CVE-2025-21420_POC

cleanmgr.exe 디핑 새로운 버전의 cleanmgr.exe에는 SetProcessMitigationPolicy 함수 호출이 포함되어 있습니다. MitigationPolicy가 16으로 설정되어 있으며, 이는 ProcessRedirectionTrustPolicy 에 해당합니다. Microsoft의 CWE-59: 파일 액세스 전 부적절한 링크 확인'Link Following' 설명과 함께 보면, cleanmgr.exe에 Redirection Guard가 활성화되어 있음을 추론할 수 있습니다. Simon Zuckerbraun...

EUVD-2023-28588

Malicious code in bioql PyPI...

Path traversal in csfd daemon

...

CVE-2024-34116 Adobe Creative Cloud App Install Arbitrary Folder Delete Vulnerability can be abuse to Privilege Escalation

Creative Cloud Desktop versions 6.1.0.587 and earlier are affected by an Uncontrolled Search Path Element vulnerability that could result in a security feature bypass. An attacker could exploit this vulnerability to load and execute malicious libraries, leading to arbitrary file delete...

CVE-2024-34116 Adobe Creative Cloud App Install Arbitrary Folder Delete Vulnerability can be abuse to Privilege Escalation

Creative Cloud Desktop versions 6.1.0.587 and earlier are affected by an Uncontrolled Search Path Element vulnerability that could result in a security feature bypass. An attacker could exploit this vulnerability to load and execute malicious libraries, leading to arbitrary file delete...

CVE-2023-23697

Dell Command | Intel vPro Out of Band, versions before 4.4.0, contain an arbitrary folder delete vulnerability during uninstallation. A locally authenticated malicious user may potentially exploit this vulnerability leading to arbitrary folder deletion...

CVE-2023-23697

The CVE concerns Dell Command | Intel vPro Out of Band, prior to version 4.4.0, with an arbitrary folder deletion vulnerability triggered during uninstallation. A locally authenticated attacker may exploit this to delete folders. Publicly documented impact is limited to uninstallation-time operat...

CVE-2023-24572

CVE-2023-24572 affects Dell Command | Integration Suite for System Center, versions before 6.4.0. It describes an arbitrary folder deletion vulnerability during uninstallation that a locally authenticated malicious user may exploit. The impact is limited to folder deletion; no additional details ...

CVE-2023-24573

Dell Command | Monitor prior to version 10.9 is affected by an arbitrary folder deletion vulnerability during uninstallation. The issue allows a locally authenticated malicious user to delete arbitrary folders. Root cause involves inadequate access control during uninstall. Impact is high for ava...

CVE-2006-6246

Photo Organizer 2.32b and earlier does not properly check the ownership of certain objects, which allows remote attackers to gain unauthorized access via vectors related to 1 camera del, 2 camera edit, 3 folder/album deletion, 4 photo.move, 5 content.indexer, 6 folder.content, and possibly other...