926 matches found
Citrix_Secure_Access_LPE_0DAY
Citric Secure Access 로컬 권한 상승 Citrix Secure Access Windows 클라이언트에서 로컬 권한 상승 취약점을 발견했습니다. 이 취약점으로 인해 권한 있는 관리자가 악성 페이로드를 주입하여 NT Authority 권한을 획득할 수 있습니다. 영향을 받는 Citrix Secure Access 버전은 23.1.1.11 이상입니다. 참고용으로 아래에서 개념 증명PoC을 확인하시기 바랍니다:...
raven
Raven Websockets용 CobaltStrike 외부 C2 추가 정보: https://www.cobaltstrike.com/help-externalc2 서버 빌드 Ubuntu 서버 폴더를 VPS에 복사합니다. 루트 또는 sudo로 ./setup.sh를 실행합니다. 클라이언트 빌드 Windows 클라이언트 폴더를 Windows 개발 호스트에 복사합니다. Windows 10, 8.1 또는 7 SDK를 설치합니다. MSBuild가 설치되어 있는지 확인하고 여기 레지스트리...
GlobalUnProtect
GlobalUnProtect Windows 클라이언트 설치에서 GlobalProtect 구성, 쿠키 및 HIP 파일을 복호화하고 수집하기 위한 PoC 도구입니다. 블로그 게시물: https://rotarydrone.medium.com/4a1d8fc7773e 사용법 독립 실행형 또는 execute-assembly 또는 이에 상응하는 방식으로 메모리 내에서 실행합니다. 모든 콘텐츠를 메모리 내 zip으로 수집하여 지정된 위치에 씁니다. root@kitploit: GlobalUnProtect.exe Usage:...
CVE-2026-3502-Scanner---TrueConf-Vulnerability-Detection-Tool
🔍 CVE-2026-3502 스캐너 - TrueConf 취약점 탐지 도구 ⚠️ 경고 교육 목적 및 승인된 테스트에만 사용하십시오. 📋 설명 CVE-2026-3502 탐지 도구입니다. 업데이트 확인 없이 TrueConf 서버를 스캔하고, 취약한 Windows 클라이언트≤8.5.3.884를 탐지하며, TrueChaos의 IOC를 검색합니다: PowerISO, 레지스트리 지속성 및 예약된 작업. 📦 설치 root@kitploit: git clone...
CVE-2020-5752-Druva-inSync-Windows-Client-6.6.3---Local-Privilege-Escalation-PowerShell-
CVE-2020-5752: Druva-inSync-Windows-Client-6.6.3---Local-Privilege-Escalation-PowerShell- Druva inSync Windows Client 6.6.3 - 로컬 권한 상승 PowerShell 시스템 권한으로 리버스 셸을 얻도록 수정됨...
CVE-2026-84386
A unverified ownership vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.7, FortiClientWindows 7.2 all versions may allow attacker to improper access control via...
PT-2026-87178
A unverified ownership vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.7, FortiClientWindows 7.2 all versions may allow attacker to improper access control via...
PALLET CONTROL products vulnerable to improper access control
Overview PALLET CONTROL products provided by JAL Digital Co.,Ltd. include multiple service programs that run in the background and provide certain functions. However, access to these service programs is not properly restricted, allowing non-administrative users to access them. Improper access...
UBUNTU-CVE-2026-68579
FreeRDP before 3.30.0 = 3.29.0 contains a heap-based buffer overflow in the Windows clipboard client's CliprdrStreamRead function client/Windows/wfcliprdr.c. When an OLE paste consumer e.g. explorer.exe calls IStream::Read with a fixed-size buffer of cb bytes, CliprdrStreamRead requests file...
CVE-2026-67305
FreeRDP Windows client before 3.29.0 contains a heap buffer overflow vulnerability in the clipboard virtual channel when processing CLIPRDRFILECONTENTSRESPONSE PDUs without validating the server-provided size against the destination buffer. A malicious RDP server can send a response with a data...
EUVD-2026-51862
FreeRDP Windows client before 3.29.0 contains a heap buffer overflow vulnerability in the clipboard virtual channel when processing CLIPRDRFILECONTENTSRESPONSE PDUs without validating the server-provided size against the destination buffer. A malicious RDP server can send a response with a data...
CVE-2026-67305
FreeRDP Windows client before 3.29.0 contains a heap buffer overflow vulnerability in the clipboard virtual channel when processing CLIPRDRFILECONTENTSRESPONSE PDUs without validating the server-provided size against the destination buffer. A malicious RDP server can send a response with a data...
CVE-2026-67305
FreeRDP Windows client (before 3.29.0) has a heap buffer overflow in the clipboard virtual channel (CLIPRDR_FILE_CONTENTS_RESPONSE PDUs) due to lack of validation of the server-provided size against the destination buffer. A malicious RDP server could send a payload larger than requested, causing...
PT-2026-67285
Name of the Vulnerable Software and Affected Versions FreeRDP Windows client versions prior to 3.29.0 Description A heap buffer overflow occurs in the clipboard virtual channel when processing CLIPRDR FILE CONTENTS RESPONSE PDUs Protocol Data Units because the server-provided size is not validate...
CVE-2026-53410
CVE-2026-53410 describes a TOCTOU race condition in the installation and uninstallation flow of certain Zoom Clients for Windows that could allow an authenticated local user to escalate privileges. Affected components include Zoom Workplace for Windows, Zoom Workplace VDI Client, Zoom Workplace V...
CVE-2026-40952
CVE-2026-40952 is a privilege misconfiguration in the Secure Access installer for the Windows client and server prior to version 14.55. Attackers with local access to the client or server can use it to elevate privileges to Administrator when Secure Access is installed in a non-default location...
CVE-2026-40952 Privilge misconfiguration in Secure Access installers
CVE-2026-40952 is a privilege misconfiguration in the Secure Access installer for the Windows client and server prior to version 14.55. Attackers with local access to the client or server can use it to elevate privileges to Administrator when Secure Access is installed in a non-default location...
EUVD-2026-44149
Use after free in Windows DHCP Client allows an unauthorized attacker to execute code locally...
