298 matches found
CVE-2023-36874_BOF
CVE-2023-36874 Windows Error Reporting LPE BOF مقدمة هذا هو تنفيذ ناضج وجاهز للتشغيل لـ CobaltStrike BOF لاستغلال Filip Dragovic @filipdragovic CVE-2023-36874 Windows Error Reporting LPE exploit. لقد قام بالعمل الشاق في إنشاء استغلال قابل للتشغيل عن طريق عكس الـ DLL المعرض للخطر وإنشاء هياكل COM...
CVE-2019-8805
CVE-2019-8805 Exploit pour l'élévation de privilèges du framework EndpointSecurity d'Apple CVE-2019-8805 Un problème de validation existait dans la vérification des droits d'accès entitlements. Ce problème a été corrigé en améliorant la validation des droits d'accès du processus. Ce problème est...
cve-2021-1675
〖EXP〗ثغرة رفع الصلاحيات في طابعة Ladon CVE-2021-1675 إعادة إنتاج http://k8gege.org/p/CVE-2021-1675.html المعلومات الأساسية في 9 يونيو، أصدرت Microsoft تحديث الأمان لشهر يونيو، والذي أصلح 50 ثغرة أمنية، بما في ذلك ثغرة رفع الصلاحيات في خدمة Print Spooler في Windows، برقم CVE: CVE-2021-1675. يمكن...
CVE-2020-1048
CVE-2020-1048 كود استغلال POC لـ CVE-2020-1048PrintDemon الأنظمة المعرضة للخطر جميع إصدارات Windows المذكورة في الرابط أدناه معرضة للخطر: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1048 خطوات إعادة الإنتاج 1. غيّر المتغيرين gPortName وgInputFile الموجودين في أعلى...
CVE-2023-27350
CVE-2023-27350 تسمح هذه الثغرة للمهاجمين عن بُعد بتجاوز المصادقة على التثبيتات المتأثرة من PaperCut NG الإصدار 22.0.5 Build 63914. لا يشترط المصادقة لاستغلال هذه الثغرة. يقع العيب المحدد داخل فئة SetupCompleted. تنشأ المشكلة من التحكم غير السليم في الوصول. يمكن للمهاجم استغلال هذه الثغرة لتجاوز...
CVE-2020-1048
CVE-2020-1048 توجد ثغرة أمنية من نوع رفع الامتيازات عند قيام خدمة Windows Print Spooler بالسماح بشكل غير صحيح بالكتابة العشوائية على نظام الملفات. يمكن للمهاجم الذي نجح في استغلال هذه الثغرة تشغيل كود عشوائي بامتيازات نظام مرتفعة. يمكن للمهاجم بعد ذلك تثبيت البرامج؛ أو عرض البيانات أو تغييرها أو...
CVE-2026-91812
A vulnerability in the Foxit PDF Editor/Reader update mechanism (specifically FoxitUpdater ) allows man-in-the-middle attackers to bypass certificate validation and package integrity checks . This flaw could potentially enable arbitrary code execution with system privileges . No specific remediat...
HP Advance / Output Central Authentication Bypass / File Write
HP Advance and HP Output Central contain multiple vulnerabilities in the Drivve SecureScan and MFPsecure components. Remote unauthenticated attackers can exploit archive path traversal to write arbitrary files and achieve SYSTEM code execution, forge an HTTP header to bypass a local-only...
CVE-2026-92253
WatchDog Anti-Virus 1.8.640 on Windows is affected by an improper link resolution vulnerability in its quarantine restoration process . A local, low-privileged attacker can create a directory junction at the original path of a quarantined file and, by persuading an administrator to restore that f...
CVE-2026-12518
A local privilege escalation vulnerability in the Logitech Logi Options+ updater service on Windows allows a low-privileged local user to execute arbitrary code as SYSTEM...
CVE-2026-69665
SKYSEA Client View and SKYMEC IT Manager contain an issue with incorrect default permissions. If this vulnerability is exploited, an attacker who can log in to a Windows system on which the affected product is installed may execute arbitrary code with SYSTEM privilege...
CVE-2026-18263
Parallels RAS Client RDP Backend Service Exposed Dangerous Function Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Parallels RAS Client. An attacker must first obtain the ability to execute low-privileged cod...
CVE-2026-13121
Parallels RAS Client RDP Backend Service Exposed Dangerous Function Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Parallels RAS Client. An attacker must first obtain the ability to execute low-privileged cod...
CVE-2026-18262 Parallels RAS Client RDP Backend Service Exposed Dangerous Function Local Privilege Escalation Vulnerability
Parallels RAS Client RDP Backend Service Exposed Dangerous Function Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Parallels RAS Client. An attacker must first obtain the ability to execute low-privileged cod...
Parallels RAS Client RDP Backend Service Exposed Dangerous Function Local Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of Parallels RAS Client. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the RAS RDP...
CVE-2026-13268
G DATA Total Security Backup Service Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of G DATA Total Security. An attacker must first obtain the ability to execute low-privileged code on the target...
CVE-2026-16157 Duplicati backup software v2.3.0.1 is vulnerable to an incorrect permission assignment vulnerability
Duplicati v2.3.0.1 backup software gives Authenticated Users MODIFY permissions that propagate to all subdirectories. Installing the software outside of the Program Files directory, or on a custom path, creates a LocalSystem service running from a directory that any standard local user can write...
CVE-2026-16157 Duplicati backup software v2.3.0.1 is vulnerable to an incorrect permission assignment vulnerability
Duplicati v2.3.0.1 backup software gives Authenticated Users MODIFY permissions that propagate to all subdirectories. Installing the software outside of the Program Files directory, or on a custom path, creates a LocalSystem service running from a directory that any standard local user can write...
CVE-2026-15380 Local privilege escalation in Symantec ITMS
A non-administrator interactive user can obtain full SYSTEM code execution through a DCOM/task scheduler logic chain — no network access, no memory corruption required ITMS 8.7.3...
