{"vulnerability": "CVE-2019-1388", "sightings": [{"uuid": "41bd9fa9-73d1-4449-b530-9d926f57dfb5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-1388", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2023-06-14T21:10:03.000000Z"}, {"uuid": "a0a29856-74a4-49bb-a150-60d1e3dd210b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-1388", "type": "seen", "source": "https://feedsin.space/feed/CISAKevBot/items/2971792", "content": "", "creation_timestamp": "2024-12-24T20:34:07.299965Z"}, {"uuid": "e982cb21-9a74-4547-9f62-e2086c57d8c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-1388", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2025-02-23T02:10:23.000000Z"}, {"uuid": "a5e644ca-645b-48c0-a184-b7e1540866c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-1388", "type": "seen", "source": "https://gist.github.com/garagon/85a72cafb243e1a793677270ca7fad6d", "content": "", "creation_timestamp": "2026-02-17T13:27:58.000000Z"}, {"uuid": "945af7ea-0167-4d46-bc4d-87abc4649fc7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-1388", "type": "seen", "source": "https://gist.github.com/josephb4224/1d49fcfaa37fb1523b5451314f37b669", "content": "", "creation_timestamp": "2026-03-16T13:31:31.000000Z"}, {"uuid": "86df30b6-be1d-45fd-be0d-3f2ba1176df6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2019-1388", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/bd82096b-94ab-4aea-8f81-d10e1e70c410", "content": "", "creation_timestamp": "2026-02-02T12:27:02.036381Z"}, {"uuid": "62df9a58-6c00-46c5-9125-89fa1459d664", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-1388", "type": "seen", "source": "https://t.me/cKure/4908", "content": "\u25a0\u25a0\u25a0\u25a0\u25a1 #Exclusive | Zero-Day: Privilege Escalation in Nvidia Control Panel.\n\nAs per the researcher, the vulnerability was identified using alert \ud83d\udce2 mechanism based on an earlier UAC bypass (CVE-2019-1388).\n\nhttps://twitter.com/_M_Shahnawaz/status/1383686714087010311", "creation_timestamp": "2021-04-18T08:00:13.000000Z"}, {"uuid": "1238b68a-d4a5-402d-b54e-ec89294864ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-1388", "type": "published-proof-of-concept", "source": "https://t.me/toolslounge/599", "content": "Windows privesec\n\n\nIntroduction\nFuzzy Security Guide: https://www.fuzzysecurity.com/tutorials/16.html\n\nPayloadAllTheThings: https://github.com/swisskyrepo/PayloadsAllTheThings/blob/master/Methodology%20and%20Resources/Windows%20-%20Privilege%20Escalation.md\n\nAbsoloom's Guide: https://www.absolomb.com/2018-01-26-Windows-Privilege-Escalation-Guide/\n\nSushant 747's Guide: https://sushant747.gitbooks.io/total-oscp-guide/privilege_escalation_windows.html\n\nGaining a Foothold\nmsfvenom: https://netsec.ws/?p=331\n\nExploring Automated Tools\nwinpeas: https://github.com/carlospolop/privilege-escalation-awesome-scripts-suite/tree/master/winPEAS\n\nWindows Priv Esc Checklist: https://book.hacktricks.xyz/windows/checklist-windows-privilege-escalation\n\nSherlock: https://github.com/rasta-mouse/Sherlock\n\nWatson: https://github.com/rasta-mouse/Watson\n\nPowerUp: https://github.com/PowerShellMafia/PowerSploit/tree/master/Privesc\n\nJAWS: https://github.com/411Hall/JAWS\n\nWindows Exploit Suggester: https://github.com/AonCyberLabs/Windows-Exploit-Suggester\n\nMetasploit Local Exploit Suggester: https://blog.rapid7.com/2015/08/11/metasploit-local-exploit-suggester-do-less-get-more/\n\nSeatbelt: https://github.com/GhostPack/Seatbelt\n\nSharpUp: https://github.com/GhostPack/SharpUp\n\nEscalation Path: Kernel Exploits\nWindows Kernel Exploits: https://github.com/SecWiki/windows-kernel-exploits\n\nKitrap0d Info: https://seclists.org/fulldisclosure/2010/Jan/341\n\nMS10-059: https://github.com/SecWiki/windows-kernel-exploits/tree/master/MS10-059\n\nEscalation Path: Passwords and Port Forwarding\nAchat Exploit: https://www.exploit-db.com/exploits/36025\n\nAchat Exploit (Metasploit): https://www.rapid7.com/db/modules/exploit/windows/misc/achat_bof\n\nPlink Download: https://www.chiark.greenend.org.uk/~sgtatham/putty/latest.html\n\nEscalation Path: Windows Subsystem for Linux\nSpawning TTY Shell: https://netsec.ws/?p=337\n\nImpacket Toolkit: https://github.com/SecureAuthCorp/impacket\n\nImpersonation and Potato Attacks\nRotten Potato: https://foxglovesecurity.com/2016/09/26/rotten-potato-privilege-escalation-from-service-accounts-to-system/\n\nJuicy Potato: https://github.com/ohpe/juicy-potato\n\nGroovy Reverse Shell: https://gist.github.com/frohoff/fed1ffaab9b9beeb1c76\n\nAlternative Data Streams: https://blog.malwarebytes.com/101/2015/07/introduction-to-alternate-data-streams/\n\nEscalation Path: getsystem\ngetsystem Explained: https://blog.cobaltstrike.com/2014/04/02/what-happens-when-i-type-getsystem/\n\nEscalation Path: Startup Applications\nicacls Docs: https://docs.microsoft.com/en-us/windows-server/administration/windows-commands/icacls\n\nEscalation Path: CVE-2019-1388\nZeroDayInitiative CVE-2019-1388: https://www.youtube.com/watch?v=3BQKpPNlTSo\n\nRapid7 CVE-2019-1388: https://www.rapid7.com/db/vulnerabilities/msft-cve-2019-1388\n\nCapstone Challenge\nBasic Powershell for Pentesters: https://book.hacktricks.xyz/windows/basic-powershell-for-pentesters\n\nMounting VHD Files: \n\nCapturing MSSQL Creds: \n\nSursa: https://github.com/Gr1mmie/Windows-Privilege-Escalation-Resources/blob/master/README.md", "creation_timestamp": "2021-09-28T02:31:01.000000Z"}, {"uuid": "1959112e-603f-489d-96c8-a3331d98cf35", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-1388", "type": "seen", "source": "https://t.me/pt_soft/243", "content": "\ud83d\uddbc\ufe0f Moriarty v1.1\n\n\u0427\u0435\u043a\u0435\u0440 CVEs \u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043d\u0430\u043f\u0438\u0441\u0430\u043d\u043d\u044b\u0439 \u043d\u0430 C# \u0434\u043b\u044f \u041e\u0421 \ud83c\udfe0 Windows\n\n\u041f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u043c\u044b\u0435 \u0432\u0435\u0440\u0441\u0438\u0438:\nWindows 10 (Versions: 1507, 1511, 1607, 1703, 1709, 1803, 1809, 1903, 1909, 2004, 20H2, 21H1, 21H2, 22H1, 22H2)\nWindows 11 (Versions: 21H2, 22H1, 22H2, 23H1)\nWindows Server 2016, 2019, 2022\n\n\u0421\u043f\u0438\u0441\u043e\u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 (35):\nMS10-015\nMS10-092\nMS13-053\nMS13-081\nMS14-058\nMS15-051\nMS15-078\nMS16-016\nMS16-032\nMS16-034\nMS16-135\nCVE-2017-7199\nCVE-2019-0836\nCVE-2019-0836\nCVE-2019-1064\nCVE-2019-1130\nCVE-2019-1253\nCVE-2019-1315\nCVE-2019-1385\nCVE-2019-1388\nCVE-2019-1405\nCVE-2020-0668\nCVE-2020-0683\nCVE-2020-0796\nCVE-2020-1013\nCVE-2020-1013\nCVE-2021-26855\nCVE-2021-26857\nCVE-2021-26858\nCVE-2021-27065\nCVE-2021-44228\nCVE-2021-36934\nCVE-2022-40140\nCVE-2022-22965\nCVE-2023-36664\n\n\ud83d\udc49 \u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439\n\n\u0422\u0430\u043a\u0436\u0435 \u0431\u043e\u0442 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u0442 \u043f\u043e\u0438\u0441\u043a \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u043e\u0432 \u043f\u043e CVE\n\n!poc CVE-2019-1064\n\n\ud83d\udcbb Home\n\n\u0414\u043b\u044f \u0441\u0431\u043e\u0440\u043a\u0438 \u043f\u043e\u043d\u0430\u0434\u043e\u0431\u0438\u0442\u0441\u044f Visual Studio \u0438 .NET Framework 4.8 Developer Pack\n\n#moriarty #checker #csharp\n\n\u2708\ufe0f // Pentest HaT \ud83c\udfa9", "creation_timestamp": "2024-03-15T08:58:02.000000Z"}, {"uuid": "256018be-26e5-4332-9f5f-d1c2f4b9c65c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-1388", "type": "published-proof-of-concept", "source": "https://t.me/pt_soft/270", "content": "\ud83d\uddbc\ufe0f \ud83d\udd04 Moriarty v1.2\n\n\u0427\u0435\u043a\u0435\u0440 CVEs \u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043d\u0430\u043f\u0438\u0441\u0430\u043d\u043d\u044b\u0439 \u043d\u0430 C# \u0434\u043b\u044f \u041e\u0421 \ud83c\udfe0 Windows\n\n\u041f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u043c\u044b\u0435 \u0432\u0435\u0440\u0441\u0438\u0438:\nWindows 10 (Versions: 1507, 1511, 1607, 1703, 1709, 1803, 1809, 1903, 1909, 2004, 20H2, 21H1, 21H2, 22H1, 22H2)\nWindows 11 (Versions: 21H2, 22H1, 22H2, 23H1)\nWindows Server 2016, 2019, 2022\n\n\u0421\u043f\u0438\u0441\u043e\u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 (35):\nMS10-015\nMS10-092\nMS13-053\nMS13-081\nMS14-058\nMS15-051\nMS15-078\nMS16-016\nMS16-032\nMS16-034\nMS16-135\nCVE-2017-7199\nCVE-2019-0836\nCVE-2019-0836\nCVE-2019-1064\nCVE-2019-1130\nCVE-2019-1253\nCVE-2019-1315\nCVE-2019-1385\nCVE-2019-1388\nCVE-2019-1405\nCVE-2020-0668\nCVE-2020-0683\nCVE-2020-0796\nCVE-2020-1013\nCVE-2020-1013\nCVE-2021-26855\nCVE-2021-26857\nCVE-2021-26858\nCVE-2021-27065\nCVE-2021-44228\nCVE-2021-36934\nCVE-2022-40140\nCVE-2022-22965\nCVE-2023-36664\n\n1.2 added:\n2023-23397\n2022-34718\n\n\ud83d\udc49 \u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439\n\n\u0422\u0430\u043a\u0436\u0435 \u0431\u043e\u0442 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u0442 \u043f\u043e\u0438\u0441\u043a \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u043e\u0432 \u043f\u043e CVE\n\n!poc CVE-2019-1064\n\n\ud83d\udcbb Home\n\n\u0414\u043b\u044f \u0441\u0431\u043e\u0440\u043a\u0438 \u043f\u043e\u043d\u0430\u0434\u043e\u0431\u0438\u0442\u0441\u044f Visual Studio \u0438 .NET Framework 4.8 Developer Pack\n\n#moriarty #checker #csharp\n\n\u2708\ufe0f // Pentest HaT \ud83c\udfa9", "creation_timestamp": "2024-05-03T09:04:40.000000Z"}, {"uuid": "e88f38b5-780b-42a9-8c20-4d36fe5120dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-1388", "type": "seen", "source": "https://t.me/arpsyndicate/1468", "content": "#ExploitObserverAlert\n\nCVE-2019-1388\n\nDESCRIPTION: Exploit Observer has 78 entries related to CVE-2019-1388. An elevation of privilege vulnerability exists in the Windows Certificate Dialog when it does not properly enforce user privileges, aka 'Windows Certificate Dialog Elevation of Privilege Vulnerability'.