r0ak

r0ak r0ak is a Windows command-line utility that enables you to easily read, write, and execute kernel-mode code with some limitations from the command prompt, without requiring anything else other than Administrator privileges. Quick Peek r0ak v1.0.0 -- Ring 0 Army Knife...

CVE-2024-22275

CVE-2024-22275: Partial File Read in VMware vCenter Server The vCenter Server contains a partial file read vulnerability. A malicious actor with administrative privileges on the vCenter appliance shell may exploit this issue to partially read arbitrary files containing sensitive data. Vendor...

CVE-2026-16232

CVE-2026-16232 — Check Point SmartConsole Authentication Bypass An authentication bypass PoC from unauthenticated network access to full administrator privileges. Single file, pure Python 3 standard library, zero dependencies. Vulnerability Summary The Management Server Java login service...

CVE-2022-44721-CsFalconUninstaller

CVE-2022-44721 Crowdstrike Falcon Uninstaller CrowdStrike Falcon is a cloud-powered endpoint detection and response EDR and antivirus AV solution. On each end-device a kernel level managed sensor is deployed and makes use of the cloud-based capabilities. The sensor can be configured with an...

CVE-2026-76504-Proof-of-concept

Cisco Catalyst SD-WAN Manager — CVE-2026-76504 Unauthenticated authentication bypass caused by improper handling of URL encoding CWE-177 in the API session management layer. A crafted request reaches a privileged endpoint and is treated as an authenticated admin session. Overview The vulnerabilit...

CVE-2026-24291

🔓 Privilege Escalation Bypass Utility v2026 Streamlined Access Elevation for Advanced Windows Workflows 🧠 Conceptual Overview This tool is engineered for power users who require frictionless elevation of system permissions without repetitive manual authentication. Think of it as a digital skeleto...

CVE-2018-6606

CVE-2018-6606 This terminates any PID. Tested on Windows 10 64-bit, Flare VM. Administrator privileges are required. Some adjustments may be needed — see resource.rc. Toolchain Download:...

MSDIA-x64

Install Visual C++ redistributable from here: https://go.microsoft.com/fwlink/?LinkId=746572 2. Run install.bat as admin...

CVE-2023-43147

CVE-2023-43147 Vendor: PHPJabbers Vendor Homepage: https://www.phpjabbers.com/ Software Link: https://www.phpjabbers.com/limo-booking-software Version: 1.0 Tested on: Windows 10 Pro Impact: Add an attacker user with admin privileges CVE: Cross Site Request Forgery vulnerability in...

CVE-2025-2825

CVE-2025-2825/CVE-2025-31161 Introduction This document presents a security analysis of vulnerability CVE-2025-2825 affecting the server component of CrushFTP — a commercial solution for file transfer and storage FTP, SFTP, HTTP/S, S3-like interfaces, etc.. The defect is classified as an...

CVE-2024-0012

CVE-2024-0012 CVE-2024-0012 an authentication bypass in Palo Alto Networks PAN-OS software enables an unauthenticated attacker with network access to the management web interface to gain PAN-OS administrator privileges to perform administrative actions, tamper with the configuration, or exploit...

CVE-2024-22274

CVE-2024-22274: Authenticated Remote Code Execution in VMware vCenter Server The vCenter Server contains an authenticated remote code execution vulnerability. A malicious actor with administrative privileges on the vCenter appliance shell may exploit this issue to run arbitrary commands on the...

AMSIDetection

Author: Aden Chung Wee Jing [email protected] Company: Countercept @countercept Website: https://countercept.com How to Compile/execute Program must be compiled in x64 and run with adminstrative privliges...

CVE-2025-11001

Usage: python3 exploit.py -t "C:\Users\pac\Desktop" -o demo.zip --data-file calc.exe Exploiting 7-zip The vulnerability is only exploitable on windows and has one major caveat.The bug can only be exploited when 7-Zip is ran with Admin privileges for this vulnerability to be succesfully exploited...

CVE-2020-5844

CVE-2020-5844 Authenticated RCE in PandoraFMS 7.0-NG 742 Admin privileged attackers can upload malicious PHP documents. By decoding the base64 file location users can gain a shell as apache user. Discovered by TheCyberGeek PoC python script Usage: python3 CVE-2020-5844.py URL USER PASS...

7zip-CVE-2025-11001

Usage: python3 exploit.py -t "C:\Users\pac\Desktop" -o demo.zip --data-file calc.exe Exploiting 7-zip The vulnerability is only exploitable on windows and has one major caveat.The bug can only be exploited when 7-Zip is ran with Admin privileges for this vulnerability to be succesfully exploited...

Cisco_CVE-2023-20198

CiscoCVE-2023-20198 Cisco CVE-2023-20198 👉 Cisco warned of a critical authentication bypass zero-day vulnerability CVE-2023-20198 in its IOS XE software that allows unauthenticated attackers to gain full administrative privileges. 👨‍💻 The vulnerability only affects devices with the Web User...

CVE-2025-11001

Usage: python3 exploit.py -t "C:\Users\pac\Desktop" -o demo.zip --data-file calc.exe Exploiting 7-zip The vulnerability is only exploitable on windows and has one major caveat.The bug can only be exploited when 7-Zip is ran with Admin privileges for this vulnerability to be succesfully exploited...

CVE-2019-9193byVulHub

CVE-2019-9193byVulHub PostgreSQL Arbitrary Command Execution with Admin Privileges CVE-2019-9193 Description PostgreSQL is a powerful open-source relational database management system. A vulnerability present in versions 9.3 through 11 allows administrators or users with COPY TO/FROM PROGRAM...

p2p

P2P Remote Desktop Remote Desktop P2P based - Portable, No Configuration or Installation Needed. How it works Compile and Open p2p.exe as admin in 2 different PC's. Copy the My Lan or Wan IP and communicate it to other peer and vice versa. The 2 peers have now the 2 endpoint to connect to, so pre...