ig-labs

3 exploits Active since Sep 2023
CVE-2024-20671 GITHUB MEDIUM c++ WORKING POC
Microsoft Defender < - Privilege Escalation
Microsoft Defender Security Feature Bypass Vulnerability
33 stars
CVSS 5.5
CVE-2024-5909 NOMISEC MEDIUM WORKING POC
Cortex XDR Agent 7.9-7.9.101 and 8.1-8.1.1 - Local Privilege Escalation via Agent Disabling
A problem with a protection mechanism in the Palo Alto Networks Cortex XDR agent on Windows devices allows a low privileged local Windows user to disable the agent. This issue may be leveraged by malware to disable the Cortex XDR agent and then to perform malicious activity.
33 stars
CVSS 5.5
CVE-2023-3280 NOMISEC MEDIUM WORKING POC
Palo Alto Networks Cortex XDR Agent 5.0-5.0.12.22203 7.9.0-7.9.3 7.9.0-7.9.101 - Local Protection Mechanism Bypass
A problem with a protection mechanism in the Palo Alto Networks Cortex XDR agent on Windows devices allows a local user to disable the agent.
33 stars
CVSS 5.5