CVE-2020-1337

CVE-2020-1337 CVE-2020-1337 es un bypass del parche de PrintDemon CVE-2020-1048 mediante un Directorio de Unión, creado para remediar una vulnerabilidad de Elevación de Privilegios EoP\Escalada Local de Privilegios LPE que afecta al Servicio de Cola de Impresión de Windows. La vulnerabilidad sí...

CVE-2022-3368

CVE-2022-3368 PoC para la vulnerabilidad de movimiento arbitrario de archivos en el componente de actualización de software de Avira Security. Los usuarios tienen la opción de usar esta función para actualizar cualquier software desactualizado en su PC; cuando se utiliza esta función, el servicio...

CVE-2024-37726-MSI-Center-Local-Privilege-Escalation

CVE-2024-37726 MSI Center Escalação de Privilégio Local - Vulnerabilidade de Sobrescrita Arbitrária de Arquivos Resumo da Vulnerabilidade Uma vulnerabilidade de escalação de privilégio local no sistema operacional Windows foi identificada nas versões = 2.0.36.0 do MSI Center, que permite a um...

CVE-2026-41091

🛡️ CVE-2026-41091 - RedSun Vulnérabilité d'élévation de privilèges de Microsoft Defender RedSun est une technique d'élévation de privilèges locale LPE avec un PoC associé qui abuse d'une vulnérabilité de suivi de lien dans le moteur de protection contre les programmes malveillants de Microsoft...

CVE-2020-1337

CVE-2020-1337 - Piantagione Binaria bypass di CVE-2020-1048 Peleg Hadar @peleghd e Tomer Bar di SafeBreach @safebreach sono stati riconosciuti da Microsoft per il CVE-2020-1048, una vulnerabilità dello Spooler di Windows che consente un'elevazione dei privilegi su Windows 7 e successivi. Alcuni...

CVE-2026-41091-PoC-Exploit

☀️ CVE-2026-41091 - RedSun SolarFlare - Exploit LPE per Microsoft Defender Vulnerabilità di Link Following in Microsoft Defender - Escalation di privilegi locali a NT AUTHORITY\SYSTEM La vulnerabilità è nota come "RedSun" 🎯, "SolarFlare" è il nome che ho dato al mio exploit. ✅ 📌 Panoramica Questo...

CVE-2024-27518

CVE-2024-27518 - PoC LPE per SUPERAntiSpyware Professional X Questa vulnerabilità è stata scoperta e divulgata da M. Akil Gündoğan del Secunnix Vulnerability Research Team. Questo repository conterrà la proof-of-concept e gli advisory. Dettagli: Prodotto: SUPERAntiSpyware Professional X e tutte l...

CVE-2020-24955

CVE-2020-24955 SUPERAntiSpyware Professional X Trial = 10.0.1206 Escalonamento de Privilégios Local As versões do SUPERAntiSpyware Professional X Trial anteriores a 10.0.1206 são vulneráveis a escalonamento de privilégios local, pois permitem que usuários sem privilégios restaurem arquivos em...

PlEXcalaison

Lokale Privilegien PlEXcalasion - CVE-2021-42835 Plex Media Server für Windows vor Version 1.25.0.5282 ist anfällig für Time-Of-Check-Time-Of-Use TOCTOU, was es Benutzern mit niedrigen Privilegien ermöglicht, SYSTEM-Privilegien zu erlangen. Entdeckt von Tomer Peled, Netanel Cohen und Amir Shen,...

CVE-2024-44193

Windows über iTunes hacken – Lokale Privilegienausweitung 0-Day Einführung zu CVE-2024–44193 Dies ist ein Write-up über CVE-2024–44193, einen Local Privilege Escalation Exploit in iTunes Version 12.13.2.3. Es wurde am 12. September 2024 von Apple gepatcht. Link zum Apple Security Advisory: Apple...

CVE-2020-1337-exploit

CVE-2020-1337 Windows-Privilegienerweiterung Dies ist ein WWWwrite-what-where-Exploit Danksagung Junyu Zhou @md5salt, der mir sagte, dass es einen neuen Bug geben könnte. Wenxu Wu @ma7h1as, ich habe den Bug gefunden und diesen Exploit geschrieben. So funktioniert es Im Patch für CVE-2020-1048 hat...

SysmonEoP

SysmonEoP Proof of Concept per l'eliminazione/scrittura arbitraria di file in Sysmon CVE-2022-41120/CVE-2022-44704 Vulnerabilità La vulnerabilità si trova nel codice responsabile dell'evento ClipboardChange, raggiungibile tramite RPC. Gli utenti locali possono inviare dati al server RPC, che...

CVE-2026-12410 CCleaner local privilege escalation via link following on uninstall

Link following vulnerability in the Uninstaller component in CCleaner prior to 7.10.1464 on Windows allows a local, low-privileged attacker to escalate privileges to SYSTEM via a symlink/junction created during application uninstallation, which CCleaner follows when deleting the application's dat...

Symlink Attack

Overview Affected versions of this package are vulnerable to Symlink Attack in the WCOW cache mount source selector, which resolves NTFS junctions in the cache mount source path outside the intended cache root. A user who can author a build run by the daemon can read arbitrary host files reachabl...

CVE-2026-15788

BuildKit's cache mount source= selector on Windows Container on Windows WCOW workers does not detect NTFS directory junctions placed inside the cache root. A build authored by an untrusted user on a WCOW-configured BuildKit daemon can read arbitrary host files reachable to the BuildKit daemon...

EUVD-2026-43543

AnyDesk Support Information Link Following Denial-of-Service Vulnerability. This vulnerability allows local attackers to create a denial-of-service condition on affected installations of AnyDesk. An attacker must first obtain the ability to execute low-privileged code on the target system in orde...

EUVD-2026-43545

AnyDesk Screen Recording Link Following Denial-of-Service Vulnerability. This vulnerability allows local attackers to create a denial-of-service condition on affected installations of AnyDesk. An attacker must first obtain the ability to execute low-privileged code on the target system in order t...

CVE-2026-15682

AnyDesk Support Information Link Following Denial-of-Service Vulnerability. This vulnerability allows local attackers to create a denial-of-service condition on affected installations of AnyDesk. An attacker must first obtain the ability to execute low-privileged code on the target system in orde...

CVE-2026-15681

AnyDesk Screen Recording Link Following Denial-of-Service Vulnerability. This vulnerability allows local attackers to create a denial-of-service condition on affected installations of AnyDesk. An attacker must first obtain the ability to execute low-privileged code on the target system in order t...

CVE-2026-15684

Glarysoft Glary Utilities Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Glarysoft Glary Utilities. An attacker must first obtain the ability to execute low-privileged code on the target system...