PT-2026-112640

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description An out-of-bounds read in the HID Parser Library allows an authorized attacker to disclose information locally. An out-of-bounds read occurs when the software reads data past the end of the...

PT-2026-112002

Untrusted pointer dereference in SysInternals allows an authorized attacker to elevate privileges locally...

PT-2026-111883

Untrusted pointer dereference in SysInternals allows an authorized attacker to elevate privileges locally...

PT-2026-113042

Name of the Vulnerable Software and Affected Versions Microsoft.NETCore.App.Runtime.linux-arm versions 8.0.0 through 8.0.31 Microsoft.NETCore.App.Runtime.linux-arm64 versions 8.0.0 through 8.0.31 Microsoft.NETCore.App.Runtime.linux-musl-arm versions 8.0.0 through 8.0.31...

PT-2026-113211

Time-of-check time-of-use toctou race condition in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally...

PT-2026-113232

Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally...

PT-2026-112017

Name of the Vulnerable Software and Affected Versions Microsoft .NET Framework versions 3.5 through 4.8.1 Description An untrusted search path issue exists that allows an authenticated local attacker to bypass Windows Defender Application Control WDAC restrictions. The attack involves using a...

PT-2026-112641

Name of the Vulnerable Software and Affected Versions Windows Shell affected versions not specified Description A use after free condition in Windows Shell allows an authorized attacker to elevate privileges locally. Use after free is a memory corruption issue that occurs when an application...

PT-2026-112722

Name of the Vulnerable Software and Affected Versions Windows Device Association Service affected versions not specified Description A use after free issue in the Windows Device Association Service allows an authorized attacker to elevate privileges locally. Use after free is a memory corruption...

PT-2026-112382

Name of the Vulnerable Software and Affected Versions Windows Bind Filter Driver affected versions not specified Description Improper access control in the Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally. Recommendations At the moment, there is no informatio...

PT-2026-113155

Null pointer dereference in Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to execute code locally...

PT-2026-112703

Name of the Vulnerable Software and Affected Versions Windows Device Association Service affected versions not specified Description A heap-based buffer overflow exists in the Windows Device Association Service. This flaw allows an authorized attacker to elevate privileges locally. A heap-based...

PT-2026-113149

Use after free in Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to elevate privileges locally...

CVE-2023-43871-WBCE-Arbitrary-File-Upload--XSS---Media

WBCE File Upload XSS - WBCE v1.6.1 Author: Sergio Description: File upload vulnerability in WBCE v.1.6.1 allows a local attacker to upload a pdf file with hidden XSS. Attack Vectors: A vulnerability in Media file upload sanitation allows you to upload a PDF file with hidden XSS. POC: When logging...

CVE-2026-41091

🛡️ CVE-2026-41091 - RedSun Microsoft Defender Elevation of Privilege Vulnerability RedSun is a local privilege escalation LPE technique and associated PoC abusing a link-following vulnerability in Microsoft Defender's Malware Protection Engine. It allows a low-privileged authenticated attacker to...

CVE-2011-1249

CVE-2011-1249 🖥️ -h3x0v3rl0rd- Microsoft Windows x86 - 'afd.sys' Local Privilege Escalation MS11-046 apt install mingw-w64 i686-w64-mingw32-gcc 40564.c -o newshell.exe -lws232...

CVE-2026-108941

The Linketic CityGaussian software (versions up to 2.0 ) contains a code injection vulnerability within the Sidecar Parsing component. Specifically, the parse_cfg_args function in the internal/utils/common.py file is susceptible to exploitation because the manipulation of the cfg_args argument al...

CVE-2026-108941 Linketic CityGaussian Sidecar Parsing common.py parse_cfg_args code injection

A vulnerability was identified in Linketic CityGaussian up to 2.0. This affects the function parsecfgargs of the file internal/utils/common.py of the component Sidecar Parsing. The manipulation of the argument cfgargs leads to code injection. The attack can only be performed from a local...

CVE-2021-4034

CVE-2021-4034 One day for the polkit privilege escalation exploit Just execute make, ./cve-2021-4034 and enjoy your root shell. The original advisory by the real authors is here PoC If the exploit is working you'll get a root shell immediately: vagrant@ubuntu-impish:/CVE-2021-4034$ make cc -Wall...

CVE-2026-49952

setup pip3 install Pillow torch torchvision run $ python3 exploit.py http://localhost/discuz5/ +----------------------------------------------------+ | Discuz! X5.0 Remote Code Execution Exploit by EgiX | +----------------------------------------------------+ + Getting authcode for DB export +...