\n\nFIRST-EPSS: 0.171910000\nNVD-IS: 5.9\nNVD-ES: 1.8", "creation_timestamp": "2023-12-05T11:45:30.000000Z"}, {"uuid": "d51bcaa0-aa2f-418b-b037-f86e40b5f334", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-1388", "type": "seen", "source": "https://t.me/RAT070/597", "content": "Windows Privilege Escalation For Beginners\n\nThis course focuses on Windows privilege escalation tactics and techniques to help you improve your skills in attacking Windows systems. Improvement\n\n\ud83d\udccd  Kernel Exploits\n\ud83d\udccd  Password Hunting\n\ud83d\udccd  Impersonation Attacks\n\ud83d\udccd  Registry Attacks\n\ud83d\udccd  Executable Files\n\ud83d\udccd  Schedule Tasks\n\ud83d\udccd  Startup Applications\n\ud83d\udccd  DLL Hijacking  Service Permissions\n\ud83d\udccd  Windows Subsystem for Linux\n\ud83d\udccd  CVE-2019-1388", "creation_timestamp": "2023-05-12T09:54:57.000000Z"}, {"uuid": "7d59bd5e-946f-4306-b262-9794a779242c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-1388", "type": "published-proof-of-concept", "source": "Telegram/9EewWGivPEadUZwJZS1FdIkYKAoiejsifhi1Dxh8-JW-", "content": "", "creation_timestamp": "2021-10-03T15:10:30.000000Z"}, {"uuid": "deeecdcc-5fb3-4e9b-aa0f-171dc7368c4a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-1388", "type": "published-proof-of-concept", "source": "https://t.me/ethicalhackx/675", "content": "Windows privesec\n\n\nIntroduction\nFuzzy Security Guide: https://www.fuzzysecurity.com/tutorials/16.html\n\nPayloadAllTheThings: https://github.com/swisskyrepo/PayloadsAllTheThings/blob/master/Methodology%20and%20Resources/Windows%20-%20Privilege%20Escalation.md\n\nAbsoloom's Guide: https://www.absolomb.com/2018-01-26-Windows-Privilege-Escalation-Guide/\n\nSushant 747's Guide: https://sushant747.gitbooks.io/total-oscp-guide/privilege_escalation_windows.html\n\nGaining a Foothold\nmsfvenom: https://netsec.ws/?p=331\n\nExploring Automated Tools\nwinpeas: https://github.com/carlospolop/privilege-escalation-awesome-scripts-suite/tree/master/winPEAS\n\nWindows Priv Esc Checklist: https://book.hacktricks.xyz/windows/checklist-windows-privilege-escalation\n\nSherlock: https://github.com/rasta-mouse/Sherlock\n\nWatson: https://github.com/rasta-mouse/Watson\n\nPowerUp: https://github.com/PowerShellMafia/PowerSploit/tree/master/Privesc\n\nJAWS: https://github.com/411Hall/JAWS\n\nWindows Exploit Suggester: https://github.com/AonCyberLabs/Windows-Exploit-Suggester\n\nMetasploit Local Exploit Suggester: https://blog.rapid7.com/2015/08/11/metasploit-local-exploit-suggester-do-less-get-more/\n\nSeatbelt: https://github.com/GhostPack/Seatbelt\n\nSharpUp: https://github.com/GhostPack/SharpUp\n\nEscalation Path: Kernel Exploits\nWindows Kernel Exploits: https://github.com/SecWiki/windows-kernel-exploits\n\nKitrap0d Info: https://seclists.org/fulldisclosure/2010/Jan/341\n\nMS10-059: https://github.com/SecWiki/windows-kernel-exploits/tree/master/MS10-059\n\nEscalation Path: Passwords and Port Forwarding\nAchat Exploit: https://www.exploit-db.com/exploits/36025\n\nAchat Exploit (Metasploit): https://www.rapid7.com/db/modules/exploit/windows/misc/achat_bof\n\nPlink Download: https://www.chiark.greenend.org.uk/~sgtatham/putty/latest.html\n\nEscalation Path: Windows Subsystem for Linux\nSpawning TTY Shell: https://netsec.ws/?p=337\n\nImpacket Toolkit: https://github.com/SecureAuthCorp/impacket\n\nImpersonation and Potato Attacks\nRotten Potato: https://foxglovesecurity.com/2016/09/26/rotten-potato-privilege-escalation-from-service-accounts-to-system/\n\nJuicy Potato: https://github.com/ohpe/juicy-potato\n\nGroovy Reverse Shell: https://gist.github.com/frohoff/fed1ffaab9b9beeb1c76\n\nAlternative Data Streams: https://blog.malwarebytes.com/101/2015/07/introduction-to-alternate-data-streams/\n\nEscalation Path: getsystem\ngetsystem Explained: https://blog.cobaltstrike.com/2014/04/02/what-happens-when-i-type-getsystem/\n\nEscalation Path: Startup Applications\nicacls Docs: https://docs.microsoft.com/en-us/windows-server/administration/windows-commands/icacls\n\nEscalation Path: CVE-2019-1388\nZeroDayInitiative CVE-2019-1388: https://www.youtube.com/watch?v=3BQKpPNlTSo\n\nRapid7 CVE-2019-1388: https://www.rapid7.com/db/vulnerabilities/msft-cve-2019-1388\n\nCapstone Challenge\nBasic Powershell for Pentesters: https://book.hacktricks.xyz/windows/basic-powershell-for-pentesters\n\nMounting VHD Files: \n\nCapturing MSSQL Creds: \n\nSursa: https://github.com/Gr1mmie/Windows-Privilege-Escalation-Resources/blob/master/README.md", "creation_timestamp": "2022-04-19T05:40:03.000000Z"}, {"uuid": "fafdc713-18f5-4618-997f-b774a003ea6a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-1388", "type": "seen", "source": "https://t.me/ctinow/182810", "content": "https://ift.tt/0NsKpa6\nCVE-2019-1388 | Microsoft Windows up to Server 2019 Certificate Dialog privileges management", "creation_timestamp": "2024-02-11T15:06:54.000000Z"}, {"uuid": "bbdee769-82ee-4962-a119-be04fee77f3d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-1388", "type": "published-proof-of-concept", "source": "https://t.me/reverse_dungeon/2258", "content": "https://github.com/jas502n/CVE-2019-1388", "creation_timestamp": "2022-08-02T13:36:46.000000Z"}, {"uuid": "70e5c205-ec5f-4f79-b7a7-511424d3543c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-1388", "type": "seen", "source": "https://t.me/haccking/101419", "content": "#\u041e\u0431\u0443\u0447\u0435\u043d\u0438\u0435\n\u0417\u0430\u0447\u0435\u043c \u043d\u0443\u0436\u043d\u043e \u043d\u0430\u043a\u0430\u0442\u044b\u0432\u0430\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f Windows (CVE-2019-1388)", "creation_timestamp": "2021-09-15T12:00:20.000000Z"}, {"uuid": "e64db1cb-9094-4454-b1a6-35d4613ee1ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-1388", "type": "seen", "source": "https://t.me/haccking/6724", "content": "#\u041e\u0431\u0443\u0447\u0435\u043d\u0438\u0435\n\u0417\u0430\u0447\u0435\u043c \u043d\u0443\u0436\u043d\u043e \u043d\u0430\u043a\u0430\u0442\u044b\u0432\u0430\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f Windows (CVE-2019-1388)", "creation_timestamp": "2022-11-03T10:24:43.000000Z"}, {"uuid": "7623c84c-f19a-4983-aee1-a6adb5705f09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-1388", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/482", "content": "#exploit\n1. CVE-2019-11157:\nPlundervolt - Software-based Fault injection attacks against Intel SGX\nhttps://www.plundervolt.com\nhttps://github.com/KitMurdock/plundervolt\n\n2. CVE-2019-1388:\nWindows Certificate Dialog\u00a0EoP\nhttps://github.com/jas502n/CVE-2019-1388\n\n3. CVE-2019-10149:\nA flaw was found in Exim 4.87 - 4.91. Improper validation of recipient address in deliver_message() function in /src/deliver.c may lead to RCE\nhttps://github.com/Diefunction/CVE-2019-10149", "creation_timestamp": "2024-10-14T20:57:38.000000Z"}, {"uuid": "782b4f13-fed7-42f2-b5b4-029675034228", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-1388", "type": "seen", "source": "https://t.me/wh_lab/59", "content": "\ud83d\uddbc\ufe0f \ud83d\udd04 Moriarty v1.2\n\n\u0427\u0435\u043a\u0435\u0440 CVEs \u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043d\u0430\u043f\u0438\u0441\u0430\u043d\u043d\u044b\u0439 \u043d\u0430 C# \u0434\u043b\u044f \u041e\u0421 \ud83c\udfe0 Windows\n\n\u041f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u043c\u044b\u0435 \u0432\u0435\u0440\u0441\u0438\u0438:\n\nWindows 10 (Versions: 1507, 1511, 1607, 1703, 1709, 1803, 1809, 1903, 1909, 2004, 20H2, 21H1, 21H2, 22H1, 22H2)\nWindows 11 (Versions: 21H2, 22H1, 22H2, 23H1)\nWindows Server 2016, 2019, 2022\n\n\u0421\u043f\u0438\u0441\u043e\u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 (35):\n\nMS10-015\nMS10-092\nMS13-053\nMS13-081\nMS14-058\nMS15-051\nMS15-078\nMS16-016\nMS16-032\nMS16-034\nMS16-135\nCVE-2017-7199\nCVE-2019-0836\nCVE-2019-0836\nCVE-2019-1064\nCVE-2019-1130\nCVE-2019-1253\nCVE-2019-1315\nCVE-2019-1385\nCVE-2019-1388\nCVE-2019-1405\nCVE-2020-0668\nCVE-2020-0683\nCVE-2020-0796\nCVE-2020-1013\nCVE-2020-1013\nCVE-2021-26855\nCVE-2021-26857\nCVE-2021-26858\nCVE-2021-27065\nCVE-2021-44228\nCVE-2021-36934\nCVE-2022-40140\nCVE-2022-22965\nCVE-2023-36664\n\n1.2 