SEP-14.2-Arbitrary-Write

Exploit CVE-2020-5837 La descrizione dettagliata si trova nel blog dei RedyOps Labs: https://labs.redyops.com/index.php/2020/04/27/symantec-endpoint-protection-sep-14-2-eop-via-arbitrary-write/ Strumenti di Terze Parti Questo codice di exploit è fortemente basato su symboliclink-testing-tools,...

richkit

Richkit Richkit is a python3 package that provides tools taking a domain name as input, and returns addtional information on that domain. It can be an analysis of the domain itself, looked up from data-bases, retrieved from other services, or some combination thereof. The purpose of richkit is to...

CVE-2019-9702_Symantec_Encryption_Desktop_LPE_PoC

सिमैंटेक एन्क्रिप्शन डेस्कटॉप PGPwded.sys स्थानीय विशेषाधिकार वृद्धि PoC इस रिपॉजिटरी में सिमैंटेक एन्क्रिप्शन डेस्कटॉप के PGPwded.sys स्टोरेज फिल्टर में एक स्थानीय विशेषाधिकार वृद्धि पथ का प्रूफ-ऑफ-कॉन्सेप्ट शामिल है, जो कम-विशेषाधिकार वाले रॉ डिस्क रीड/राइट प्रिमिटिव पर आधारित है। PoC को Symant...

nmap-scripts

nmap-scripts nmap-Skripte für Schwachstellen cve-2020-0796 & cve-2019-7238 & cve2019-11580 & cve2017-6327 CVE-2020-0796 Eine Sicherheitslücke zur Remotecodeausführung Remote Code Execution existiert in der Art und Weise, wie das Microsoft Server Message Block 3.1.1 SMBv3-Protokoll bestimmte...

cve-2019-12750

Symantec Lokale Rechteausweitung - CVE-2019-12750 Basierend auf dem hervorragenden Write-up von Kyriakos Economou: https://labs.nettitude.com/blog/cve-2019-12750-symantec-endpoint-protection-local-privilege-escalation-part-1/ Derzeit werden nur x64 und ältere Windows-Versionen unterstützt...

CVE-2020-5839

CVE-2020-5839 CVE-2020-5839 POC Symantec EDR on-prem versione precedente alla "4.4.0" è soggetto a una vulnerabilità di divulgazione di informazioni tramite i seguenti URL: root@kitploit: https://@IPEDR/r3epmpi/status/ https://@IPEDR/r3epmpi/status/routes https://@IPEDR/r3epmpi/v1/event/status/ds...

CVE-2020-12593

CVE-2020-12593 CVE-2020-12593 POC La versione on-prem di Symantec EDR precedente alla "4.5" è soggetta a una vulnerabilità di divulgazione di informazioni tramite il seguente URL : root@kitploit: https://@IPEDR/atpapi/v2/policies/blacklist Riferimenti...

CVE-2019-19547

CVE-2019-19547 CVE-2019-19547 POC Symantec EDR On-Prem-Version vor "4.3.0" ist anfällig für ein unauthentifiziertes reflektiertes XSS über die folgende URL: root@kitploit: https://@IPEDR/r3epmpi/v1/dx/log Referenz...

CVE-2009-3036

CVE-2009-3036 SpeeDr00t@Black Falcon bid38241 Symantec IM Manager Console HTML Injection Schwachstelle Info Diskussion Exploit Lösung Referenzen noexploitlink...

domainhunter

Domain Hunter Authors Joe Vest @joevest & Andrew Chiles @andrewchiles Domain name selection is an important aspect of preparation for penetration tests and especially Red Team engagements. Commonly, domains that were used previously for benign purposes and were properly categorized can be purchas...

CVE-2022-37017

CVE-2022-37017 Authentifizierungsumgehung für das Benutzeroberflächen-Passwort von Symantec Endpoint Protection 14.3.5351 Client Symantec Endpoint Protection ermöglicht das Einrichten eines Passwortschutzes für die Benutzeroberfläche, um Konfigurationsänderungen zu verhindern. Diese Passwortprüfu...

CVE-2008-6827

CVE-2008-6827 Symantec Altiris Client Service 6.8.378 - Escalation dei privilegi locale Pubblicazione Exploit-DB: https://www.exploit-db.com/exploits/5625/ Autore Alex Hernandez alias @alt3kx...

CVE-2026-74983

Mitigation bypass in the Data Loss Prevention component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1...

VulnCheck KEV: CVE-2016-5312

Directory traversal vulnerability in the charting component in Symantec Messaging Gateway before 10.6.2 allows remote authenticated users to read arbitrary files via a .. dot dot in the sn parameter to brightmail/servlet/com.ve.kavachart.servlet.ChartStream...

CVE-2026-15380

CVE-2026-15380 : A non-admin interactive user can achieve full SYSTEM code execution via a DCOM/task scheduler logic chain in Symantec ITMS. No network access or memory corruption required. Connected records confirm the vulnerability and impact as stated; no explicit exploit details, mitigations,...

CVE-2026-15380 Local privilege escalation in Symantec ITMS

A non-administrator interactive user can obtain full SYSTEM code execution through a DCOM/task scheduler logic chain — no network access, no memory corruption required ITMS 8.7.3...

GodDamn Ransomware Uses PoisonX Driver to Disable Endpoint Defenses

Cybersecurity researchers have flagged a new ransomware family called GodDamn that employs the PoisonX kernel driver to neutralize security software as part of its defense evasion strategy. According to a new report published by the Threat Hunter Team from Symantec, the ransomware was first...

CVE-2026-11626 Local Privilege Escalation in Symantec Endpoint Protection macOS CleanWipe Removal Tool

CleanWipe Removal Tool macOS, prior to 16.0.0.65, may be susceptible to an Local Privilege Escalation vulnerability, which is a type of issue whereby an attacker with limited privilege access on an affected system can escalate their privileges to gain administrative control...

CVE-2026-11626 Local Privilege Escalation in Symantec Endpoint Protection macOS CleanWipe Removal Tool

CleanWipe Removal Tool macOS, prior to 16.0.0.65, may be susceptible to an Local Privilege Escalation vulnerability, which is a type of issue whereby an attacker with limited privilege access on an affected system can escalate their privileges to gain administrative control...

CVE-2026-45208

A time-of-check time-of-use vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability...