Cyber security

V9.7.5 – Local Privilege Escalation : Nuclei Release With CVE Updates And New Templates

In our latest release, we have added a significant number of trending CVEs and are excited to announce the addition of new local privilege escalation templates.

These valuable contributions come from our community, with a notable contribution from @daffainfo, and are available at Local Privilege Escalation Templates.

These templates utilize the newly introduced code protocol, enhancing their capability to detect vulnerabilities more effectively.

It’s important to note that these templates are specifically designed for local execution to identify privilege escalation vulnerabilities.

For security reasons, they are not executed as part of the default Nuclei scan. We ensure the security and authenticity of these templates by signing them officially.

To run these templates, users need to provide the -code flag along with -itags local.

These additions are particularly useful for penetration testing and red-teaming focusing on privilege escalation, and we plan to further expand their coverage in future updates.

Following Are The Other Highlights Of This Release:

What’s Changed

New Templates Added: 106 | CVEs Added: 14 | First-time contributions: 14

For more information click here

Varshini

Varshini is a Cyber Security expert in Threat Analysis, Vulnerability Assessment, and Research. Passionate about staying ahead of emerging Threats and Technologies.

Recent Posts

Cybersecurity – Tools And Their Function

Cybersecurity tools play a critical role in safeguarding digital assets, systems, and networks from malicious…

11 hours ago

MODeflattener – Miasm’s OLLVM Deflattener

MODeflattener is a specialized tool designed to reverse OLLVM's control flow flattening obfuscation through static…

11 hours ago

My Awesome List : Tools And Their Functions

"My Awesome List" is a curated collection of tools, libraries, and resources spanning various domains…

11 hours ago

Chrome Browser Exploitation, Part 3 : Analyzing And Exploiting CVE-2018-17463

CVE-2018-17463, a type confusion vulnerability in Chrome’s V8 JavaScript engine, allowed attackers to execute arbitrary…

11 hours ago

Chrome Browser Exploitation, Part 1 : Introduction To V8 And JavaScript Internals

The blog post "Chrome Browser Exploitation, Part 1: Introduction to V8 and JavaScript Internals" provides…

12 hours ago

Chrome Browser Exploitation, Part 3: Analyzing and Exploiting CVE-2018-17463

The exploitation of CVE-2018-17463, a type confusion vulnerability in Chrome’s V8 JavaScript engine, relies on…

14 hours ago