added:\n2023-23397\n2022-34718\n\n\ud83d\udc49 \u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439\n\n\u0422\u0430\u043a\u0436\u0435 \u0431\u043e\u0442 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u0442 \u043f\u043e\u0438\u0441\u043a \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u043e\u0432 \u043f\u043e CVE\n\n!poc CVE-2019-1064\n\n\ud83d\udcbb Home\n\n\u0414\u043b\u044f \u0441\u0431\u043e\u0440\u043a\u0438 \u043f\u043e\u043d\u0430\u0434\u043e\u0431\u0438\u0442\u0441\u044f Visual Studio \u0438 .NET Framework 4.8 Developer Pack\n\n#moriarty #checker #csharp\n\n\u2708\ufe0f Whitehat Lab", "creation_timestamp": "2026-08-04T13:00:24.039418Z"}, {"uuid": "1823823a-c8a1-412d-a575-e6a652538d68", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-1388", "type": "seen", "source": "https://t.me/wh_lab/59", "content": "\ud83d\uddbc\ufe0f \ud83d\udd04 Moriarty v1.2\n\n\u0427\u0435\u043a\u0435\u0440 CVEs \u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043d\u0430\u043f\u0438\u0441\u0430\u043d\u043d\u044b\u0439 \u043d\u0430 C# \u0434\u043b\u044f \u041e\u0421 \ud83c\udfe0 Windows\n\n\u041f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u043c\u044b\u0435 \u0432\u0435\u0440\u0441\u0438\u0438:\n\nWindows 10 (Versions: 1507, 1511, 1607, 1703, 1709, 1803, 1809, 1903, 1909, 2004, 20H2, 21H1, 21H2, 22H1, 22H2)\nWindows 11 (Versions: 21H2, 22H1, 22H2, 23H1)\nWindows Server 2016, 2019, 2022\n\n\u0421\u043f\u0438\u0441\u043e\u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 (35):\n\nMS10-015\nMS10-092\nMS13-053\nMS13-081\nMS14-058\nMS15-051\nMS15-078\nMS16-016\nMS16-032\nMS16-034\nMS16-135\nCVE-2017-7199\nCVE-2019-0836\nCVE-2019-0836\nCVE-2019-1064\nCVE-2019-1130\nCVE-2019-1253\nCVE-2019-1315\nCVE-2019-1385\nCVE-2019-1388\nCVE-2019-1405\nCVE-2020-0668\nCVE-2020-0683\nCVE-2020-0796\nCVE-2020-1013\nCVE-2020-1013\nCVE-2021-26855\nCVE-2021-26857\nCVE-2021-26858\nCVE-2021-27065\nCVE-2021-44228\nCVE-2021-36934\nCVE-2022-40140\nCVE-2022-22965\nCVE-2023-36664\n\n1.2 added:\n2023-23397\n2022-34718\n\n\ud83d\udc49 \u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439\n\n\u0422\u0430\u043a\u0436\u0435 \u0431\u043e\u0442 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u0442 \u043f\u043e\u0438\u0441\u043a \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u043e\u0432 \u043f\u043e CVE\n\n!poc CVE-2019-1064\n\n\ud83d\udcbb Home\n\n\u0414\u043b\u044f \u0441\u0431\u043e\u0440\u043a\u0438 \u043f\u043e\u043d\u0430\u0434\u043e\u0431\u0438\u0442\u0441\u044f Visual Studio \u0438 .NET Framework 4.8 Developer Pack\n\n#moriarty #checker #csharp\n\n\u2708\ufe0f Whitehat Lab", "creation_timestamp": "2026-08-05T00:00:40.290691Z"}, {"uuid": "42ec4dbd-cadc-4e29-b516-d3889d25163b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-1388", "type": "seen", "source": "https://t.me/toolslounge/78", "content": "Windows privesec\n\n\nIntroduction\nFuzzy Security Guide: https://www.fuzzysecurity.com/tutorials/16.html\n\nPayloadAllTheThings: https://github.com/swisskyrepo/PayloadsAllTheThings/blob/master/Methodology%20and%20Resources/Windows%20-%20Privilege%20Escalation.md\n\nAbsoloom's Guide: https://www.absolomb.com/2018-01-26-Windows-Privilege-Escalation-Guide/\n\nSushant 747's Guide: https://sushant747.gitbooks.io/total-oscp-guide/privilege_escalation_windows.html\n\nGaining a Foothold\nmsfvenom: https://netsec.ws/?p=331\n\nExploring Automated Tools\nwinpeas: https://github.com/carlospolop/privilege-escalation-awesome-scripts-suite/tree/master/winPEAS\n\nWindows Priv Esc Checklist: https://book.hacktricks.xyz/windows/checklist-windows-privilege-escalation\n\nSherlock: https://github.com/rasta-mouse/Sherlock\n\nWatson: https://github.com/rasta-mouse/Watson\n\nPowerUp: https://github.com/PowerShellMafia/PowerSploit/tree/master/Privesc\n\nJAWS: https://github.com/411Hall/JAWS\n\nWindows Exploit Suggester: https://github.com/AonCyberLabs/Windows-Exploit-Suggester\n\nMetasploit Local Exploit Suggester: https://blog.rapid7.com/2015/08/11/metasploit-local-exploit-suggester-do-less-get-more/\n\nSeatbelt: https://github.com/GhostPack/Seatbelt\n\nSharpUp: https://github.com/GhostPack/SharpUp\n\nEscalation Path: Kernel Exploits\nWindows Kernel Exploits: https://github.com/SecWiki/windows-kernel-exploits\n\nKitrap0d Info: https://seclists.org/fulldisclosure/2010/Jan/341\n\nMS10-059: https://github.com/SecWiki/windows-kernel-exploits/tree/master/MS10-059\n\nEscalation Path: Passwords and Port Forwarding\nAchat Exploit: https://www.exploit-db.com/exploits/36025\n\nAchat Exploit (Metasploit): https://www.rapid7.com/db/modules/exploit/windows/misc/achat_bof\n\nPlink Download: https://www.chiark.greenend.org.uk/~sgtatham/putty/latest.html\n\nEscalation Path: Windows Subsystem for Linux\nSpawning TTY Shell: https://netsec.ws/?p=337\n\nImpacket Toolkit: https://github.com/SecureAuthCorp/impacket\n\nImpersonation and Potato Attacks\nRotten Potato: https://foxglovesecurity.com/2016/09/26/rotten-potato-privilege-escalation-from-service-accounts-to-system/\n\nJuicy Potato: https://github.com/ohpe/juicy-potato\n\nGroovy Reverse Shell: https://gist.github.com/frohoff/fed1ffaab9b9beeb1c76\n\nAlternative Data Streams: https://blog.malwarebytes.com/101/2015/07/introduction-to-alternate-data-streams/\n\nEscalation Path: getsystem\ngetsystem Explained: https://blog.cobaltstrike.com/2014/04/02/what-happens-when-i-type-getsystem/\n\nEscalation Path: Startup Applications\nicacls Docs: https://docs.microsoft.com/en-us/windows-server/administration/windows-commands/icacls\n\nEscalation Path: CVE-2019-1388\nZeroDayInitiative CVE-2019-1388: https://www.youtube.com/watch?v=3BQKpPNlTSo\n\nRapid7 CVE-2019-1388: https://www.rapid7.com/db/vulnerabilities/msft-cve-2019-1388\n\nCapstone Challenge\nBasic Powershell for Pentesters: https://book.hacktricks.xyz/windows/basic-powershell-for-pentesters\n\nMounting VHD Files: \n\nCapturing MSSQL Creds: \n\nSursa: https://github.com/Gr1mmie/Windows-Privilege-Escalation-Resources/blob/master/README.md", "creation_timestamp": "2021-09-28T02:31:00.000000Z"}, {"uuid": "d6098ab3-ae1d-4045-9592-9debbdca27df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-1388", "type": "published-proof-of-concept", "source": "https://t.me/wh_lab/59", "content": "\ud83d\uddbc\ufe0f \ud83d\udd04 Moriarty v1.2\n\n\u0427\u0435\u043a\u0435\u0440 CVEs \u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043d\u0430\u043f\u0438\u0441\u0430\u043d\u043d\u044b\u0439 \u043d\u0430 C# \u0434\u043b\u044f \u041e\u0421 \ud83c\udfe0 Windows\n\n\u041f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u043c\u044b\u0435 \u0432\u0435\u0440\u0441\u0438\u0438:\n\nWindows 10 (Versions: 1507, 1511, 1607, 1703, 1709, 1803, 1809, 1903, 1909, 2004, 20H2, 21H1, 21H2, 22H1, 22H2)\nWindows 11 (Versions: 21H2, 22H1, 22H2, 23H1)\nWindows Server 2016, 2019, 2022\n\n\u0421\u043f\u0438\u0441\u043e\u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 (35):\n\nMS10-015\nMS10-092\nMS13-053\nMS13-081\nMS14-058\nMS15-051\nMS15-078\nMS16-016\nMS16-032\nMS16-034\nMS16-135\nCVE-2017-7199\nCVE-2019-0836\nCVE-2019-0836\nCVE-2019-1064\nCVE-2019-1130\nCVE-2019-1253\nCVE-2019-1315\nCVE-2019-1385\nCVE-2019-1388\nCVE-2019-1405\nCVE-2020-0668\nCVE-2020-0683\nCVE-2020-0796\nCVE-2020-1013\nCVE-2020-1013\nCVE-2021-26855\nCVE-2021-26857\nCVE-2021-26858\nCVE-2021-27065\nCVE-2021-44228\nCVE-2021-36934\nCVE-2022-40140\nCVE-2022-22965\nCVE-2023-36664\n\n1.2 added:\n2023-23397\n2022-34718\n\n\ud83d\udc49 \u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439\n\n\u0422\u0430\u043a\u0436\u0435 \u0431\u043e\u0442 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u0442 \u043f\u043e\u0438\u0441\u043a \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u043e\u0432 \u043f\u043e CVE\n\n!poc CVE-2019-1064\n\n\ud83d\udcbb Home\n\n\u0414\u043b\u044f \u0441\u0431\u043e\u0440\u043a\u0438 \u043f\u043e\u043d\u0430\u0434\u043e\u0431\u0438\u0442\u0441\u044f Visual Studio \u0438 .NET Framework 4.8 Developer Pack\n\n#moriarty #checker #csharp\n\n\u2708\ufe0f Whitehat Lab", "creation_timestamp": "2026-08-06T00:00:43.530450Z"}, {"uuid": "89d1114d-7c6b-4e60-9765-3b89de2c76ad", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-1388", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/5b38d25a-1a3c-4bdf-a50d-e9a9386763f2", "content": "", "creation_timestamp": "2026-06-19T12:46:57.014196Z"}, {"uuid": "0e5a08f9-6a1a-4300-822e-30139ebd3c16", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-1388", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/d1b08243-a412-4b51-80bf-9d1651693ff2", "content": "", "creation_timestamp": "2026-06-23T14:05:38.939398Z"}, {"uuid": "87ca25a8-235b-4253-8396-c3d0a05c7567", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-1388", "type": "seen", "source": "https://t.me/EchelonEyes/1405", "content": "CISA \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442 \u043e 5 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445\n\n\u0410\u0433\u0435\u043d\u0442\u0441\u0442\u0432\u043e \u0421\u0428\u0410 \u043f\u043e \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b (CISA) \u0434\u043e\u0431\u0430\u0432\u0438\u043b\u043e \u043f\u044f\u0442\u044c \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u0432 \u0432 \u0441\u0432\u043e\u0439 \u043a\u0430\u0442\u0430\u043b\u043e\u0433 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439. \n\n\u0421\u0440\u0435\u0434\u0438 \u043d\u0438\u0445 \u0442\u0440\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043e\u0442\u043d\u043e\u0441\u044f\u0442\u0441\u044f \u043a \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u043c\u0443 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044e \u0434\u043b\u044f \u0437\u0430\u0449\u0438\u0442\u044b \u0434\u0430\u043d\u043d\u044b\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u0441\u043e \u0441\u043c\u0435\u0448\u0430\u043d\u043d\u044b\u043c\u0438 \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u0438\u043c\u0438 \u0438 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u043c\u0438 \u0441\u0440\u0435\u0434\u0430\u043c\u0438 Veritas Backup Exec Agent:\n\nCVE-2021-27876 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 8,1) \u2014 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0444\u0430\u0439\u043b\u0430\u043c \u0430\u0433\u0435\u043d\u0442\u0430 Veritas Backup Exec; \n\nCVE-2021-27877 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 8,2) \u2014 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u043a, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0439 \u0441 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0435\u0439;\n\nCVE-2021-27878 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 8,8) \u2014 \u043e\u0448\u0438\u0431\u043a\u0430, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0436\u0435\u0440\u0442\u0432\u044b. \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u043a\u043e\u043c\u0430\u043d\u0434.\n\n\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438 \u0431\u044b\u043b\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b \u0432 \u043f\u0430\u0442\u0447\u0435, \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u043d\u043e\u043c Veritas \u0432 \u043c\u0430\u0440\u0442\u0435 2021 \u0433\u043e\u0434\u0430, \u043e\u0434\u043d\u0430\u043a\u043e \u0434\u043e \u0441\u0438\u0445 \u043f\u043e\u0440, \u0432\u0438\u0434\u0438\u043c\u043e, \u043d\u0435 \u0432\u0441\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043e\u0431\u043d\u043e\u0432\u0438\u043b\u0438\u0441\u044c.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 Mandiant, \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0430-\u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u044c BlackCat \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u0430 \u043d\u0430 \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 Veritas Backup Exec, \u0447\u0442\u043e\u0431\u044b \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044f \u0442\u0440\u0438 \u0432\u044b\u0448\u0435\u0443\u043f\u043e\u043c\u044f\u043d\u0443\u0442\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438.\n\n\u0422\u0430\u043a\u0436\u0435 CISA \u0434\u043e\u0431\u0430\u0432\u0438\u043b\u0430 \u0432 \u043a\u0430\u0442\u0430\u043b\u043e\u0433 \u043e\u0448\u0438\u0431\u043a\u0443 \u0441 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u043e\u043c CVE-2019-1388 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 7,8), \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0443\u044e \u0441 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435\u043c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u043b\u0438\u044f\u0435\u0442 \u043d\u0430 \u0434\u0438\u0430\u043b\u043e\u0433\u043e\u0432\u043e\u0435 \u043e\u043a\u043d\u043e \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u0430 Microsoft Windows \u0438 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0434\u043b\u044f \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0432 \u0441 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u043d\u044b\u043c\u0438 \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u0438\u044f\u043c\u0438 \u043d\u0430 \u0443\u0436\u0435 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c \u0445\u043e\u0441\u0442\u0435.\n\n\u041f\u044f\u0442\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u0430\u044f \u0432 \u0441\u043f\u0438\u0441\u043e\u043a, \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u0435\u043c \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0432 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0435 \u044f\u0434\u0440\u0430 \u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0430 Arm Mali. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043f\u043e\u0434 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u043e\u043c CVE-2023-26083. \u041e\u043d\u0430 \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438 Google \u043c\u0435\u0441\u044f\u0446 \u043d\u0430\u0437\u0430\u0434. \u0415\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043b \u043d\u0435\u043d\u0430\u0437\u0432\u0430\u043d\u043d\u044b\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u0448\u043f\u0438\u043e\u043d\u0441\u043a\u043e\u0439 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438, \u0432 \u0445\u043e\u0434\u0435 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043e\u043d \u0432\u0437\u043b\u0430\u043c\u044b\u0432\u0430\u043b \u0441\u043c\u0430\u0440\u0442\u0444\u043e\u043d\u044b Samsung. \n\n\u0412\u0441\u0435\u043c \u0444\u0435\u0434\u0435\u0440\u0430\u043b\u044c\u043d\u044b\u043c \u0430\u0433\u0435\u043d\u0442\u0441\u0442\u0432\u0430\u043c \u0434\u0430\u043d\u043e \u0432\u0440\u0435\u043c\u044f \u0434\u043e 28 \u0430\u043f\u0440\u0435\u043b\u044f, \u0447\u0442\u043e\u0431\u044b \u043f\u0435\u0440\u0435\u0439\u0442\u0438 \u043d\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u044b\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u041f\u041e.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://www.cisa.gov/news-events/alerts/2023/04/07/cisa-adds-five-known-exploited-vulnerabilities-catalog\n\n#CISA #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c", "creation_timestamp": "2026-07-26T02:02:28.440353Z"}, {"uuid": "abbfeb35-7b56-460c-915d-32dc490b6f9b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-1388", "type": "seen", "source": "https://t.me/EchelonEyes/1405", "content": "CISA \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442 \u043e 5 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445\n\n\u0410\u0433\u0435\u043d\u0442\u0441\u0442\u0432\u043e \u0421\u0428\u0410 \u043f\u043e \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b (CISA) \u0434\u043e\u0431\u0430\u0432\u0438\u043b\u043e \u043f\u044f\u0442\u044c \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u0432 \u0432 \u0441\u0432\u043e\u0439 \u043a\u0430\u0442\u0430\u043b\u043e\u0433 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439. \n\n\u0421\u0440\u0435\u0434\u0438 \u043d\u0438\u0445 \u0442\u0440\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043e\u0442\u043d\u043e\u0441\u044f\u0442\u0441\u044f \u043a \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u043c\u0443 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044e \u0434\u043b\u044f \u0437\u0430\u0449\u0438\u0442\u044b \u0434\u0430\u043d\u043d\u044b\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u0441\u043e \u0441\u043c\u0435\u0448\u0430\u043d\u043d\u044b\u043c\u0438 \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u0438\u043c\u0438 \u0438 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u043c\u0438 \u0441\u0440\u0435\u0434\u0430\u043c\u0438 Veritas Backup Exec Agent:\n\nCVE-2021-27876 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 8,1) \u2014 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0444\u0430\u0439\u043b\u0430\u043c \u0430\u0433\u0435\u043d\u0442\u0430 Veritas Backup Exec; \n\nCVE-2021-27877 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 8,2) \u2014 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u043a, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0439 \u0441 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0435\u0439;\n\nCVE-2021-27878 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 8,8) \u2014 \u043e\u0448\u0438\u0431\u043a\u0430, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0436\u0435\u0440\u0442\u0432\u044b. \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u043a\u043e\u043c\u0430\u043d\u0434.\n\n\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438 \u0431\u044b\u043b\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b \u0432 \u043f\u0430\u0442\u0447\u0435, \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u043d\u043e\u043c Veritas \u0432 \u043c\u0430\u0440\u0442\u0435 2021 \u0433\u043e\u0434\u0430, \u043e\u0434\u043d\u0430\u043a\u043e \u0434\u043e \u0441\u0438\u0445 \u043f\u043e\u0440, \u0432\u0438\u0434\u0438\u043c\u043e, \u043d\u0435 \u0432\u0441\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043e\u0431\u043d\u043e\u0432\u0438\u043b\u0438\u0441\u044c.