2144 matches found
RottenPotato
Questo codice non è più mantenuto - per una implementazione più recente vedi https://github.com/breenmachine/RottenPotatoNG RottenPotato Escalation dei privilegi locali da account di servizio Windows a SYSTEM Per una panoramica tecnica di questo exploit vedi il nostro post sul blog all'indirizzo...
Research-CVE-2016-5195
CVE-2016-5195Dirty Cow Cow significa copy-on-write , presente nos kernels Linux desde 2007 e descoberta em 2016. Como estou fazendo um laboratório relacionado a esse CVE, vou aproveitar para escrever uma análise sobre ele. 1. Introdução Como o kernel roda com privilégios de root, ele pode ser...
CVE-2021-3156-centos7
CVE-2021-3156-centos7 Nutzung der sudo-Privilegienausweitung, nur für cnetos7 Betroffene Versionen: sudo: 1.8.2 - 1.8.31p2 sudo: 1.9.0 - 1.9.5p1 Melden Sie sich als Nicht-Root-Benutzer am System an und führen Sie den folgenden Befehl aus: sudoedit -s / Die Ausgabe ist 'not a regular file'...
PoC--CVE-2019-10149_Exim
PoC-CVE-2019-10149Exim MNEMO-CERT ha sviluppato una PoC che consente di eseguire comandi con privilegi elevati sfruttando la vulnerabilità CVE-2019-10149, che affligge diverse versioni di Exim 4.87 - 4.91. Per lo sfruttamento locale di questa vulnerabilità è necessario definire il comando che si...
CVE-2016-5195
CVE-2016-5195 gcc -pthread dirty.c -o dirty -lcrypt Referenzlinks https://github.com/FireFart/dirtycow/blob/master/dirty.c...
PrivescCheck
PrivescCheck Identifica rapidamente vulnerabilità e problemi di configurazione comuni su Windows che non sono necessariamente coperti dagli standard di sicurezza pubblici, e raccogli informazioni utili per sfruttamento e post-sfruttamento. !IMPORTANT Un aspetto importante da tenere presente quand...
CVE-2026-59566
A locally exploitable buffer overflow bug can cause a local denial-of-service attack on affected versions of Zscaler Client Connector on Android and ChromeOS...
CVE-2026-59566
CVE-2026-59566 is a locally exploitable buffer overflow in Zscaler Client Connector on Android and ChromeOS that can lead to a local denial-of-service. The CVSS 3.1 base score is 8.4 (HIGH) with a vector of AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H, indicating low complexity and no privileges or user i...
Astra Linux – Vulnerability in unbound
Before version 1.9.5, Unbound allowed an integer overflow in the regional allocator through the ALIGNUP macro. NOTE: The vendor denies that this is a vulnerability. Although the code may be vulnerable, an ongoing Unbound installation cannot be remotely or locally exploited...
CVE-2022-0155 vulnerabilities
Vulnerabilities for packages: arangodb...
CVE-2026-60753
Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM component: Installation. Supported versions that are affected are 17.0-26.6. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Siebel CRM Deployment executes to compromise...
CVE-2026-71115
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.2.14. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle ...
EUVD-2026-61296
Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Identity...
CVE-2026-74965
Privilege escalation in the Shell Integration component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1...
PT-2026-77795
Vulnerability in the Oracle SDP Number Portability product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle SDP Number...
BIT-DOTNET-2026-62897 .NET Framework Remote Code Execution Vulnerability
Integer overflow or wraparound in .NET Framework allows an unauthorized attacker to execute code locally...
CVE-2026-50602
A security vulnerability has been identified in Planet9 due to incorrect file permissions assigned to an application executable used by the Planet9 background service. The service runs with SYSTEM privileges, while the affected executable grants excessive permissions to non-administrative users. ...
GHSA-25QR-6MPR-F7QX vulnerabilities
Vulnerabilities for packages: telegraf...