CVE-2026-54121-CertiGhost

CVE-2026-54121-CertiGhost Этот POC — оригинальный код POC из https://github.com/aniqfakhrul/CVE-2026-54121/blob/main/certighost.py, но с небольшими изменениями: используется объект компьютера, которым мы уже управляем, вместо создания нового компьютера, который обычно ограничен через...

KINGSOFT-WPS-Office-LPE

Уведомление JVN https://jvn.jp/en/vu/JVNVU90673830/ Были назначены следующие номера CVE: CVE-2022-25943 Повышение привилегий в KINGSOFT WPS Office WPS Office — это офисный пакет для Microsoft Windows, macOS, Linux, iOS, Android и HarmonyOS, разработанный китайской компанией Kingsoft, расположенно...

CVE-2019-12889

CVE-2019-12889 Краткое описание В SailPoint Desktop Password Reset 7.2 существует неаутентифицированное повышение привилегий. Пользователь, имеющий локальный доступ только к экрану входа в Windows, может повысить свои привилегии до NT AUTHORITY\System. Для успешной эксплуатации злоумышленнику...

CVE-2026-92369

TeamViewer Full Client and Host prior to version 15.82 on Windows contain a TOCTOU race condition in the installer rollback mechanism. A local low-privileged attacker can replace rollback backup files stored in a user-writable temporary directory before they are restored by an elevated installer,...

CVE-2026-92369 Time-of-check Time-of-use (TOCTOU) Race Condition in TeamViewer Windows Installer Rollback Mechanism Leads to Local Privilege Escalation

TeamViewer Full Client and Host prior to version 15.82 on Windows contain a TOCTOU race condition in the installer rollback mechanism. A local low-privileged attacker can replace rollback backup files stored in a user-writable temporary directory before they are restored by an elevated installer,...

CVE-2026-92369

TeamViewer Full Client and Host on Windows prior to version 15.82 are vulnerable to a TOCTOU race condition within the installer rollback mechanism. A local low-privileged attacker can exploit this by replacing rollback backup files in a user-writable temporary directory before an elevated instal...

EUVD-2026-89020

TeamViewer Full Client and Host prior to version 15.82 on Windows contain a TOCTOU race condition in the installer rollback mechanism. A local low-privileged attacker can replace rollback backup files stored in a user-writable temporary directory before they are restored by an elevated installer,...

CVE-2026-92369 Time-of-check Time-of-use (TOCTOU) Race Condition in TeamViewer Windows Installer Rollback Mechanism Leads to Local Privilege Escalation

TeamViewer Full Client and Host prior to version 15.82 on Windows contain a TOCTOU race condition in the installer rollback mechanism. A local low-privileged attacker can replace rollback backup files stored in a user-writable temporary directory before they are restored by an elevated installer,...

CVE-2026-19743 Improper Limitation of a Pathname to a Restricted Directory (Path Traversal) in TeamViewer Desktop Clients

Improper path validation in the local IPC service of TeamViewer Full Client and Host on Windows, Linux, and macOS prior to version 15.82 allows a local authenticated user with low privileges to perform arbitrary file writes with elevated privileges NT AUTHORITY/SYSTEM \ root. By sending crafted I...

PT-2026-102662

TeamViewer Full Client and Host prior to version 15.82 on Windows contain a TOCTOU race condition in the installer rollback mechanism. A local low-privileged attacker can replace rollback backup files stored in a user-writable temporary directory before they are restored by an elevated installer,...

CVE-2026-57239

Foxit PDF Reader LPE Preuve de concept d'exploit pour CVE-2026-3775/CVE-2026-3780 et CVE-2026-57239 qui permet d'obtenir les droits NT AUTHORITY\SYSTEM via le service de mise à jour de Foxit PDF Reader. Compilation Compilez simplement le binaire, placez-le sur votre cible et exécutez-le. cargo...

CVE-2025-53136

CVE-2025-53136 Divulgation d'informations du noyau par condition de concurrence. https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43511 https://www.crowdfense.com/nt-os-kernel-information-disclosure-vulnerability-cve-2025-53136/...

CVE-2019-1388

CVE-2019-1388 CVE-2019-1388 Abuser de la boîte de dialogue de certificat UAC Windows Description : Cet exploit CVE tend à abuser de la boîte de dialogue de certificat UAC Windows pour exécuter le lien de l'émetteur du certificat en tant qu'utilisateur NT Authority et ouvrir un navigateur qui est...

Geutebrueck_GCore_X64_RCE_BO

GeutebrueckGCoreX64RCEBO Модуль Metasploit для системы «управление видео» Geutebrueck GCore. Протестировано с версиями 1.3.8.42 и 1.4.2.37. Полное удаленное выполнение кода с привилегиями NT/System в Windows Win 2012R2,Win8.1,... с установленными продуктами Geutebrueck GCore. Авторы:...

CVE-2022-24483

CVE-2022-24483 POC pour CVE-2022-24483 Un bug de divulgation d'informations dans la fonction "nt!PfpPrivSourceEnum". Fiabilité : élevée...

CouchPotato

CouchPotato Убедитесь, что компилируете самостоятельно, чтобы избежать обнаружения.. некоторые строки XOR на этапе компиляции.. Я больше не буду публиковать бинарники. Использование: CouchPotato.exe ip port Патчит ETW и AMSI и использует косвенный системный вызов для злоупотребления...

CVE-2020-5752

CVE-2020-5752: Élévation de privilèges locale de Druva inSync Un exploit en C pour le client Windows Druva inSync v6.6.3 et inférieur. L'application expose un service RPC sur le port 6064 qui est vulnérable à une injection de commande via un parcours de chemin. Cela permet à un utilisateur local...

CVE-2026-79153

Seclore FileSecure Desktop Client before 3.25.1.0 contains improper access control vulnerability in the kernel-mode driver component that allows an authenticated local user to gain elevated privileges to NT AUTHORITY\SYSTEM on affected systems...

CVE-2026-79153: Improper Privilege Management

Seclore FileSecure Desktop Client before 3.25.1.0 contains improper access control vulnerability in the kernel-mode driver component that allows an authenticated local user to gain elevated privileges to NT AUTHORITY\SYSTEM on affected systems...

CVE-2026-79153

Seclore FileSecure Desktop Client before 3.25.1.0 contains improper access control vulnerability in the kernel-mode driver component that allows an authenticated local user to gain elevated privileges to NT AUTHORITY\SYSTEM on affected systems...