CVE-2019-16098

CVE-2019-16098 此 CVE 利用 RTCore64.sys 驱动程序，通过复制 System 进程的令牌到低权限的 cmd.exe 进程，从而创建一个拥有系统权限的 cmd.exe 进程。 关于此方法及原理的博客文章可点击此处查看。...

eop24-26229

Firebeam CVE-2024-26229 插件 一个小的firebeam（kaine的RISC-V虚拟机）插件，用于利用CVE-2024-26229漏洞，该漏洞利用了csc.sys中一个有漏洞的IOCTL。 该漏洞用于获取内核读写内存访问，以破坏KTHREAD-PreviousMode，然后利用DKOM实现LPE，通过将系统进程的令牌复制到当前进程令牌。 安装可以通过Havoc客户端插件商店自动完成，或者通过git克隆到havoc客户端插件目录手动安装： root@kitploit: git clone...

EUVD-2026-58786

LimeSurvey Community Edition 7.0.5 contains an authenticated SQL injection vulnerability in the Central Participant Database CPDB workflow that copies survey participant tokens to the central participant list...

CVE-2026-18403

CVE-2026-18403 - LimeSurvey Community Edition 7.0.5 has an authenticated SQL injection vulnerability in the Central Participant Database (CPDB) workflow that copies survey participant tokens to the central participant list. Affected component is the CPDB workflow; the underlying issue is an authe...

CVE-2026-18403

LimeSurvey Community Edition 7.0.5 contains an authenticated SQL injection vulnerability in the Central Participant Database CPDB workflow that copies survey participant tokens to the central participant list...

PT-2026-72086

Name of the Vulnerable Software and Affected Versions LimeSurvey Community Edition version 7.0.5 Description An authenticated SQL injection exists in the Central Participant Database CPDB workflow. This issue occurs during the process of copying survey participant tokens to the central participan...