CVE-2023-35337

Win32k Elevation of Privilege Vulnerability...

CVE-2023-35320

Connected User Experiences and Telemetry Elevation of Privilege Vulnerability...

CVE-2023-32054

Volume Shadow Copy Elevation of Privilege Vulnerability...

PT-2023-3838 · Microsoft · Windows Kernel +1

Name of the Vulnerable Software and Affected Versions: Windows Kernel affected versions not specified Description: The issue is related to synchronization errors when using a shared resource, which can lead to a situation where an attacker gains unauthorized access to the device. This is an...

PT-2023-3658 · Microsoft · Windows Partition Management Driver +1

Name of the Vulnerable Software and Affected Versions: Windows Partition Management Driver affected versions not specified Description: The issue is related to insufficient access control in the Windows Partition Management Driver, which can be exploited to elevate privileges. This could allow an...

KB5028182: Windows 11 version 21H2 Security Update (July 2023)

The remote Windows host is missing security update 5028182. It is, therefore, affected by multiple vulnerabilities - Windows Routing and Remote Access Service RRAS Remote Code Execution Vulnerability CVE-2023-35365, CVE-2023-35366, CVE-2023-35367 - Windows Netlogon Information Disclosure...

PT-2023-3829 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to insecure privilege management in the Windows operating system kernel. It allows an attacker to potentially elevate their privileges. Recommendations: At the moment,...

Google Android OS 安全漏洞

Google Android is a Linux-based open source operating system from Google. An elevation of privilege vulnerability exists in Google Android Framework, which can be exploited by attackers to cause an elevation of privilege...

Linux kernel 资源管理错误漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the presence of a post-release reuse vulnerability that can lead to local elevation of privilege...

EulerOS 2.0 SP11 : xorg-x11-server (EulerOS-SA-2023-2305)

According to the versions of the xorg-x11-server package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A vulnerability was found in X.Org. This issue occurs due to a dangling pointer in DeepCopyPointerClasses that can be exploited by...

Huawei EulerOS: Security Advisory for xorg-x11-server (EulerOS-SA-2023-2281)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP11 : xorg-x11-server (EulerOS-SA-2023-2281)

According to the versions of the xorg-x11-server package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A vulnerability was found in X.Org. This issue occurs due to a dangling pointer in DeepCopyPointerClasses that can be exploited by...

Huawei EulerOS: Security Advisory for xorg-x11-server (EulerOS-SA-2023-2305)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2023-28323

A deserialization of untrusted data exists in EPM 2022 Su3 and all prior versions that allows an unauthenticated user to elevate rights. This exploit could potentially be used in conjunction with other OS Operating System vulnerabilities to escalate privileges on the machine or be used as a...

Privilege escalation

Microsoft Edge Chromium-based Elevation of Privilege Vulnerability...

Information disclosure

Multiple vulnerabilities in Cisco Expressway Series and Cisco TelePresence Video Communication Server VCS could allow an authenticated attacker with Administrator-level read-only credentials to elevate their privileges to Administrator with read-write credentials on an affected system. Note: "Cis...

CVE-2023-20105

A vulnerability in the change password functionality of Cisco Expressway Series and Cisco TelePresence Video Communication Server VCS could allow an authenticated, remote attacker with Read-only credentials to elevate privileges to Administrator on an affected system. This vulnerability is due to...

HongCMS Cross-Site Request Forgery Vulnerability (CNVD-2023-54439)

HongCMS is an open source lightweight content management system CMS. A cross-site request forgery CSRF vulnerability exists in HongCMS version 3.0.0. An attacker can exploit this vulnerability to execute arbitrary code and elevate privileges via the updateusers parameter...

Windows 11 22h2 - Kernel Privilege Elevation Exploit

// Exploit Title: Windows 11 22h2 - Kernel Privilege Elevation // country: Iran // Exploit Author: Amirhossein Bahramizadeh // Category : webapps // Vendor Homepage: // Tested on: Windows/Linux // CVE : CVE-2023-28293 include include // The vulnerable driver file name const char drivername =...

Windows 11 22h2 - Kernel Privilege Elevation

// Exploit Title: Windows 11 22h2 - Kernel Privilege Elevation // Date: 2023-06-20 // country: Iran // Exploit Author: Amirhossein Bahramizadeh // Category : webapps // Vendor Homepage: // Tested on: Windows/Linux // CVE : CVE-2023-28293 include include // The vulnerable driver file name const ch...