cve-2019-12750

Symantec Local Privilege Escalation - CVE-2019-12750 Basado en el excelente análisis de Kyriakos Economou: https://labs.nettitude.com/blog/cve-2019-12750-symantec-endpoint-protection-local-privilege-escalation-part-1/ Por ahora solo se admiten versiones x64 y versiones anteriores de Windows...

ms08-067.py

📖 概述 此仓库包含 MS08-067 Windows Server Service 漏洞（CVE-2008-4250）的一些 Python 脚本实现。这是一个影响旧版 Windows 系统的经典远程代码执行漏洞。 🛠️ 安装与使用 前置条件 Python3 授权测试环境 🤔如何使用？ 首先，打开 Shell 或 Cmd。然后 👉 运行以下命令： root@kitploit: git clone https://github.com/BinRacer/ms08-067.py.git cd ms08-067.py pip install -r requirements.txt python...

Microsoft: 6 Zero-Days in March 2025 Patch Tuesday

Microsoft today issued more than 50 security updates for its various Windows operating systems, including fixes for a whopping six zero-day vulnerabilities that are already seeing active exploitation. Two of the zero-day flaws include CVE-2025-24991 and CVE-2025-24993, both vulnerabilities in NTF...

PT-2025-6307 · Microsoft · Windows +1

Name of the Vulnerable Software and Affected Versions: Windows versions prior to the fixed version Description: A tampering issue affects the Windows Remote Desktop Configuration Service, allowing attackers to impact the system. Recommendations: For versions prior to the fixed version, update to...

HackerOne: CSV injection in the credentials export

Summary: Hello team! We have found out that a hacker can inject malicious excel formulas into the credentials details which will be executed when program user exports the credentials details via https://hackerone.com/hackeroneh1pbbp3/credentials - export credentials and opens this CSV using MS...

Unspecified Vulnerability in Philips HDI 4000 Ultrasound Systems

Philips HDI 4000 Ultrasound Systems is a set of ultrasound equipment for the medical industry from the European company Philips. A security vulnerability exists in the Philips HDI 4000 Ultrasound Systems running on older operating systems that are no longer supported, such as Windows 2000. An...

PT-2012-5585 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Microsoft Windows versions prior to the fixed version Description: A remote code execution issue exists due to the way Microsoft Windows parses filenames, potentially allowing attackers to execute arbitrary code in the context of the current...

PT-2009-2781 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Microsoft Windows versions prior to the fixed version Description: The issue arises from the improper validation of input received from user mode by the graphics device interface GDI implementation in the kernel. This allows remote attackers ...

PT-2008-3746 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Microsoft Windows versions prior to the fixed version Description: The issue is related to a double free condition in the Windows kernel, allowing local users to gain privileges via a crafted application. This could enable an attacker to run...