Invia #566141: Shanghai Bairui Information Technology Co., Ltd SunloginClient 15.8.3.19819 privilege escalation

The sunlogin_guard.exe subprocess loads process.dll from the current directory into the program stack for execution. It is important to note that since ordinary users can modify the DLL file, and this file is subsequently executed with system privileges, this can be exploited to gain system privileges on the local machine.Detailed vulnerability report:https://www.yuque.com/ba1ma0-an29k/nnxoap/ey9gzmpiqfltiici?singleDoc# 《SunloginClient program has a privilege escalation vulnerability》

• Fonte: ⚠️ https://www.yuque.com/ba1ma0-an29k/nnxoap/ey9gzmpiqfltiici?singleDoc# 《SunloginClient program has a privilege escalation vulnerability》
• Utente: Ba1_Ma0 (UID 60252)
• Sottomissione: 27/04/2025 09:11 (1 Anno fa)
• Moderazione: 10/05/2025 07:46 (13 days later)
• Stato: Accettato
• Voce VulDB: 308277 [Shanghai Bairui Information Technology SunloginClient 15.8.3.19819 sunlogin_guard.exe escalationi di privilegi]
• Punti: 20