PrivescCheck

PrivescCheck 공개 보안 표준에서 반드시 다루어지지 않는 일반적인 Windows 취약점 및 구성 문제 를 신속하게 식별하고, 익스플로잇 및 사후 침투 작업에 유용한 정보를 수집합니다. !IMPORTANT 이 도구를 사용할 때 알아야 할 주요 사항은 모든 액세스 제어 검사가 현재 사용자의 컨텍스트에서 수행된다는 것입니다. 따라서 관리자 권한으로 실행하면 잘못된 결과를 생성하지 않기 위해 많은 취약점 검사가 실제로 건너뜁니다. 🚀 빠른 시작 스크립트 다운로드: PrivescCheck.ps1 !TIP 위 링크는...

RottenPotato

이 코드는 더 이상 유지 관리되지 않습니다 - 새로운 구현을 보려면 https://github.com/breenmachine/RottenPotatoNG 를 참조하십시오. RottenPotato Windows 서비스 계정에서 SYSTEM으로의 로컬 권한 상승 이 익스플로잇에 대한 기술적 개요는 블로그 게시물 https://foxglovesecurity.com/2016/09/26/rotten-potato-privilege-escalation-from-service-accounts-to-system/ 을 참조하십시오. 사용법: 1...

Research-CVE-2016-5195

CVE-2016-5195Dirty Cow Cow は copy-on-write で、2007年から Linux Kernel に存在し、2016年に発見されました。ちょうどこのCVEに関連するラボに取り組んでいるので、ついでに分析記事を書きます。 1. はじめに カーネルは root 権限で動作するため、このCVEは権限昇格の脆弱性として悪用される可能性があります。つまり、攻撃者は低権限ユーザーから Race condition（競合状態） を悪用して root 権限を取得できるということです。 2. では、Race condition（競合状態）とは何か？...

CVE-2016-5195

CVE-2016-5195 gcc -pthread dirty.c -o dirty -lcrypt 参考リンク https://github.com/FireFart/dirtycow/blob/master/dirty.c...

CVE-2021-3156-centos7

CVE-2021-3156-centos7 sudoを利用した権限昇格、cnetos7のみ対象 影響を受けるバージョン： sudo: 1.8.2 - 1.8.31p2 sudo: 1.9.0 - 1.9.5p1 非rootユーザーでシステムにログインし、次のコマンドを実行します： sudoedit -s / not a regular file と表示される おそらくこの脆弱性が存在します 使用方法： まず非rootユーザーでログインし、/etc/passwd内のすべての内容をCVE-2021-3156.pyのAPPENDCONTENT = b"""\n""";...

PoC--CVE-2019-10149_Exim

PoC-CVE-2019-10149Exim MNEMO-CERT 开发了一个 PoC，可利用影响 Exim 多个版本（4.87 - 4.91）的漏洞 CVE-2019-10149，以提升权限执行命令。 要本地利用该漏洞，需要定义要执行的命令。对于远程场景，仅考虑了 Exim 未使用 ACL "verify= recipient" 的情况，此时除了命令外还需指定服务的 IP 地址和端口。 MNEMO-CERT 开发此 PoC 仅出于教育目的，并用于执行能够复现 CVE-2019-10149 所述漏洞的伦理测试。此 PoC 应仅在受控环境或获得必要授权的情况下使用。...

EUVD-2026-79568

Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM component: Server Infrastructure. Supported versions that are affected are 17.0-26.7. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Siebel CRM Deployment executes to...

CVE-2026-58721

In multiple locations, there is a possible information disclosure due to uninitialized memory use. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-56889

In multiple locations, there is a possible permission bypass due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-58739

In platformmsghandlerinit of defaultmsghandlers.c, there is a possible confused deputy due to a confused deputy. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-56922

In CPM, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-56914

In multiple locations, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-55332

CVE-2026-55332 is an out-of-bounds write vulnerability in multiple locations within Android (referenced in the Pixel September 2026 security bulletin), caused by improper input validation . It allows local escalation of privilege but requires System-level execution privileges and needs no user in...

CVE-2026-0194

In multiple locations, there is a possible permission bypass due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-0192

In Bootloader, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-0177

In dosssaesgcm256op of crypto-aes.c, there is a possible out-of-bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation...

Astra Linux – Vulnerability in unbound

Before version 1.9.5, Unbound allowed an integer overflow in the regional allocator through the ALIGNUP macro. NOTE: The vendor denies that this is a vulnerability. Although the code may be vulnerable, an ongoing Unbound installation cannot be remotely or locally exploited...

CVE-2026-49919

In ttfacecolrblendlayer of ttcolr.c, there is a possible remote code execution due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28612

In resolveActivity of ActivityStarter.java, there is a possible way to perform Intent Redirection attacks due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-74050

In checkReadPermission of PermissionsManager.java, there is a possible way to monitor sensitive device state data due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...