EUVD-2026-92198

In mtee, there is a possible escalation of privilege due to type confusion. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11383899; Issue ID: MSV-9608...

CVE-2026-20587

In mtee, there is a possible escalation of privilege due to type confusion. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11383899; Issue ID: MSV-9608...

EUVD-2026-92199

In vdec, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11383899; Issue ID: MSV-9800...

CVE-2026-20579

A type confusion vulnerability in vdec leads to a possible out-of-bounds write . If a malicious actor already possesses System privilege , they could achieve a local escalation of privilege . This vulnerability does not require user interaction for exploitation. Remediation is available via Patch...

CVE-2026-20524

A memory corruption vulnerability exists in apu due to improper input validation (CWE-1285). This flaw could allow an attacker to achieve local escalation of privilege without requiring additional execution privileges or user interaction. Remediation is available via Patch ID: ALPS11249004 (Issue...

EUVD-2026-92204

In neuropilot, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11249062; Issue ID: MSV-9171...

CVE-2026-20523

A missing bounds check in neuropilot leads to a possible out-of-bounds write . This vulnerability could result in local escalation of privilege without requiring additional execution privileges or user interaction. Remediation is available via Patch ID: ALPS11249062 (Issue ID: MSV-9171). No speci...

EUVD-2026-92205

In neuropilot, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11249050; Issue ID: MSV-9172...

CVE-2026-20522

The software neuropilot contains an out-of-bounds write vulnerability caused by a missing bounds check. This security flaw could allow an attacker to achieve local escalation of privilege without requiring additional execution privileges or user interaction. Remediation is available via Patch ID:...

CVE-2026-20521

A vulnerability exists in the Video HAL component due to a missing bounds check , which can result in a stack-based buffer overflow (CWE-121). This flaw allows for a local escalation of privilege without requiring additional execution privileges or user interaction. Remediation is available via P...

EUVD-2026-92206

In Video HAL, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11375674; Issue ID: MSV-9571...

CVE-2026-20589

A type confusion vulnerability exists in venc , resulting in a possible out-of-bounds write . This flaw could allow a malicious actor with existing System privilege to achieve local escalation of privilege without any user interaction. Remediation is available via Patch ID: ALPS11383899 (Issue ID...

CVE-2026-20589

In venc, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11383899; Issue ID: MSV-9606...

EUVD-2026-92207

In venc, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11383899; Issue ID: MSV-9606...

GTFOBins.github.io

GTFOBins GTFOBins 是一个精选的类 Unix 可执行文件列表，可用于绕过配置不当系统中的本地安全限制。 查看项目地址：gtfobins.org...

raptor_infiltrate20

raptorinfiltrate20 "Los bichos son, con diferencia, la clase de entidad más numerosa y exitosa." -- Enciclopedia de la vida animal Este repositorio contiene todos los materiales relacionados con mi charla "El efecto INFILTRATE: 6 bugs en 6 meses" presentada en INFILTRATE20 el 26 de enero de 2021...

CVE-2023-20198

CVE-2023-20198 - PoC SCRIPT /!\ 免责声明： 此脚本按“原样”提供，仅用于教育目的。强烈建议用户谨慎使用，并在法律和道德允许的范围内使用。 描述 在目标 Web 服务器上执行各种操作，例如创建和/或删除本地用户帐户、重启 Web 服务器、安装并检查植入物是否存在，最后清理所创建的用户帐户。 要求 Python 3.x Requests 库（pip install requests） 用法 python CVECISCO20198V2.py 关于...

2009

2009 Exploits del kernel de Linux - CVE-2009-1185 + CVE-2009-1337 + CVE-2009-2692 + CVE-2009-2698 + CVE-2009-3547...

Windows-Local-Privilege-Escalation-Cookbook

Windows Local Privilege Escalation Cookbook Tabla de contenido Windows Local Privilege Escalation Cookbook Tabla de contenido Descargo de responsabilidad Descripción Introducción Definición Herramientas útiles Vulnerabilidades Referencias Descargo de responsabilidad Este repositorio, "Windows Loc...

cve-2025-7771

CVE-2025-7771 — ThrottleStop.sys LPE Proof-of-concept for CVE-2025-7771. ThrottleStop.sys exposes two IOCTL handlers that allow arbitrary physical memory read/write with no access control — any admin process can read or write anywhere in physical RAM. Tested on Windows 10 22H2 and Windows 11 23H2...