The vulnerability of the FOQUZ platform, related to the incorrect expiration time of sessions, allows attackers to elevate their privileges and gain unauthorized access to protected information.

The vulnerability of the FOQUZ platform is related to an incorrect session duration. Exploiting this vulnerability can allow a remote attacker to increase their privileges and gain unauthorized access to protected information...

smm_usbrt_poc

UsbRt SMM Privilege Elevation 这是一个概念验证代码，演示了CVE-2017-5721漏洞的利用。该PoC会导致系统因发生机器检查异常而完全卡住。 您只需安装CHIPSEC Framework即可。如果您有Intel设备，别忘了在/etc/default/grub中添加GRUBCMDLINELINUXDEFAULT="quiet splash acpi=off"。 使用示例： sudo python poc.py...

CVE-2024-26229-exploit

CVE-2024-26229 LPE en Windows Este repositorio es una reescritura del código desde aquí, pero sin dependencias adicionales. PARCHEADO: 9 de abril de 2024...

SdoKeyCrypt-sys-local-privilege-elevation

SdoKeyCrypt.sys - 本地权限提升漏洞 1. 什么是 SdoKeyCrypt.sys？ SdoKeyCrypt.sys 是一款大型多人在线角色扮演游戏（MMORPG） 冒险岛Online 的键盘保护驱动程序，该游戏在中国由 盛大集团发行。 游戏官方网站：http://mxd.sdo.com。（语言：中文） 该驱动程序会在游戏首次运行时下载并安装到 C:\Windows\System32\ 文件夹中。由于游戏体积很大（约 13.11 GB），我在这里备份了一份 SdoKeyCrypt.sys 以便想要复现此漏洞的人使用。 SdoKeyCrypt.sys...

CVE-2026-106378

A privilege elevation flaw was found in the Sandbox component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/507596239...

Win-PortFwd

Win-PortFwd Script de Powershell para configurar el reenvío de puertos de Windows usando el cliente nativo netsh Instalación: git clone https://github.com/deepzec/Win-PortFwd.git Uso: .\win-portfwd.ps1 o powershell.exe -noprofile -executionpolicy bypass -file .\win-portfwd.ps1 Ejemplo : Nota: Est...

CVE-2020-3153

CVE-2020-3153 Código POC para CVE-2020-3153 - vulnerabilidad de path traversal en Cisco AnyConnect Lea más sobre la vulnerabilidad aquí: https://ssd-disclosure.com/ssd-advisory-cisco-anyconnect-privilege-elevation-through-path-traversal/ Pasos a seguir para obtener un shell de Windows en el...

CVE-2026-78341

Dell Secure Connect Gateway (SCG) Policy Manager versions prior to 5.34.00.16 are susceptible to an Incorrect Authorization vulnerability (CWE-863). A high privileged attacker with remote access could exploit this flaw to achieve Elevation of privileges and Unauthorized access . Specific exploit ...

CVE-2026-76769

Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, contains a Missing Authorization vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges...

EUVD-2026-95579

Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, contains an Authorization Bypass Through User-Controlled Key vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges...

CVE-2026-78023

Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, contains an Authorization Bypass Through User-Controlled Key vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges...

CVE-2026-76779

Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, contains an Improper Restriction of Excessive Authentication Attempts vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges,...

CVE-2026-76769

Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, contains a Missing Authorization vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges...

CVE-2021-1732

CVE-2021-1732 CVE-­2021­-1732 Microsoft Windows 10 本地提权漏 研究及Poc/Exploit开发 受影响系统及应用版本 Windows Server, version 20H2 Server Core Installation Windows 10 Version 20H2 for ARM64­based Systems Windows 10 Version 20H2 for 32­bit Systems Windows 10 Version 20H2 for x64­based Systems Windows Server, versi...

CVE-2024-26229-lpe

CVE-2024-26229 CWE-781: Validación de direcciones incorrecta en IOCTL con código de control de E/S METHODNEITHER en el controlador csc.sys...

EUVD-2026-95399

Improper certificate validation in Microsoft Partner Center allows an unauthorized attacker to elevate privileges over a network...

EUVD-2026-95398

Authorization bypass through user-controlled key in Microsoft Bookings allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-94510

Authorization bypass through user-controlled key in Microsoft Bookings allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-96207

Improper certificate validation in Microsoft Partner Center allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-69435

Missing authorization in Azure SRE Agent allows an authorized attacker to elevate privileges over a network...