VirtualLockSensorLPE

VirtualLockSensorLPE 描述 本地权限提升 PoC 利用程序，针对运行在 Windows 上的 Elliptic Virtual Lock Sensor 版本 3.1.60531.2，该传感器默认安装在特定 Lenovo 笔记本电脑型号上。允许通过更改注册表项的权限，从普通用户上下文在 SYSTEM 上下文中执行负载。 来自 Lenovo 的官方公告：https://support.lenovo.com/us/en/productsecurity/LEN-182738 请在使用前阅读注意事项。 如何构建 1. 使用 git clone --recursive 克隆仓库。...

Hidden administrator account the three minutes to get-vulnerability warning-the black bar safety net

On the regedit. exe everyone is familiar with, but not to the registry key set permissions, regedt32. exe the biggest advantages is the ability to the registry key set permissions. nt/2 0 0 0/xp account information in the registry HKEYLOCALMACHINE\SAM\SAM key, but in addition to the system user...

CVE-2007-1056

VMware Workstation 5.5.3 build 34685 does not provide per-user restrictions on certain privileged actions, which allows local users to perform restricted operations such as changing system time, accessing hardware components, and stopping the "VMware tools service" service. NOTE: exploitation is...

CVE-2007-1056

VMware Workstation 5.5.3 build 34685 exposes a local-privilege risk: there are no per-user restrictions for certain privileged actions outside the guest OS. Local users can perform operations such as changing system time, accessing hardware components, and stopping the VMware Tools service by exp...

CVE-2002-0642

The registry key containing the SQL Server service account information in Microsoft SQL Server 2000, including Microsoft SQL Server Desktop Engine MSDE 2000, has insecure permissions, which allows local users to gain privileges, aka "Incorrect Permission on SQL Server Service Account Registry Key...

CVE-2002-0214

Compaq Intel PRO/Wireless 2011B LAN USB Device Driver 1.5.16.0 through 1.5.18.0 stores the 128-bit WEP Wired Equivalent Privacy key in plaintext in a registry key with weak permissions, which allows local users to decrypt network traffic by reading the WEP key from the registry key...

CVE-2000-1164

WinVNC installs the WinVNC3 registry key with permissions that give Special Access read and modify to the Everybody group, which allows users to read and modify sensitive information such as passwords and gain access to the system...

Registry Permissions reminder - local privilege escalation on Windows NT

Howdy all, The generic security issue of lax permissions on registry keys under Windows NT 4 has been known for sometime see Stephen Sutton's Windows NT Security Guidelines http://www.trustedsystems.com/tssnsaguide.htm but here's a "new" curtly reminder of why it is so important to do so. Local...

nt4.trojaned.profiles.txt

Date: Wed, 28 Apr 1999 20:36:58 +0100 From: Mnemonix To: [email protected] Subject: NT Security Advisory: Domain user to Domain Admin - Profiles and the Registry Problem : NT users can cause other users of the system to load a "trojaned" profile that could lead to a system...