CVE-2020-1048

CVE-2020-1048 Una vulnerabilità di elevazione dei privilegi esiste quando il servizio Windows Print Spooler consente in modo improprio la scrittura arbitraria sul file system. Un utente malintenzionato che sfrutta con successo questa vulnerabilità potrebbe eseguire codice arbitrario con privilegi...

CVE-2024-36821

CVE-2024-36821 Il riferimento pubblico che contiene le informazioni minime richieste per la vulnerabilità coperta da CVE-2024-36821 Il video originale con la PoC puoi trovarlo sul video - https://www.youtube.com/watch?v=6vHno0ik7JY La PoC: 1. Connettersi al router tramite connessione UART 2. Usan...

MAL-002

MAL-002: Forza il riavvio del sistema tramite MSI di Windows installati Dopo che un software viene installato correttamente sul sistema, uno o più file MSI attendibili compariranno nella cartella “C:\Windows\Installer” e potrebbero consentire a un utente con privilegi limitati di eseguire azioni ...

CVE-2024-50251-PoC

CVE-2024-50251-PoC Solo un bug DoS locale nel kernel Linux...

CVE-2021-28312

CVE-2021-28312 POC e descrizione per CVE-2021-28312 Vulnerabilità di negazione del servizio NTFS di Windows Link: https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-28312 Riproduzione Dal cmd: digitare il seguente comando cd c::$i30:$bitmap Possibilità di sfruttamento remoto: pu...

CVE-2019-12889

CVE-2019-12889 Riepilogo Esiste una escalation di privilegi non autenticata in SailPoint Desktop Password Reset 7.2. Un utente con accesso locale solo alla schermata di accesso di Windows può aumentare i propri privilegi a NT AUTHORITY\System. Un attaccante necessita di accesso locale alla macchi...

EUVD-2026-67084

In MongoDB Connector for BI, mongodrdl may write a TLS private-key password to standard error when the password is supplied through both the connection URI and the corresponding command-line option. A local user with access to the captured command output and encrypted key file may use the disclos...

CVE-2026-81683 openssl_encrypt before 1.4.9 Plaintext Private Key Storage

opensslencrypt pip package openssl-encrypt versions 1.4.8 and earlier store an mTLS client private key in cleartext within a world-readable 0644 SharedPreferences file via the desktop GUI's Settings screen 'combined certificate and private key' PEM field. A local attacker with file system access...

CVE-2026-81562

A security flaw has been discovered in AlexGladkov claude-in-mobile 3.10.2. This affects the function execSync of the file src/adb/client.ts. Performing a manipulation results in os command injection. The attack requires a local approach. The exploit has been released to the public and may be use...

CVE-2026-71084

A flaw was found in mysql-connector-odbc. An unauthenticated attacker with local logon access to the infrastructure where MySQL Connectors executes can exploit this vulnerability. This can lead to a complete denial of service DoS by causing the component to crash repeatedly. Additionally, the...

CVE-2026-21533_Scanner.py

CVE-2026-21533 Scanner: Windows RDP Local Privilege Escalation Detection Tool Dieses Repository enthält ein Erkennungstool für die Schwachstelle CVE-2026-21533, einen Fehler in der Privilegienverwaltung der Windows-Remotedesktopdienste RDS, der es einem lokalen Angreifer ermöglichen könnte, seine...

Dell Client BIOS Arbitrary Write (DSA-2026-280)

Dell Client BIOS contains an Improper Link Resolution Before File Access 'Link Following' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Arbitrary Write. Note that Nessus has not tested for this issue but has instead relied only...

CVE-2026-79939

Dell PowerProtect Cyber Recovery, versions Prior to 20.3, contain an UNIX Symbolic Link Symlink Following vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Script injection...

CVE-2026-79939

Dell PowerProtect Cyber Recovery versions prior to 20.3 contain a UNIX Symbolic Link (Symlink) Following vulnerability. A low-privileged attacker with local access could exploit this to achieve script injection . NVD scores it 7.8 (High) while Dell's CNA assessment rates it 5.8 (Medium) , reflect...

CVE-2026-79939

Dell PowerProtect Cyber Recovery, versions Prior to 20.3, contain an UNIX Symbolic Link Symlink Following vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Script injection...

EUVD-2026-66706

Dell PowerProtect Cyber Recovery, versions Prior to 20.3, contain an UNIX Symbolic Link Symlink Following vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Script injection...

CVE-2025-40602

CVE-2025-40602 📌 Panoramica CVE-2025-40602 è una vulnerabilità di escalation dei privilegi locale che colpisce i dispositivi della serie SonicWall Secure Mobile Access SMA 1000. Il difetto è presente nella Appliance Management Console AMC a causa di controlli di autorizzazione insufficienti , che...

CVE-2026-58097

FreeBSD ppp(8) contains a buffer overflow in mp_SetEnddisc() , which copies a user-supplied PSN endpoint discriminator value without length validation. A local user in the "network" group (required to run the setuid-root ppp(8)) can exploit this via the command interface to crash ppp(8) or potent...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: targetcli (UTSA-2026-093622)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093622 advisory. Open-iSCSI targetcli-fb through 2.1.52 has weak permissions for /etc/target and for the backup directory and backup files. Tenable has extracted the preceding...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098668)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098668 advisory. Uncontrolled resource consumption in the Linux kernel drivers for IntelR SGX may allow an authenticated user to potentially enable denial of service via local access...