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 Mandiant, \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0430-\u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u044c BlackCat \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u0430 \u043d\u0430 \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 Veritas Backup Exec, \u0447\u0442\u043e\u0431\u044b \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044f \u0442\u0440\u0438 \u0432\u044b\u0448\u0435\u0443\u043f\u043e\u043c\u044f\u043d\u0443\u0442\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438.\n\n\u0422\u0430\u043a\u0436\u0435 CISA \u0434\u043e\u0431\u0430\u0432\u0438\u043b\u0430 \u0432 \u043a\u0430\u0442\u0430\u043b\u043e\u0433 \u043e\u0448\u0438\u0431\u043a\u0443 \u0441 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u043e\u043c CVE-2019-1388 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 7,8), \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0443\u044e \u0441 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435\u043c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u043b\u0438\u044f\u0435\u0442 \u043d\u0430 \u0434\u0438\u0430\u043b\u043e\u0433\u043e\u0432\u043e\u0435 \u043e\u043a\u043d\u043e \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u0430 Microsoft Windows \u0438 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0434\u043b\u044f \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0432 \u0441 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u043d\u044b\u043c\u0438 \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u0438\u044f\u043c\u0438 \u043d\u0430 \u0443\u0436\u0435 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c \u0445\u043e\u0441\u0442\u0435.\n\n\u041f\u044f\u0442\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u0430\u044f \u0432 \u0441\u043f\u0438\u0441\u043e\u043a, \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u0435\u043c \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0432 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0435 \u044f\u0434\u0440\u0430 \u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0430 Arm Mali. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043f\u043e\u0434 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u043e\u043c CVE-2023-26083. \u041e\u043d\u0430 \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438 Google \u043c\u0435\u0441\u044f\u0446 \u043d\u0430\u0437\u0430\u0434. \u0415\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043b \u043d\u0435\u043d\u0430\u0437\u0432\u0430\u043d\u043d\u044b\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u0448\u043f\u0438\u043e\u043d\u0441\u043a\u043e\u0439 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438, \u0432 \u0445\u043e\u0434\u0435 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043e\u043d \u0432\u0437\u043b\u0430\u043c\u044b\u0432\u0430\u043b \u0441\u043c\u0430\u0440\u0442\u0444\u043e\u043d\u044b Samsung. \n\n\u0412\u0441\u0435\u043c \u0444\u0435\u0434\u0435\u0440\u0430\u043b\u044c\u043d\u044b\u043c \u0430\u0433\u0435\u043d\u0442\u0441\u0442\u0432\u0430\u043c \u0434\u0430\u043d\u043e \u0432\u0440\u0435\u043c\u044f \u0434\u043e 28 \u0430\u043f\u0440\u0435\u043b\u044f, \u0447\u0442\u043e\u0431\u044b \u043f\u0435\u0440\u0435\u0439\u0442\u0438 \u043d\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u044b\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u041f\u041e.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://www.cisa.gov/news-events/alerts/2023/04/07/cisa-adds-five-known-exploited-vulnerabilities-catalog\n\n#CISA #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c", "creation_timestamp": "2026-07-27T00:01:05.139475Z"}, {"uuid": "c1f0130c-e638-4042-9e9e-c448565ef8e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-1388", "type": "seen", "source": "https://t.me/EchelonEyes/1405", "content": "CISA \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442 \u043e 5 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445\n\n\u0410\u0433\u0435\u043d\u0442\u0441\u0442\u0432\u043e \u0421\u0428\u0410 \u043f\u043e \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b (CISA) \u0434\u043e\u0431\u0430\u0432\u0438\u043b\u043e \u043f\u044f\u0442\u044c \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u0432 \u0432 \u0441\u0432\u043e\u0439 \u043a\u0430\u0442\u0430\u043b\u043e\u0433 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439. \n\n\u0421\u0440\u0435\u0434\u0438 \u043d\u0438\u0445 \u0442\u0440\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043e\u0442\u043d\u043e\u0441\u044f\u0442\u0441\u044f \u043a \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u043c\u0443 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044e \u0434\u043b\u044f \u0437\u0430\u0449\u0438\u0442\u044b \u0434\u0430\u043d\u043d\u044b\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u0441\u043e \u0441\u043c\u0435\u0448\u0430\u043d\u043d\u044b\u043c\u0438 \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u0438\u043c\u0438 \u0438 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u043c\u0438 \u0441\u0440\u0435\u0434\u0430\u043c\u0438 Veritas Backup Exec Agent:\n\nCVE-2021-27876 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 8,1) \u2014 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0444\u0430\u0439\u043b\u0430\u043c \u0430\u0433\u0435\u043d\u0442\u0430 Veritas Backup Exec; \n\nCVE-2021-27877 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 8,2) \u2014 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u043a, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0439 \u0441 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0435\u0439;\n\nCVE-2021-27878 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 8,8) \u2014 \u043e\u0448\u0438\u0431\u043a\u0430, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0436\u0435\u0440\u0442\u0432\u044b. \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u043a\u043e\u043c\u0430\u043d\u0434.\n\n\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438 \u0431\u044b\u043b\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b \u0432 \u043f\u0430\u0442\u0447\u0435, \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u043d\u043e\u043c Veritas \u0432 \u043c\u0430\u0440\u0442\u0435 2021 \u0433\u043e\u0434\u0430, \u043e\u0434\u043d\u0430\u043a\u043e \u0434\u043e \u0441\u0438\u0445 \u043f\u043e\u0440, \u0432\u0438\u0434\u0438\u043c\u043e, \u043d\u0435 \u0432\u0441\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043e\u0431\u043d\u043e\u0432\u0438\u043b\u0438\u0441\u044c.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 Mandiant, \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0430-\u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u044c BlackCat \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u0430 \u043d\u0430 \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 Veritas Backup Exec, \u0447\u0442\u043e\u0431\u044b \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044f \u0442\u0440\u0438 \u0432\u044b\u0448\u0435\u0443\u043f\u043e\u043c\u044f\u043d\u0443\u0442\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438.\n\n\u0422\u0430\u043a\u0436\u0435 CISA \u0434\u043e\u0431\u0430\u0432\u0438\u043b\u0430 \u0432 \u043a\u0430\u0442\u0430\u043b\u043e\u0433 \u043e\u0448\u0438\u0431\u043a\u0443 \u0441 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u043e\u043c CVE-2019-1388 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 7,8), \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0443\u044e \u0441 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435\u043c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u043b\u0438\u044f\u0435\u0442 \u043d\u0430 \u0434\u0438\u0430\u043b\u043e\u0433\u043e\u0432\u043e\u0435 \u043e\u043a\u043d\u043e \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u0430 Microsoft Windows \u0438 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0434\u043b\u044f \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0432 \u0441 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u043d\u044b\u043c\u0438 \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u0438\u044f\u043c\u0438 \u043d\u0430 \u0443\u0436\u0435 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c \u0445\u043e\u0441\u0442\u0435.\n\n\u041f\u044f\u0442\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u0430\u044f \u0432 \u0441\u043f\u0438\u0441\u043e\u043a, \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u0435\u043c \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0432 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0435 \u044f\u0434\u0440\u0430 \u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0430 Arm Mali. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043f\u043e\u0434 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u043e\u043c CVE-2023-26083. \u041e\u043d\u0430 \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438 Google \u043c\u0435\u0441\u044f\u0446 \u043d\u0430\u0437\u0430\u0434. \u0415\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043b \u043d\u0435\u043d\u0430\u0437\u0432\u0430\u043d\u043d\u044b\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u0448\u043f\u0438\u043e\u043d\u0441\u043a\u043e\u0439 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438, \u0432 \u0445\u043e\u0434\u0435 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043e\u043d \u0432\u0437\u043b\u0430\u043c\u044b\u0432\u0430\u043b \u0441\u043c\u0430\u0440\u0442\u0444\u043e\u043d\u044b Samsung. \n\n\u0412\u0441\u0435\u043c \u0444\u0435\u0434\u0435\u0440\u0430\u043b\u044c\u043d\u044b\u043c \u0430\u0433\u0435\u043d\u0442\u0441\u0442\u0432\u0430\u043c \u0434\u0430\u043d\u043e \u0432\u0440\u0435\u043c\u044f \u0434\u043e 28 \u0430\u043f\u0440\u0435\u043b\u044f, \u0447\u0442\u043e\u0431\u044b \u043f\u0435\u0440\u0435\u0439\u0442\u0438 \u043d\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u044b\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u041f\u041e.