CVE-2026-46242

CVE-2026-46242 — "Bad Epoll" This repo is a bad Epoll validator for aarch64 kernels based on exploit already exists for x86. Linux Kernel Local Privilege Escalation viaepoll Use-After-Free Race Condition Field| Detail ---|--- CVE| CVE-2026-46242 Nickname| Bad Epoll Type| Use-After-Free UAF via ra...

CVE-2025-50168-pwn2own-berlin-2025

Author: D4m0n CVE-2025-50168 This is an exploit submitted to Pwn2Own Berlin 2025 - LPE Category. The vulnerability occurs in Win32kbase!DirectComposition, and further details can be found in the blog post. Acknowledgements kASLR bypass technique: prefetch-tool by carrotc4k3 Special thanks to: Dav...

CVE-2008-6827

CVE-2008-6827 Symantec Altiris Client Service 6.8.378 - Local Privilege Escalation Exploit-DB publication at https://www.exploit-db.com/exploits/5625/ Author Alex Hernandez aka @alt3kx...

cve-2018-8120

cve-2018-8120 Details see: http://bigric3.blogspot.com/2018/05/cve-2018-8120-analysis-and-exploit.html...

CVE-2021-1675-LPE

Local Privilege Escalation Edition of CVE-2021-1675/CVE-2021-34527 Local Privilege Escalation implementation of the CVE-2021-1675/CVE-2021-34527 a.k.a PrintNightmare. The exploit is edited from published by Zhiniang Peng @edwardzpeng & Xuefeng Li @lxf02942370. Open the project on MSVC and compile...

CVE-2019-9730

CVE-2019-9730: Synaptics Audio Driver LPE The vulnerability in this driver package was with the CxUtilSvc system service. It hosted a COM object that low-privileged code can use to perform arbitrary reads and writes to the registry as SYSTEM. The .NET code adds the IRegistryHelper COM interface a...

CVE-2019-16784-POC

CVE-2019-16784 POC This is my POC for the Windows PyInstaller version 3.6 vulnerability that exists for the --onefile option. An attacker could achieve command execution and possible LPE by hijacking a DLL imported by the python interpreter DLL used by the pyinstaller binary. A short explanation ...

cve-2019-12750

Symantec Local Privilege Escalation - CVE-2019-12750 Based on the excellent writeup by Kyriakos Economou: https://labs.nettitude.com/blog/cve-2019-12750-symantec-endpoint-protection-local-privilege-escalation-part-1/ Only x64 and older Windows versions are supported for now...

CA-Common-Services-privilege-escalation-cve-2016-9795-revisited

CA Common Services privilege escalation CVE-2016-9795 revisited Description In one of my pentests, I stumbled across the casrvc SUID binary which is part of CA Common Services suite. As I found out, the binary is vulnerable to local privilege escalation. As a matter of fact, a public CVE...

CVE-2020-10665

CVE-2020-10665 Docker Desktop Local Privilege Escalation POC for Docker Desktop Local Privilege Escalation. Built based on the writeup at https://www.activecyber.us/activelabs/docker-desktop-local-privilege-escalation-cve-2020-10665. Hardlink creation adapted from...

CVE-2021-21551

PoC for CVE-2021-21551 Windows LPE using the Dell dbutil23.sys driver. Exploit approach Implement read/write, allocate shellcode, flip page to bypass smep, overwrite haldispatch ptr, execute shellcode...

CVE-2021-1675---PrintNightmare-LPE-PowerShell-

CVE-2021-1675 - PrintNightmare LPE PowerShell Caleb Stewart | John Hammond | July 1, 2021 CVE-2021-1675 is a critical remote code execution and local privilege escalation vulnerability dubbed "PrintNightmare." Proof-of-concept exploits have been released Python, C++ for the remote code execution...

CVE-2024-26229-exploit

CVE-2024-26229 Windows LPE This repository is a rewrite of the code from here, but without additional dependencies. PATCHED: Apr 9, 2024...

CVE-2024-49138-POC

CVE-2024-49138-POC Proof of Concept that exploits CVE-2024-49138 in CLFS.sys. CrowdStrike detected the vulnerability actively exploited by threat actors. Tested on Windows 11 23h2. A thorough analysis is available here. Below the hash of the ntoskrnl.exe and clfs.sys that were used to test the PO...

Copy-Fail-CVE-2026-31431-Lab

Copy Fail CVE-2026-31431 — Exploit Reproduction & Detection Lab This repository documents the end-to-end reproduction, detection engineering, and incident response for CVE-2026-31431 "Copy Fail" , a critical Linux kernel local privilege escalation vulnerability affecting kernels 4.14 through...

CVE-2021-1675_RDL_LPE

CVE-2021-1675RDLLPE CS reflective loading plugin for PrintNightMare LPE privilege escalation vulnerability. Out-of-the-box, memory loading, obfuscated driver name loading to bypass Defender/EDR. Disclaimer: This project is only for learning and communication, please use it cautiously within a...

cve-2023-4911-exploit-optimized

Security Notice : This repository contains working exploit code for educational and research purposes. Use responsibly and only on systems you own or have explicit permission to test. CVE-2023-4911 Exploit Looney Tunables Optimized, multi-processing exploits for CVE-2023-4911 targeting x8664 and...

CVE-2019-6329

Local Privilege Escalation in HP Support Assistant A local privilege escalation bug in HP Support Assistant by abusing hard link Researcher: ManhNDd of Bkav Description In HP Support Assistant GUI , when you click Check for updates and messages , the service HP Support Solution Framework will run...

CVE-2016-6914-UniFiVideo-LPE

CVE-2016-6914 - Ubiquiti UniFi Video 3.7.3 LPE PoC 🔥 Overview This repository contains a proof-of-concept PoC for CVE-2016-6914 , a Local Privilege Escalation LPE vulnerability affecting Ubiquiti UniFi Video 3.7.3. An attacker with low privileges can replace a trusted binary taskkill.exe inside...

AutoLocalPrivilegeEscalation

AutoLocalPrivilegeEscalation An automated script that download potential exploit for linux kernel from exploitdb, and compile them automatically This script is created due to Hackademics, there are so much possible exploit for that version of kernel, as a rookie OSCP student, I am not able to fin...