directory allowed unauthorized users to modify its contents, an attacker could place a malicious DLL that could...

5.4CVSS5.4AI score0.00113EPSS
SaveExploits0References1
CVE
CVE
added 2026/08/18 12:21 p.m.83 views

CVE-2026-59781

The Zabbix Agent Windows installer did not validate directory permissions during custom-path installation, allowing attackers to drop a malicious DLL that gets loaded by the agent, enabling arbitrary code execution. The fix detects unsafe directories and requires explicit user confirmation before...

5.4CVSS5.3AI score0.00113EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/08/18 12:00 a.m.19 views

PT-2026-76964

Name of the Vulnerable Software and Affected Versions Zabbix Agent affected versions not specified Description When installed on Windows in a custom directory, the installer fails to verify if the selected location has secure access permissions. This allows an attacker to place a malicious DLL in...

5.4CVSS5.3AI score0.00113EPSS
SaveExploits0References4
Trellix
Trellix
added 2026/08/13 12:00 a.m.20 views

Signed, sealed, injected: The mechanics of DCRat in 2026

Signed, sealed, injected: The mechanics of DCRat in 2026 By Madhini Muralidharan, Shalaka Patil and Kaushal Sarda · August 13, 2026 Introduction In early 2026, the Trellix Advanced Research Center ARC identified and analyzed an active DarkCrystal RAT DCRat campaign following a critical customer...

6.3AI score
SaveExploits0
The Hacker News
The Hacker News
added 2026/07/23 12:20 p.m.23 views

China-Nexus JadeProx Uses New TriBack Loader in Government and Healthcare Attacks

An exposed Alibaba Cloud server has revealed a China-nexus operation that Group-IB tracks as JadeProx. The cluster has targeted government, healthcare, and education organizations across Asia and Latin America with a previously undocumented Windows loader called TriBack Loader. Group-IB found the...

5.6AI score
SaveExploits0
The Hacker News
The Hacker News
added 2026/07/06 10:58 a.m.28 views

Suspected China-Nexus Hackers Use Fake Indian Tax Filing Utility to Deploy DcRAT

A suspected China-nexus threat activity cluster has been observed targeting Indian taxpayers, tax professionals, and corporate finance teams to deliver a remote access trojan designed to steal sensitive data from compromised hosts. The multi-stage campaign, codenamed Operation DragonReturn by...

6.2AI score
SaveExploits0
GithubExploit
GithubExploit
added 2026/04/14 12:45 p.m.130 views

Windows-privilege-exploits

Elevation !Windowshttps://img.shields.io/badge/platform-Wi...

5.8AI score
SaveExploits0
RedhatCVE
RedhatCVE
added 2026/03/26 3:00 p.m.19 views

CVE-2026-33156

ScreenToGif is a screen recording tool. In versions from 2.42.1 and prior, ScreenToGif is vulnerable to DLL sideloading via version.dll . When the portable executable is run from a user-writable directory, it loads version.dll from the application directory instead of the Windows System32...

7.8CVSS6.4AI score0.00224EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2026/03/20 8:29 p.m.32 views

CVE-2026-33156 DLL Sideloading in ScreenToGif

ScreenToGif is a screen recording tool. In versions from 2.42.1 and prior, ScreenToGif is vulnerable to DLL sideloading via version.dll . When the portable executable is run from a user-writable directory, it loads version.dll from the application directory instead of the Windows System32...

7.8CVSS0.00224EPSS
SaveExploits1References1
CVE
CVE
added 2026/03/20 8:29 p.m.25 views

CVE-2026-33156

CVE-2026-33156 affects ScreenToGif (portable versions up to 2.42.1). The flaw is DLL sideloading through version.dll: when run from a user-writable directory, the executable loads version.dll from its own directory instead of Windows System32, enabling arbitrary code execution in the user’s conte...

7.8CVSS6.4AI score0.00224EPSS
SaveExploits1References1Affected Software1
The Hacker News
The Hacker News
added 2026/01/20 1:46 p.m.16 views

Hackers Use LinkedIn Messages to Spread RAT Malware Through DLL Sideloading

Cybersecurity researchers have uncovered a new phishing campaign that exploits social media private messages to propagate malicious payloads, likely with the intent to deploy a remote access trojan RAT. The activity delivers "weaponized files via Dynamic Link Library DLL sideloading, combined wit...

6.2AI score
SaveExploits0
RedhatCVE
RedhatCVE
added 2026/01/09 10:54 a.m.18 views

CVE-2022-23748

mDNSResponder.exe is vulnerable to DLL Sideloading attack. Executable improperly specifies how to load the DLL, from which folder and under what conditions. In these scenarios, a malicious attacker could be using the valid and legitimate executable to load malicious files...

7.8CVSS6.7AI score0.09092EPSS
SaveExploits0References1
Rows per page
Query Builder