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://www.cisa.gov/news-events/alerts/2023/04/07/cisa-adds-five-known-exploited-vulnerabilities-catalog\n\n#CISA #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c", "creation_timestamp": "2026-07-28T00:00:07.898204Z"}, {"uuid": "54a837b2-78fa-4b30-86db-a372ed559ddf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-1388", "type": "seen", "source": "https://t.me/cissp/3925", "content": "Windows privesec\n\n\nIntroduction\nFuzzy Security Guide:\n https://www.fuzzysecurity.com/tutorials/16.html\n\nPayloadAllTheThings: \nhttps://github.com/swisskyrepo/PayloadsAllTheThings/blob/master/Methodology%20and%20Resources/Windows%20-%20Privilege%20Escalation.md\n\nAbsoloom's Guide: \nhttps://www.absolomb.com/2018-01-26-Windows-Privilege-Escalation-Guide/\n\nSushant 747's Guide: \nhttps://sushant747.gitbooks.io/total-oscp-guide/privilege_escalation_windows.html\n\nGaining a Foothold\nmsfvenom: \nhttps://netsec.ws/?p=331\n\nExploring Automated Tools\nwinpeas: \nhttps://github.com/carlospolop/privilege-escalation-awesome-scripts-suite/tree/master/winPEAS\n\nWindows Priv Esc Checklist: \nhttps://book.hacktricks.xyz/windows/checklist-windows-privilege-escalation\n\nSherlock: \nhttps://github.com/rasta-mouse/Sherlock\n\nWatson: \nhttps://github.com/rasta-mouse/Watson\n\nPowerUp: \nhttps://github.com/PowerShellMafia/PowerSploit/tree/master/Privesc\n\nJAWS: \nhttps://github.com/411Hall/JAWS\n\nWindows Exploit Suggester: \nhttps://github.com/AonCyberLabs/Windows-Exploit-Suggester\n\nMetasploit Local Exploit Suggester: https://blog.rapid7.com/2015/08/11/metasploit-local-exploit-suggester-do-less-get-more/\n\nSeatbelt: \nhttps://github.com/GhostPack/Seatbelt\n\nSharpUp: \nhttps://github.com/GhostPack/SharpUp\n\nEscalation Path: Kernel Exploits\nWindows Kernel Exploits: \nhttps://github.com/SecWiki/windows-kernel-exploits\n\nKitrap0d Info: \nhttps://seclists.org/fulldisclosure/2010/Jan/341\n\nMS10-059: \nhttps://github.com/SecWiki/windows-kernel-exploits/tree/master/MS10-059\n\nEscalation Path: Passwords and Port Forwarding\nAchat Exploit: \nhttps://www.exploit-db.com/exploits/36025\n\nAchat Exploit (Metasploit): \nhttps://www.rapid7.com/db/modules/exploit/windows/misc/achat_bof\n\nPlink Download: \nhttps://www.chiark.greenend.org.uk/~sgtatham/putty/latest.html\n\nEscalation Path: \nWindows Subsystem for Linux\nSpawning TTY Shell: https://netsec.ws/?p=337\n\nImpacket Toolkit: \nhttps://github.com/SecureAuthCorp/impacket\n\nImpersonation and Potato Attacks\nRotten Potato: \nhttps://foxglovesecurity.com/2016/09/26/rotten-potato-privilege-escalation-from-service-accounts-to-system/\n\nJuicy Potato: \nhttps://github.com/ohpe/juicy-potato\n\nGroovy Reverse Shell: \nhttps://gist.github.com/frohoff/fed1ffaab9b9beeb1c76\n\nAlternative Data Streams: \nhttps://blog.malwarebytes.com/101/2015/07/introduction-to-alternate-data-streams/\n\nEscalation Path: getsystem\ngetsystem Explained: \nhttps://blog.cobaltstrike.com/2014/04/02/what-happens-when-i-type-getsystem/\n\nEscalation Path: Startup Applications\nicacls Docs: \nhttps://docs.microsoft.com/en-us/windows-server/administration/windows-commands/icacls\n\nEscalation Path: CVE-2019-1388\nZeroDayInitiative CVE-2019-1388: https://www.youtube.com/watch?v=3BQKpPNlTSo\n\nRapid7 CVE-2019-1388: https://www.rapid7.com/db/vulnerabilities/msft-cve-2019-1388\n\nCapstone Challenge\nBasic Powershell for Pentesters: \nhttps://book.hacktricks.xyz/windows/basic-powershell-for-pentesters\n\nMounting VHD Files: \nCapturing MSSQL Creds: \nSursa: https://github.com/Gr1mmie/Windows-Privilege-Escalation-Resources/blob/master/README.md", "creation_timestamp": "2026-09-01T17:00:45.016639Z"}, {"uuid": "d4ea4be2-a6f6-4b52-b054-fded3e6a810a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-1388", "type": "seen", "source": "https://t.me/cissp/1682", "content": "Windows-Privilege-Escalation-\n\ud83d\udc4d\ud83c\udffd\nResources\n\nHackTheBox: \nhttps://www.hackthebox.eu/\n\nTryHackMe: \nhttps://tryhackme.com/\n\nTryHackMe Escalation Lab: \nhttps://tryhackme.com/room/windowsprivescarena\n\nIntroduction Fuzzy Security Guide: \nhttps://www.fuzzysecurity.com/tutorials/16.html\n\nPayloadAllTheThings: \nhttps://github.com/swisskyrepo/PayloadsAllTheThings/blob/master/Methodology%20and%20Resources/Windows%20-%20Privilege%20Escalation.md\n\nAbsoloom's Guide: \nhttps://www.absolomb.com/2018-01-26-Windows-Privilege-Escalation-Guide/\n\nSushant 747's Guide: \nhttps://sushant747.gitbooks.io/total-oscp-guide/privilege_escalation_windows.html\n\nGaining a Foothold\nmsfvenom: https://netsec.ws/?p=331\n\nExploring Automated Tools\nwinpeas: https://github.com/carlospolop/privilege-escalation-awesome-scripts-suite/tree/master/winPEAS\n\nWindows Priv Esc Checklist: \nhttps://book.hacktricks.xyz/windows/checklist-windows-privilege-escalation\n\nSherlock: \nhttps://github.com/rasta-mouse/Sherlock\n\nWatson: \nhttps://github.com/rasta-mouse/Watson\n\nPowerUp: \nhttps://github.com/PowerShellMafia/PowerSploit/tree/master/Privesc\n\nJAWS: \nhttps://github.com/411Hall/JAWS\n\nWindows Exploit Suggested: \nhttps://github.com/AonCyberLabs/Windows-Exploit-Suggester\n\nMetasploit Local Exploit Suggested: \nhttps://blog.rapid7.com/2015/08/11/metasploit-local-exploit-suggester-do-less-get-more/\n\nSeatbelt: \nhttps://github.com/GhostPack/Seatbelt\n\nSharpUp: \nhttps://github.com/GhostPack/SharpUp\n\nEscalation Path: Kernel Exploits\nWindows Kernel Exploits: https://github.com/SecWiki/windows-kernel-exploits\n\nKitrap0d Info: \nhttps://seclists.org/fulldisclosure/2010/Jan/341\n\nMS10-059: \nhttps://github.com/SecWiki/windows-kernel-exploits/tree/master/MS10-059\n\nEscalation Path: Passwords and Port Forwarding\nAchat Exploit: https://www.exploit-db.com/exploits/36025\n\nAchat Exploit (Metasploit): \nhttps://www.rapid7.com/db/modules/exploit/windows/misc/achat_bof\n\nPlink Download: \nhttps://www.chiark.greenend.org.uk/~sgtatham/putty/latest.html\n\nEscalation Path: Windows Subsystem for Linux\nSpawning TTY Shell: https://netsec.ws/?p=337\n\nImpacket Toolkit: \nhttps://github.com/SecureAuthCorp/impacket\n\nImpersonation and Potato Attacks\nRotten Potato: https://foxglovesecurity.com/2016/09/26/rotten-potato-privilege-escalation-from-service-accounts-to-system/\n\nJuicy Potato: \nhttps://github.com/ohpe/juicy-potato\n\nGroovy Reverse Shell: \nhttps://gist.github.com/frohoff/fed1ffaab9b9beeb1c76\n\nAlternative Data Streams: https://blog.malwarebytes.com/101/2015/07/introduction-to-alternate-data-streams/\n\nEscalation Path: getsystem\ngetsystem Explained: https://blog.cobaltstrike.com/2014/04/02/what-happens-when-i-type-getsystem/\n\nEscalation Path: Startup Applications\nicacls Docs: https://docs.microsoft.com/en-us/windows-server/administration/windows-commands/icacls\n\nEscalation Path: CVE-2019-1388\nZeroDayInitiative CVE-2019-1388: https://www.youtube.com/watch?v=3BQKpPNlTSo\n\nRapid7 CVE-2019-1388: https://www.rapid7.com/db/vulnerabilities/msft-cve-2019-1388\n\nCapstone Challenge\nBasic Powershell for Pentesters: https://book.hacktricks.xyz/windows/basic-powershell-for-pentesters\n\nMounting VHD Files: \n\nCapturing MSSQL Creds: \n\nSursa: https://github.com/Gr1mmie/Windows-Privilege-Escalation-Resources/blob/master/README.md", "creation_timestamp": "2026-09-01T17:01:11.137422Z"}, {"uuid": "0553e841-4ddd-44c3-83d5-0b939e540915", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-1388", "type": "seen", "source": "https://t.me/hackersmeet0/2527", "content": "Windows privesec\n\n\nIntroduction\nFuzzy Security Guide: https://www.fuzzysecurity.com/tutorials/16.html\n\nPayloadAllTheThings: https://github.com/swisskyrepo/PayloadsAllTheThings/blob/master/Methodology%20and%20Resources/Windows%20-%20Privilege%20Escalation.md\n\nAbsoloom's Guide: https://www.absolomb.com/2018-01-26-Windows-Privilege-Escalation-Guide/\n\nSushant 747's Guide: https://sushant747.gitbooks.io/total-oscp-guide/privilege_escalation_windows.html\n\nGaining a Foothold\nmsfvenom: https://netsec.ws/?p=331\n\nExploring Automated Tools\nwinpeas: https://github.com/carlospolop/privilege-escalation-awesome-scripts-suite/tree/master/winPEAS\n\nWindows Priv Esc Checklist: https://book.hacktricks.xyz/windows/checklist-windows-privilege-escalation\n\nSherlock: https://github.com/rasta-mouse/Sherlock\n\nWatson: https://github.com/rasta-mouse/Watson\n\nPowerUp: https://github.com/PowerShellMafia/PowerSploit/tree/master/Privesc\n\nJAWS: