CVE-2021-1732

CVE-2021-1732 CVE-2021-1732 Microsoft Windows 10 Local Privilege Escalation Vulnerability Research and PoC/Exploit Development Affected Systems and Application Versions Windows Server, version 20H2 Server Core Installation Windows 10 Version 20H2 for ARM64‑based Systems Windows 10 Version 20H2 fo...

CVE-2024-37726-MSI-Center-Local-Privilege-Escalation

CVE-2024-37726 Escalada de Privilegios Local en MSI Center – Vulnerabilidad de Sobrescritura Arbitraria de Archivos Resumen de la Vulnerabilidad Se ha identificado una vulnerabilidad de escalada de privilegios local en sistemas Windows en versiones de MSI Center = 2.0.36.0, que permite a un usuar...

procrustes

Procrustes A bash script that automates the exfiltration of data over dns in case we have a blind command execution on a server where all outbound connections except DNS are blocked. The script currently supports sh, bash and powershell and is compatible with exec style command execution e.g...

kernel: KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O

A flaw was found in the Kernel-based Virtual Machine KVM for x86. This vulnerability occurs when KVM incorrectly re-checks Level 1 L1 intercepts during the completion of userspace I/O emulation for a Level 2 L2 instruction. If the L1 or host userspace modifies I/O interception settings during thi...

CVE-2024-48990

CVE-2024-48990 !WARNING Estos archivos e información están destinados únicamente con fines educativos. El autor no es responsable de ningún comportamiento malicioso. Toda la información proporcionada no tiene la intención de incitar ningún tipo de crimen o abuso. Descripción Qualys descubrió que...

ServiceCheater

ServiceCheater Poc of CVE-2020-0113 & CVE-2020-0108 Análisis de vulnerabilidad de escalada de privilegios del servicio en primer plano de Android Antecedentes de la vulnerabilidad En el parche de AOSP de 2020-08, se reveló una vulnerabilidad en el marco AMS, con el identificador CVE-2020-0108,...

meowEye

🐾 MeowEye MeowEye is a real-life scanner for multiple web vulnerabilities. It uses a real browser to observe traffic and perform injection-based tests to detect reflective parameters, local file inclusion LFI, and server-side template injection SSTI vulnerabilities for now. In the ToDo list it wi...

CVE-2023-5178

CVE-2023-5178 The exploit for CVE-2023-5178: NVMe-oF-TCP vulnerability, which is a logic error in NVMe-oF-TCP driver during the handle of corrupted Initialize Connection Request. It leads to racy double-free in kmalloc-96 , which can be exploited to gain LPEsee demo below. The exploit targets...

CVE-2026-46215-exploit-linux-7.0-uaf-stable

CVE-2026-46215 Exploit for Linux 7.0 - More Stable & Reliable c0d3 by : Antonius w1sdom / ev1lut10n / sw0rdm4n - bluedragonsec.com https://github.com/bluedragonsecurity This exploit works in a limited environment, check some requirements below !!! WHAT THE HELL IS THIS ? This is an exploit for...

sudo-chroot

Description: Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled directory is used with the --chroot option. Sudo Local Privesc --chroot...

EUVD-2026-94791

Brocade ASCG before 3.5.0 has a well-known Brocade default password embedded in a script distributed to every customer. Any local authenticated user with read access to the installation path can discover this credential and perform privilege escalation on affected Open Virtual Appliance OVA...

CVE-2026-85488

Brocade ASCG versions prior to 3.5.0 are susceptible to a hardcoded credential exposure. A well-known Brocade default password is embedded within a script distributed to every customer. A local authenticated user with read access to the installation path can discover these credentials. If default...

betwixt

Betwixt te ayudará a analizar el tráfico web fuera del navegador utilizando la interfaz familiar de Chrome DevTools. Instalación Descarga la última versión para tu sistema operativo, crea tu propio paquete o ejecuta Betwixt desde el código fuente. Configuración Para capturar tráfico, tendrás que...

EUVD-2026-94790

A path traversal vulnerability exists in the HTTP service component of Brocade ASCG versions before 3.5.0. An unauthenticated attacker on the local network could send a manipulated API request to the service endpoint bypassing path restrictions to arbitrary file read, file write, or file deletion...

Suborner

Suborner: El falsificador de cuentas invisible ¿Qué es esto? Un programa simple para crear una cuenta de Windows de la que solo tú sabrás : Crear cuentas locales invisibles sin net user ni aplicaciones de administración de usuarios del sistema operativo Windows por ejemplo, netapi32::netuseradd...

LACheck

LACheck Enumeración de Privilegios Administrativos Locales con C .NET Assembly Multihilo Argumentos ./LACheck.exe help | | /\ / | | | | | | / \ | | | | | | | | / /\ \ | | | ' \ / / | |/ / | | / \ | || | | | / | |// \ || |||||\ Uso: LACheck.exe smb rpc...

CVE-2022-22077

✅ CVE-2022-22077 exploitation framework RTCore64.sys: This document provides a comprehensive overview of the CVE-2022-22077 exploitation framework, a sophisticated BYOVD Bring Your Own Vulnerable Driver attack toolkit that targets the RTCore64.sys driver vulnerability. This framework demonstrates...

cve-2023-4911-exploit-optimized

Security Notice : This repository contains working exploit code for educational and research purposes. Use responsibly and only on systems you own or have explicit permission to test. CVE-2023-4911 Exploit Looney Tunables Optimized, multi-processing exploits for CVE-2023-4911 targeting x8664 and...

CVE-2026-5049

A path traversal vulnerability affects the The Zone Alias Import flow feature in Brocade SANnav before 3.0.0a. A local authenticated attacker can write an uploaded content outside the intended directory...

CVE-2026-43499-aristotle

CVE-2026-43499 — aristotle au/KDDI Xiaomi XIG04 Local privilege escalation tmp-root for the au/KDDI Xiaomi "aristotle" XIG04 on Android 12 , via CVE-2026-43499. It is a device-owner rooting primitive: it roots your own phone e.g. to re-enable ADB when developer options are unreachable. This is an...