CVE-2022-26503

CVE-2022-26503 Summary: Vulnerability CVE-2022-26503 in Veeam Agent for Microsoft Windows allows local privilege escalation. An attacker who successfully exploited this vulnerability could run arbitrary code with LOCAL SYSTEM privileges. Shout out to @ultrayoba The Patch: The implemented patch...

CVE-2020-1313

CVE-2020-1313 Abstract Windows Update Orchestrator Service is a DCOM service used by other components to install windows updates that are already downloaded. USO was vulnerable to Elevation of Privileges any user to local system due to an improper authorization of the callers. The vulnerability...

RogueWinRM

RogueWinRM RogueWinRM is a local privilege escalation exploit that allows to escalate from a Service account with SeImpersonatePrivilege to Local System account if WinRM service is not running default on Win10 but NOT on Windows Server 2019. Briefly, it will listen for incoming connection on port...

CVE-2019-9745

Author: Arn Vollebregt Introduction Creativity is at the core of penetration testing, which keeps our work interesting. One pitfall however is the tendency to 'over-engineer' attack scenarios and focus solely on bugs error conditions. Flaws unintended behaviour may however be present with equally...

CVE-2023-27532-RCE-Only

Forked Version RCE Only Forked repository and removed the credential leak part. Applied fixes for compilation. CVE-2023-27532 Proof of Concept code to exploit CVE-2023-27532 and either leak plaintext credentials or perform remote command execution. Overview For a detailed analysis of the...

CVE-2020-11493

CVE-2020-11492 Proof-of-Concept PoC for Docker Desktop for Windows privilege escalation vulnerability. This vulnerability was patched in Docker version 2.3.0.2 on May 11th, 2020. This PoC performs the following: creates a named pipe mimicking docker named pipe \.\pipe\dockerLifecycleServer, call...

CVE-2026-112109

A flaw was found in SafeNet Authentication Client SAC. An authenticated local user can trigger a heap-based buffer overflow through the SACSrv service interface. Successful exploitation may allow arbitrary code execution with elevated Local System privileges, resulting in local privilege...

CVE-2026-112109

A local privilege escalation vulnerability in Thales SafeNet Authentication Client SAC SACSrv can allow an authenticated, non-administrator local user to trigger a heap-based buffer overflow through the service interface. Successful exploitation may allow arbitrary code execution with Local Syste...

EUVD-2026-117613

A local privilege escalation vulnerability in Thales SafeNet Authentication Client SAC SACSrv can allow an authenticated, non-administrator local user to trigger a heap-based buffer overflow through the service interface. Successful exploitation may allow arbitrary code execution with Local Syste...

CVE-2026-112109

Thales SafeNet Authentication Client (SAC) contains a local privilege escalation vulnerability in the SACSrv component. An authenticated, non-administrator local user can trigger a heap-based buffer overflow via the service interface, potentially leading to arbitrary code execution with Local Sys...

CVE-2026-112109 Local privilege escalation in SafeNet Authentication Client SACSrv

A local privilege escalation vulnerability in Thales SafeNet Authentication Client SAC SACSrv can allow an authenticated, non-administrator local user to trigger a heap-based buffer overflow through the service interface. Successful exploitation may allow arbitrary code execution with Local Syste...

CVE-2026-110464

Missing authorization in ASUS Armoury Crate allows a local attacker to write content into a specific file or registry location with Local System privileges, or to cause a recoverable system crash, via the service's exposed inter-process interface. Refer to the ' Security Update for Armoury Crate...

CVE-2026-110464

A missing authorization vulnerability in the ASUS Armoury Crate app allows a local attacker to exploit the service's exposed inter-process interface . This flaw enables the attacker to either write content into a specific file or registry location with Local System privileges or trigger a recover...

CLEANSTART-2024-CW74916 Insufficient validation in the Drag and Drop API in conjunction with social engineering, may have allowed an attacker to trick end-users into creating a shortcut to local system files

Security vulnerability affects the firefox-esr package. Insufficient validation in the Drag and Drop API in conjunction with social engineering, may have allowed an attacker to trick end-users into creating a shortcut to local system files...

EyeLock nano NXT path traversal vulnerability

EyeLock nano versions 3.05.1193, 3.04.1108, 3.03.944, and 3.01.646 contain a path traversal vulnerability. This vulnerability stems from improper handling of the “path” parameter. Unauthenticated attackers can craft path traversal sequences to read arbitrary files, potentially leading to local...

CVE-2016-20104: Improper Limitation of a Pathname to a Restricted Directory

EyeLock nano NXT 3.05.1193, 3.04.1108, 3.03.944, and 3.01.646 contain a path traversal vulnerability that allows unauthenticated attackers to read arbitrary files via the 'path' parameter. Attackers can send GET requests to /scripts/logdownload.php with traversal sequences like ../../etc/passwd,...

CVE-2026-78628

The Okta Credential Provider for Windows does not validate a serialized credential buffer before interpreting it as a Kerberos logon structure. The buffer size and packed string offsets are not checked. Processing a malformed buffer can cause the credential provider process to terminate...

CVE-2026-78628: Improper Input Validation

The Okta Credential Provider for Windows does not validate a serialized credential buffer before interpreting it as a Kerberos logon structure. The buffer size and packed string offsets are not checked. Processing a malformed buffer can cause the credential provider process to terminate...

PT-2026-113385

The Okta Credential Provider for Windows does not validate a serialized credential buffer before interpreting it as a Kerberos logon structure. The buffer size and packed string offsets are not checked. Processing a malformed buffer can cause the credential provider process to terminate...

Okta Credential Provider for Windows Buffer Error Vulnerability

Okta Credential Provider for Windows versions prior to 1.4.6.0 have a security vulnerability. This vulnerability stems from the unauthorized parsing of serialized credentials into Kerberos login structures without verification. Additionally, no checks are performed on the buffer size and the offs...