CVE-2026-50343-InstallService-EoP

CVE-2026-50343: EoP de StaticPluginMap d'InstallService Utilisateur standard vers SYSTEM J'ai découvert et signalé indépendamment la vulnérabilité désormais suivie sous le nom de CVE-2026-50343. MSRC a confirmé que ma soumission était un doublon d'un rapport antérieur d'un autre chercheur. Un...

CVE-2026-49176_LPE_POC

CVE-2026-49176 SYSTEM Shell PoC Local privilege-escalation proof of concept for the Windows WalletService vulnerability fixed in July 2026. Technical write-up: CVE-2026-49176 Exploit Development: WalletService to SYSTEM. A standard user creates a Wallet ESE database containing a persisted callbac...

CVE-2023-38146-Poc

Preuve de concept PoC pour l'exploit ThemeBleed CVE-2023-38146 Thèmes Windows 11 Fortement inspiré de https://github.com/gabe-k/themebleed qui ne fonctionne que sous Windows c'est pourquoi j'ai décidé d'écrire celui-ci. Utilisation de code modifié depuis impacket smbserver.py...

CVE-2023-38146

PoC для эксплойта ThemeBleed CVE-2023-38146 темы Windows 11 Сильно вдохновлено https://github.com/gabe-k/themebleed, который работает только на Windows именно поэтому я решил написать это. Использован модифицированный код из impacket smbserver.py...

ThemeBleedPy

Un immense merci à gabek pour le PoC initial en C, et pour avoir trouvé cette CVE, il s'agit d'une refonte de son code en python, réutilisant ses fichiers de stage. Pour voir le PoC initial, consultez sa page ici : https://github.com/gabe-k/themebleed ThemeBleedPy Une preuve de concept utilisant...

MemoryModulePP

MemoryModulePP memorymodule:https://github.com/fancycode/MemoryModule Библиотека для загрузки DLL из памяти Модифицировано из memorymodule. Поддержка исключений...

PT-2026-97222

Name of the Vulnerable Software and Affected Versions Foxit PDF Editor/Reader affected versions not specified Description A local privilege escalation issue exists in the updater of Foxit PDF Editor/Reader. The problem occurs because the updater unsafely loads dynamic-link libraries DLLs—which ar...

FalconFlank

FalconFlank Crowdstrike Falcon 0day Privilege Escalation Vulnerability FalconFlank is a 0day privilege escalation that abuses the office malicious macros remediation in Crowdstrike Falcon Sensor, obviously by the time I drop this Crowdstrike would already have detections for it so if you want to...

CVE-2026-68955

The installer for Rakuten Kobo Desktop Application Windows version insecurely loads Dynamic Link Libraries. If there is a crafted DLL at the same directory when invoking the affected installer, arbitrary code may be executed with the privileges of the user who performed the installation...

CVE-2026-68955

The Rakuten Kobo Desktop Application Windows installer is vulnerable to DLL search-order hijacking (CWE-427). The installer's uncontrolled DLL search path allows a crafted DLL placed in the same directory to be loaded when the installer runs, leading to arbitrary code execution with the privilege...

The vulnerability of the SAP GUI graphical user interface for Windows relates to deficiencies in the mechanism for calling system libraries, allowing attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the SAP GUI graphical user interface for Windows relates to deficiencies in the mechanism for calling system libraries. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information through a...

CVE-2026-78574 Improper Assembly Resolution in Okta Hyperdrive Integration Plugin Registry Handling

The Okta Hyperdrive Integration plugin resolves a required assembly using a registry path within the current user's hive without integrity verification. The referenced path is loaded via Assembly.LoadFrom without signature validation, resulting in an unverified assembly executing within the conte...

CVE-2026-77699

Zohocorp ManageEngine Endpoint Central versions below 11.5.2605.01 are vulnerable to Local privilege escalation due to loading a dll from an untrusted path...

CVE-2026-77699

ManageEngine Endpoint Central (Zohocorp) versions below 11.5.2605.01 are susceptible to a local privilege escalation caused by loading a DLL from an untrusted path . An attacker with low-level local access and the ability to prompt a user for interaction could exploit this to gain elevated privil...

CVE-2026-77699 Privilege Escalation

Zohocorp ManageEngine Endpoint Central versions below 11.5.2605.01 are vulnerable to Local privilege escalation due to loading a dll from an untrusted path...

CVE-2026-77699 Privilege Escalation

Zohocorp ManageEngine Endpoint Central versions below 11.5.2605.01 are vulnerable to Local privilege escalation due to loading a dll from an untrusted path...

EUVD-2026-72337

Zohocorp ManageEngine Endpoint Central versions below 11.5.2605.01 are vulnerable to Local privilege escalation due to loading a dll from an untrusted path...

PT-2026-86675

Zohocorp ManageEngine Endpoint Central versions below 11.5.2605.01 are vulnerable to Local privilege escalation due to loading a dll from an untrusted path...

CVE-2026-77699: Improper Privilege Management

Zohocorp ManageEngine Endpoint Central versions below 11.5.2605.01 are vulnerable to Local privilege escalation due to loading a dll from an untrusted path...

CVE-2026-9634

CVE-2026-9634 affects Rockwell Automation's Redundancy Module Configuration Tool (RMConfigTool.exe). The binary searches system path directories for a required DLL, and one or more of these directories may be writable by standard (non-administrator) users due to incorrect default permissions. A l...