https://github.com/411Hall/JAWS\n\nWindows Exploit Suggester: https://github.com/AonCyberLabs/Windows-Exploit-Suggester\n\nMetasploit Local Exploit Suggester: https://blog.rapid7.com/2015/08/11/metasploit-local-exploit-suggester-do-less-get-more/\n\nSeatbelt: https://github.com/GhostPack/Seatbelt\n\nSharpUp: https://github.com/GhostPack/SharpUp\n\nEscalation Path: Kernel Exploits\nWindows Kernel Exploits: https://github.com/SecWiki/windows-kernel-exploits\n\nKitrap0d Info: https://seclists.org/fulldisclosure/2010/Jan/341\n\nMS10-059: https://github.com/SecWiki/windows-kernel-exploits/tree/master/MS10-059\n\nEscalation Path: Passwords and Port Forwarding\nAchat Exploit: https://www.exploit-db.com/exploits/36025\n\nAchat Exploit (Metasploit): https://www.rapid7.com/db/modules/exploit/windows/misc/achat_bof\n\nPlink Download: https://www.chiark.greenend.org.uk/~sgtatham/putty/latest.html\n\nEscalation Path: Windows Subsystem for Linux\nSpawning TTY Shell: https://netsec.ws/?p=337\n\nImpacket Toolkit: https://github.com/SecureAuthCorp/impacket\n\nImpersonation and Potato Attacks\nRotten Potato: https://foxglovesecurity.com/2016/09/26/rotten-potato-privilege-escalation-from-service-accounts-to-system/\n\nJuicy Potato: https://github.com/ohpe/juicy-potato\n\nGroovy Reverse Shell: https://gist.github.com/frohoff/fed1ffaab9b9beeb1c76\n\nAlternative Data Streams: https://blog.malwarebytes.com/101/2015/07/introduction-to-alternate-data-streams/\n\nEscalation Path: getsystem\ngetsystem Explained: https://blog.cobaltstrike.com/2014/04/02/what-happens-when-i-type-getsystem/\n\nEscalation Path: Startup Applications\nicacls Docs: https://docs.microsoft.com/en-us/windows-server/administration/windows-commands/icacls\n\nEscalation Path: CVE-2019-1388\nZeroDayInitiative CVE-2019-1388: https://www.youtube.com/watch?v=3BQKpPNlTSo\n\nRapid7 CVE-2019-1388: https://www.rapid7.com/db/vulnerabilities/msft-cve-2019-1388\n\nCapstone Challenge\nBasic Powershell for Pentesters: https://book.hacktricks.xyz/windows/basic-powershell-for-pentesters\n\nMounting VHD Files: \n\nCapturing MSSQL Creds: \n\nSursa: https://github.com/Gr1mmie/Windows-Privilege-Escalation-Resources/blob/master/README.md", "creation_timestamp": "2026-09-01T18:00:05.004191Z"}, {"uuid": "739d6d93-89ad-402c-9790-421806a15d5d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-1388", "type": "seen", "source": "https://t.me/hacking_Attack/15427", "content": "pot.com/-1imPBLY4a3c/YOKtIJTunbI/AAAAAAAAxTE/eh-ESDbNIf0jhyLeoCt-8sxfjMxEHpYGACLcBGAsYHQ/s16000/5.png ExploitationBrowsing the Ready Player One blog post we saw that Wade has commented a word to remember parzival. This seems an interesting word, there may exist a user by the name of Wade and password parzival.http://10.10.167.18/retro/index.php/2019/12/09/ready-player-one/#comment-2https://1.bp.blogspot.com/-DuW4ROUKuyI/YOKtLpgowgI/AAAAAAAAxTI/zpUw9R9SJFIJO0Xce3J9elodPzjinw7MACLcBGAsYHQ/s16000/6.png We were not able to enumerate the RDP service due to the lack of credentials before. Now that we suspect that we have a set of credentials, let\u2019s try to connect to the service. We will be using xfreerdp for accessing the RDP service. There exist many other tools that you can use for the same. We provided the username wade and password parzival. xfreerdp /u:wade /p:parzival /v:10.10.167.18https://1.bp.blogspot.com/-cy3zsqqk4hc/YOKtPpHXF9I/AAAAAAAAxTQ/0wL9bvrVjTEV6VDVnJnbJyRM5MYJKoSwwCLcBGAsYHQ/s16000/7.png We were able to connect to the RDP service with the credentials we suspected. As soon as we connect, we see that we have the user.txt file on the Desktop. We open the file to find the user flag as demonstrated below.Privilege Escalation Now that we have the user flag and the access of the Wade user, we need to figure out the method for elevating access to the Administrator. Other than the text file we had two other icons on the Desktop. We opened Google Chrome and found a link bookmarked. It was for the Vulnerability CVE-2019-1388. Since we don\u2019t have Internet Access on the target machine, we copied the link and opened it on our local machine. We found that it is a privilege escalation vulnerability inside the Windows Certificate Dialog. We read a couple of articles about it online to understand the vulnerability.Note: During our assessment, there were times where we were not able to open Internet Explorer. We contacted the author of the machine and we were told that this occurs because of creating the vulnerability. He suggested that we restart the machine and open an instance of Internet Explorer before running the hhupd file.After getting the hhupd file to the Desktop, we right-click on the file and choose the Run As Administrator option. We are presented with a dialogue box asking for the password Administrator. Since we don\u2019t have the password, we click on the Show more details option as demonstrated below. ___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:02:34.174219Z"}, {"uuid": "fc7da642-0c4c-450f-ae66-c203aaa98c31", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-1388", "type": "seen", "source": "https://t.me/hacking_Attack/15427", "content": "pot.com/-1imPBLY4a3c/YOKtIJTunbI/AAAAAAAAxTE/eh-ESDbNIf0jhyLeoCt-8sxfjMxEHpYGACLcBGAsYHQ/s16000/5.png ExploitationBrowsing the Ready Player One blog post we saw that Wade has commented a word to remember parzival. This seems an interesting word, there may exist a user by the name of Wade and password parzival.http://10.10.167.18/retro/index.php/2019/12/09/ready-player-one/#comment-2https://1.bp.blogspot.com/-DuW4ROUKuyI/YOKtLpgowgI/AAAAAAAAxTI/zpUw9R9SJFIJO0Xce3J9elodPzjinw7MACLcBGAsYHQ/s16000/6.png We were not able to enumerate the RDP service due to the lack of credentials before. Now that we suspect that we have a set of credentials, let\u2019s try to connect to the service. We will be using xfreerdp for accessing the RDP service. There exist many other tools that you can use for the same. We provided the username wade and password parzival. xfreerdp /u:wade /p:parzival /v:10.10.167.18https://1.bp.blogspot.com/-cy3zsqqk4hc/YOKtPpHXF9I/AAAAAAAAxTQ/0wL9bvrVjTEV6VDVnJnbJyRM5MYJKoSwwCLcBGAsYHQ/s16000/7.png We were able to connect to the RDP service with the credentials we suspected. As soon as we connect, we see that we have the user.txt file on the Desktop. We open the file to find the user flag as demonstrated below.Privilege Escalation Now that we have the user flag and the access of the Wade user, we need to figure out the method for elevating access to the Administrator. Other than the text file we had two other icons on the Desktop. We opened Google Chrome and found a link bookmarked. It was for the Vulnerability CVE-2019-1388. Since we don\u2019t have Internet Access on the target machine, we copied the link and opened it on our local machine. We found that it is a privilege escalation vulnerability inside the Windows Certificate Dialog. We read a couple of articles about it online to understand the vulnerability.Note: During our assessment, there were times where we were not able to open Internet Explorer. We contacted the author of the machine and we were told that this occurs because of creating the vulnerability. He suggested that we restart the machine and open an instance of Internet Explorer before running the hhupd file.After getting the hhupd file to the Desktop, we right-click on the file and choose the Run As Administrator option. We are presented with a dialogue box asking for the password Administrator. Since we don\u2019t have the password, we click on the Show more details option as demonstrated below. ___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-02T01:03:08.265024Z"}, {"uuid": "491a4987-d7ad-416b-b3f3-c0c52659d956", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-1388", "type": "published-proof-of-concept", "source": "https://t.me/hackersmeet0/2527", "content": "Windows privesec\n\n\nIntroduction\nFuzzy Security Guide: https://www.fuzzysecurity.com/tutorials/16.html\n\nPayloadAllTheThings: https://github.com/swisskyrepo/PayloadsAllTheThings/blob/master/Methodology%20and%20Resources/Windows%20-%20Privilege%20Escalation.md\n\nAbsoloom's Guide: https://www.absolomb.com/2018-01-26-Windows-Privilege-Escalation-Guide/\n\nSushant 747's Guide: https://sushant747.gitbooks.io/total-oscp-guide/privilege_escalation_windows.html\n\nGaining a Foothold\nmsfvenom: https://netsec.ws/?p=331\n\nExploring Automated Tools\nwinpeas: https://github.com/carlospolop/privilege-escalation-awesome-scripts-suite/tree/master/winPEAS\n\nWindows Priv Esc Checklist: https://book.hacktricks.xyz/windows/checklist-windows-privilege-escalation\n\nSherlock: https://github.com/rasta-mouse/Sherlock\n\nWatson: https://github.com/rasta-mouse/Watson\n\nPowerUp: https://github.com/PowerShellMafia/PowerSploit/tree/master/Privesc\n\nJAWS: https://github.com/411Hall/JAWS\n\nWindows Exploit Suggester: https://github.com/AonCyberLabs/Windows-Exploit-Suggester\n\nMetasploit Local Exploit Suggester: https://blog.rapid7.com/2015/08/11/metasploit-local-exploit-suggester-do-less-get-more/\n\nSeatbelt: