CVE-2020-1048

CVE-2020-1048 Codice exploit POC per CVE-2020-1048PrintDemon Sistemi Vulnerabili Tutte le versioni di Windows indicate nel link sono vulnerabili: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1048 Passaggi per riprodurre 1. Modificare le variabili gPortName e...

CVE-2019-8805

CVE-2019-8805 Exploit per CVE-2019-8805 – Escalation dei privilegi nel framework Apple EndpointSecurity Esisteva un problema di convalida nella verifica delle entitlement. Il problema è stato risolto migliorando la convalida delle entitlement del processo. Il problema è stato risolto in macOS...

CVE-2023-36874_BOF

CVE-2023-36874 Windows Error Reporting LPE BOF Introduzione Questa è un'implementazione BOF matura e operativa per CobaltStrike dell'exploit LPE per Windows Error Reporting CVE-2023-36874 di Filip Dragovic @filipdragovic CVE-2023-36874 Windows Error Reporting LPE exploit. Ha fatto il lavoro pesan...

cve-2021-1675

〖EXP〗Ladon Drucker-Schwachstelle Privilegieneskalation CVE-2021-1675 Reproduktion http://k8gege.org/p/CVE-2021-1675.html Grundlegende Informationen Am 9. Juni veröffentlichte Microsoft das Sicherheitsupdate für Juni und behob 50 Sicherheitslücken, darunter eine Windows Print Spooler-Elevation of...

CVE-2023-27350

CVE-2023-27350 Questa vulnerabilità consente a un utente malintenzionato remoto di aggirare l'autenticazione su installazioni affette di PaperCut NG 22.0.5 Build 63914. Non è richiesta autenticazione per sfruttare questa vulnerabilità. Il difetto specifico risiede nella classe SetupCompleted. Il...

CVE-2020-1048

CVE-2020-1048 Eine Sicherheitsanfälligkeit bezüglich der Erhöhung von Berechtigungen besteht, wenn der Windows-Druckwarteschlangendienst Print Spooler unzulässigerweise beliebiges Schreiben in das Dateisystem erlaubt. Ein Angreifer, der diese Sicherheitsanfälligkeit erfolgreich ausnutzt, könnte...

CVE-2026-69665

SKYSEA Client View and SKYMEC IT Manager contain an issue with incorrect default permissions. If this vulnerability is exploited, an attacker who can log in to a Windows system on which the affected product is installed may execute arbitrary code with SYSTEM privilege...

CVE-2026-18263

Parallels RAS Client RDP Backend Service Exposed Dangerous Function Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Parallels RAS Client. An attacker must first obtain the ability to execute low-privileged cod...

CVE-2026-13121

Parallels RAS Client RDP Backend Service Exposed Dangerous Function Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Parallels RAS Client. An attacker must first obtain the ability to execute low-privileged cod...

CVE-2026-16157 Duplicati backup software v2.3.0.1 is vulnerable to an incorrect permission assignment vulnerability

Duplicati v2.3.0.1 backup software gives Authenticated Users MODIFY permissions that propagate to all subdirectories. Installing the software outside of the Program Files directory, or on a custom path, creates a LocalSystem service running from a directory that any standard local user can write...

MINI-X7XM-W8Q8-5R6P

Bulletin has no description...

CVE-2026-15380

A non-administrator interactive user can obtain full SYSTEM code execution through a DCOM/task scheduler logic chain — no network access, no memory corruption required ITMS 8.7.3...

CVE-2026-15380 Local privilege escalation in Symantec ITMS

A non-administrator interactive user can obtain full SYSTEM code execution through a DCOM/task scheduler logic chain — no network access, no memory corruption required ITMS 8.7.3...

EUVD-2026-45153

A non-administrator interactive user can obtain full SYSTEM code execution through a DCOM/task scheduler logic chain — no network access, no memory corruption required ITMS 8.7.3...

CVE-2026-15380 Local privilege escalation in Symantec ITMS

A non-administrator interactive user can obtain full SYSTEM code execution through a DCOM/task scheduler logic chain — no network access, no memory corruption required ITMS 8.7.3...

CVE-2026-15684

Glarysoft Glary Utilities Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Glarysoft Glary Utilities. An attacker must first obtain the ability to execute low-privileged code on the target system...

CVE-2026-15684

CVE-2026-15684 affects Glarysoft Glary Utilities. The flaw resides in the Disk Clean functionality, where an attacker who can run low-privileged code can abuse a folder junction to delete arbitrary files, enabling a local privilege escalation to SYSTEM and potential arbitrary code execution. The ...

CVE-2026-57895

Incorrect default permissions issue exists in Pupsman versions prior to 3.9.0. An attacker can place a malicious executable in the installation folder, which results in arbitrary code execution with SYSTEM privilege...

CVE-2026-56437

Uncontrolled search path element issue exists in Pupsman versions prior to 3.9.0. If a crafted DLL file is placed in the same folder as the affected installer and the installer is executed, arbitrary code may be executed with SYSTEM privilege...

EUVD-2026-42165

Uncontrolled search path element issue exists in Pupsman versions prior to 3.9.0. If a crafted DLL file is placed in the same folder as the affected installer and the installer is executed, arbitrary code may be executed with SYSTEM privilege...