CVE-2025-47987

CVE-2025-47987: Windows CredSSP विशेषाधिकार उन्नयन 📌 यस रिपोजिटरीमा CVE-2025-47987 भेद्यता, एक हीप-आधारित बफर ओभरफ्लो Heap-based Buffer Overflow जो Windows Credential Security Support Provider CredSSP प्रोटोकॉललाई प्रभावित गर्दछ, बारे दस्तावेज र विश्लेषण संसाधनहरू समावेश छन्। 📝 विवरण यस भेद्यताले...

CVE-2026-40369

هذه إعادة صياغة وملخص للتحليل الفني العام الذي نشره VoidSec حول CVE-2026-40369، مع إضافة مخطط انسيابي وملاحظات دفاعية لفهمي الشخصي. جميع التفاصيل التقنية الأساسية مأخوذة من بحثه. لم أجري هندسة عكسية مستقلة على هذا الخطأ البرمجي. CVE-2026-40369: تحليل دفاعي لبدائية الزيادة ذات الـ12 بايت في نواة...

cve-2020-1337-poc

cve-2020-1337-poc CVE-2020-1337 के लिए PoC Windows प्रिंट स्पूलर विशेषाधिकार उन्नयन उन सभी शोधकर्ताओं को श्रेय जिन्होंने इस बग का पता लगाया। संदर्भ: https://voidsec.com/cve-2020-1337-printdemon-is-dead-long-live-printdemon/ कोड यहाँ से लिया गया: https://github.com/sailay1996/WerTrigger...

CVE-2014-4076

CVE-2014-4076 PoC यह प्रमाण-अवधारणा सीधे इसके मूल पायथन संस्करण से कॉपी की गई है और C++ में फिर से लिखी गई है। निर्माण यह प्रोजेक्ट विज़ुअल स्टूडियो 2013 अपडेट 4 के साथ बनाया गया है। सूचना केवल वे उपयोगकर्ता जो प्रशासक समूह में हैं, डिवाइस खोल सकते हैं और IO नियंत्रण कर सकते हैं, जिसका अर्थ है शो...

Microsoft-CVE-2021-1675

Microsoft-CVE-2021-1675 لقد أنشأت مشروع C صغيرًا يستغل الثغرة الأمنية CVE-2021-1675. لمزيد من المعلومات حول CVE-2021-1675، يرجى مراجعة مقالتي على المدونة: https://thalpius.com/2021/07/16/windows-print-spooler-elevation-of-privilege-vulnerability-cve-2021-1675-explained استخدام Microsoft...

Kerberos-CVE-2026-27912

Kerberos-CVE-2026-27912 CVE-2026-27912 - ثغرة رفع امتيازات في Windows Kerberos ResetNightmare - إعادة تعيين كلمة مرور غير مصرح بها عبر خلل في بروتوكول Kerberos Change Password. 📋 التفاصيل الحقل| القيمة ---|--- CVE| CVE-2026-27912 العنوان| ثغرة رفع امتيازات في Windows Kerberos CVSS|...

EUVD-2026-94469

A vulnerability in the export policies functionality of Cisco Application Policy Infrastructure Controller APIC could allow an authenticated, remote attacker to access sensitive files on an affected device. To exploit this vulnerability, the attacker must have valid administrative credentials. Th...

CVE-2024-24409

CVE-2024-24409 - ADManager Plus Build 7210 विशेषाधिकार उन्नयन भेद्यता विवरण Modify Computers, ADManager में कंप्यूटर प्रबंधन के लिए एक पूर्वनिर्धारित भूमिका है। यदि किसी तकनीशियन उपयोगकर्ता के पास किसी कंप्यूटर पर Modify Computers विशेषाधिकार है, तो वे कंप्यूटर ऑब्जेक्ट के userAccountControl और...

Security Updates for Microsoft Exchange Server (October 2026 OOB)

The Microsoft Exchange Server installed on the remote host is missing a security update. It is, therefore, affected by an elevation of privilege vulnerability: - Weak authorization in Microsoft Exchange Server allows an authenticated attacker to elevate privileges over a network. CVE-2026-96940...

Microsoft Exchange Server Elevation of Privilege (October 2026)

The Microsoft Exchange Server installed on the remote host is missing a security update. It is, therefore, affected by an elevation of privilege vulnerability. Weak authorization in Microsoft Exchange Server allows an authenticated attacker to elevate privileges over a network. CVE-2026-96940 Not...

CVE-2026-106378

Privilege elevation in Sandbox in Google Chrome on on Mac prior to 155...

CVE-2026-82162

Dell Command | Configure DCC, versions prior to 5.2.3.35, contain an Improper Handling of Mixed Encoding vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Elevation of Privileges...

CVE-2026-86362

Dell System Update, versions prior to 2.3.0.0, contains an Improper Access Control vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges...

CVE-2026-86361

Dell System Update, versions prior to 2.3.0.0, contains an Incorrect Permission Assignment for Critical Resource vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges...

DEBIAN-CVE-2026-106378

Privilege elevation in Sandbox in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106378

Privilege elevation in Sandbox in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-93659

Dell Command | Configure DCC, versions prior to 5.2.3.35, contain an Improper Handling of Mixed Encoding vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Elevation of Privileges...

CVE-2026-82162

Versions prior to 5.2.3.35 of Dell Command | Configure (DCC) are vulnerable to an Improper Handling of Mixed Encoding vulnerability (CWE-175). An unauthenticated attacker with remote access could potentially exploit this flaw to achieve Elevation of Privileges . Remediation information can be fou...

CVE-2026-82162

Dell Command | Configure DCC, versions prior to 5.2.3.35, contain an Improper Handling of Mixed Encoding vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Elevation of Privileges...

CVE-2026-106378

Privilege elevation in Sandbox in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...