https://github.com/GhostPack/Seatbelt\n\nSharpUp: https://github.com/GhostPack/SharpUp\n\nEscalation Path: Kernel Exploits\nWindows Kernel Exploits: https://github.com/SecWiki/windows-kernel-exploits\n\nKitrap0d Info: https://seclists.org/fulldisclosure/2010/Jan/341\n\nMS10-059: https://github.com/SecWiki/windows-kernel-exploits/tree/master/MS10-059\n\nEscalation Path: Passwords and Port Forwarding\nAchat Exploit: https://www.exploit-db.com/exploits/36025\n\nAchat Exploit (Metasploit): https://www.rapid7.com/db/modules/exploit/windows/misc/achat_bof\n\nPlink Download: https://www.chiark.greenend.org.uk/~sgtatham/putty/latest.html\n\nEscalation Path: Windows Subsystem for Linux\nSpawning TTY Shell: https://netsec.ws/?p=337\n\nImpacket Toolkit: https://github.com/SecureAuthCorp/impacket\n\nImpersonation and Potato Attacks\nRotten Potato: https://foxglovesecurity.com/2016/09/26/rotten-potato-privilege-escalation-from-service-accounts-to-system/\n\nJuicy Potato: https://github.com/ohpe/juicy-potato\n\nGroovy Reverse Shell: https://gist.github.com/frohoff/fed1ffaab9b9beeb1c76\n\nAlternative Data Streams: https://blog.malwarebytes.com/101/2015/07/introduction-to-alternate-data-streams/\n\nEscalation Path: getsystem\ngetsystem Explained: https://blog.cobaltstrike.com/2014/04/02/what-happens-when-i-type-getsystem/\n\nEscalation Path: Startup Applications\nicacls Docs: https://docs.microsoft.com/en-us/windows-server/administration/windows-commands/icacls\n\nEscalation Path: CVE-2019-1388\nZeroDayInitiative CVE-2019-1388: https://www.youtube.com/watch?v=3BQKpPNlTSo\n\nRapid7 CVE-2019-1388: https://www.rapid7.com/db/vulnerabilities/msft-cve-2019-1388\n\nCapstone Challenge\nBasic Powershell for Pentesters: https://book.hacktricks.xyz/windows/basic-powershell-for-pentesters\n\nMounting VHD Files: \n\nCapturing MSSQL Creds: \n\nSursa: https://github.com/Gr1mmie/Windows-Privilege-Escalation-Resources/blob/master/README.md", "creation_timestamp": "2026-09-02T01:03:29.732270Z"}, {"uuid": "994aa2f6-e9b8-4ae2-bc62-279f1cc80b49", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-1388", "type": "seen", "source": "https://t.me/cissp/3925", "content": "Windows privesec\n\n\nIntroduction\nFuzzy Security Guide:\n https://www.fuzzysecurity.com/tutorials/16.html\n\nPayloadAllTheThings: \nhttps://github.com/swisskyrepo/PayloadsAllTheThings/blob/master/Methodology%20and%20Resources/Windows%20-%20Privilege%20Escalation.md\n\nAbsoloom's Guide: \nhttps://www.absolomb.com/2018-01-26-Windows-Privilege-Escalation-Guide/\n\nSushant 747's Guide: \nhttps://sushant747.gitbooks.io/total-oscp-guide/privilege_escalation_windows.html\n\nGaining a Foothold\nmsfvenom: \nhttps://netsec.ws/?p=331\n\nExploring Automated Tools\nwinpeas: \nhttps://github.com/carlospolop/privilege-escalation-awesome-scripts-suite/tree/master/winPEAS\n\nWindows Priv Esc Checklist: \nhttps://book.hacktricks.xyz/windows/checklist-windows-privilege-escalation\n\nSherlock: \nhttps://github.com/rasta-mouse/Sherlock\n\nWatson: \nhttps://github.com/rasta-mouse/Watson\n\nPowerUp: \nhttps://github.com/PowerShellMafia/PowerSploit/tree/master/Privesc\n\nJAWS: \nhttps://github.com/411Hall/JAWS\n\nWindows Exploit Suggester: \nhttps://github.com/AonCyberLabs/Windows-Exploit-Suggester\n\nMetasploit Local Exploit Suggester: https://blog.rapid7.com/2015/08/11/metasploit-local-exploit-suggester-do-less-get-more/\n\nSeatbelt: \nhttps://github.com/GhostPack/Seatbelt\n\nSharpUp: \nhttps://github.com/GhostPack/SharpUp\n\nEscalation Path: Kernel Exploits\nWindows Kernel Exploits: \nhttps://github.com/SecWiki/windows-kernel-exploits\n\nKitrap0d Info: \nhttps://seclists.org/fulldisclosure/2010/Jan/341\n\nMS10-059: \nhttps://github.com/SecWiki/windows-kernel-exploits/tree/master/MS10-059\n\nEscalation Path: Passwords and Port Forwarding\nAchat Exploit: \nhttps://www.exploit-db.com/exploits/36025\n\nAchat Exploit (Metasploit): \nhttps://www.rapid7.com/db/modules/exploit/windows/misc/achat_bof\n\nPlink Download: \nhttps://www.chiark.greenend.org.uk/~sgtatham/putty/latest.html\n\nEscalation Path: \nWindows Subsystem for Linux\nSpawning TTY Shell: https://netsec.ws/?p=337\n\nImpacket Toolkit: \nhttps://github.com/SecureAuthCorp/impacket\n\nImpersonation and Potato Attacks\nRotten Potato: \nhttps://foxglovesecurity.com/2016/09/26/rotten-potato-privilege-escalation-from-service-accounts-to-system/\n\nJuicy Potato: \nhttps://github.com/ohpe/juicy-potato\n\nGroovy Reverse Shell: \nhttps://gist.github.com/frohoff/fed1ffaab9b9beeb1c76\n\nAlternative Data Streams: \nhttps://blog.malwarebytes.com/101/2015/07/introduction-to-alternate-data-streams/\n\nEscalation Path: getsystem\ngetsystem Explained: \nhttps://blog.cobaltstrike.com/2014/04/02/what-happens-when-i-type-getsystem/\n\nEscalation Path: Startup Applications\nicacls Docs: \nhttps://docs.microsoft.com/en-us/windows-server/administration/windows-commands/icacls\n\nEscalation Path: CVE-2019-1388\nZeroDayInitiative CVE-2019-1388: https://www.youtube.com/watch?v=3BQKpPNlTSo\n\nRapid7 CVE-2019-1388: https://www.rapid7.com/db/vulnerabilities/msft-cve-2019-1388\n\nCapstone Challenge\nBasic Powershell for Pentesters: \nhttps://book.hacktricks.xyz/windows/basic-powershell-for-pentesters\n\nMounting VHD Files: \nCapturing MSSQL Creds: \nSursa: https://github.com/Gr1mmie/Windows-Privilege-Escalation-Resources/blob/master/README.md", "creation_timestamp": "2026-09-02T01:04:31.676582Z"}, {"uuid": "9de56436-05b7-45cf-8ba4-38419266f203", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-1388", "type": "seen", "source": "https://t.me/cissp/1682", "content": "Windows-Privilege-Escalation-\n\ud83d\udc4d\ud83c\udffd\nResources\n\nHackTheBox: \nhttps://www.hackthebox.eu/\n\nTryHackMe: \nhttps://tryhackme.com/\n\nTryHackMe Escalation Lab: \nhttps://tryhackme.com/room/windowsprivescarena\n\nIntroduction Fuzzy Security Guide: \nhttps://www.fuzzysecurity.com/tutorials/16.html\n\nPayloadAllTheThings: \nhttps://github.com/swisskyrepo/PayloadsAllTheThings/blob/master/Methodology%20and%20Resources/Windows%20-%20Privilege%20Escalation.md\n\nAbsoloom's Guide: \nhttps://www.absolomb.com/2018-01-26-Windows-Privilege-Escalation-Guide/\n\nSushant 747's Guide: \nhttps://sushant747.gitbooks.io/total-oscp-guide/privilege_escalation_windows.html\n\nGaining a Foothold\nmsfvenom: https://netsec.ws/?p=331\n\nExploring Automated Tools\nwinpeas: https://github.com/carlospolop/privilege-escalation-awesome-scripts-suite/tree/master/winPEAS\n\nWindows Priv Esc Checklist: \nhttps://book.hacktricks.xyz/windows/checklist-windows-privilege-escalation\n\nSherlock: \nhttps://github.com/rasta-mouse/Sherlock\n\nWatson: \nhttps://github.com/rasta-mouse/Watson\n\nPowerUp: \nhttps://github.com/PowerShellMafia/PowerSploit/tree/master/Privesc\n\nJAWS: \nhttps://github.com/411Hall/JAWS\n\nWindows Exploit Suggested: \nhttps://github.com/AonCyberLabs/Windows-Exploit-Suggester\n\nMetasploit Local Exploit Suggested: \nhttps://blog.rapid7.com/2015/08/11/metasploit-local-exploit-suggester-do-less-get-more/\n\nSeatbelt: \nhttps://github.com/GhostPack/Seatbelt\n\nSharpUp: \nhttps://github.com/GhostPack/SharpUp\n\nEscalation Path: Kernel Exploits\nWindows Kernel Exploits: https://github.com/SecWiki/windows-kernel-exploits\n\nKitrap0d Info: \nhttps://seclists.org/fulldisclosure/2010/Jan/341\n\nMS10-059: \nhttps://github.com/SecWiki/windows-kernel-exploits/tree/master/MS10-059\n\nEscalation Path: Passwords and Port Forwarding\nAchat Exploit: https://www.exploit-db.com/exploits/36025\n\nAchat Exploit (Metasploit): \nhttps://www.rapid7.com/db/modules/exploit/windows/misc/achat_bof\n\nPlink Download: \nhttps://www.chiark.greenend.org.uk/~sgtatham/putty/latest.html\n\nEscalation Path: Windows Subsystem for Linux\nSpawning TTY Shell: https://netsec.ws/?p=337\n\nImpacket Toolkit: \nhttps://github.com/SecureAuthCorp/impacket\n\nImpersonation and Potato Attacks\nRotten Potato: https://foxglovesecurity.com/2016/09/26/rotten-potato-privilege-escalation-from-service-accounts-to-system/\n\nJuicy Potato: \nhttps://github.com/ohpe/juicy-potato\n\nGroovy Reverse Shell: \nhttps://gist.github.com/frohoff/fed1ffaab9b9beeb1c76\n\nAlternative Data Streams: https://blog.malwarebytes.com/101/2015/07/introduction-to-alternate-data-streams/\n\nEscalation Path: getsystem\ngetsystem Explained: https://blog.cobaltstrike.com/2014/04/02/what-happens-when-i-type-getsystem/\n\nEscalation Path: Startup Applications\nicacls Docs: https://docs.microsoft.com/en-us/windows-server/administration/windows-commands/icacls\n\nEscalation Path: CVE-2019-1388\nZeroDayInitiative CVE-2019-1388: https://www.youtube.com/watch?v=3BQKpPNlTSo\n\nRapid7 CVE-2019-1388: https://www.rapid7.com/db/vulnerabilities/msft-cve-2019-1388\n\nCapstone Challenge\nBasic Powershell for Pentesters: https://book.hacktricks.xyz/windows/basic-powershell-for-pentesters\n\nMounting VHD Files: \n\nCapturing MSSQL Creds: \n\nSursa: https://github.com/Gr1mmie/Windows-Privilege-Escalation-Resources/blob/master/README.md", "creation_timestamp": "2026-09-02T01:05:01.158649Z"}]}