The vulnerability of the FOQUZ platform, related to the incorrect expiration time of sessions, allows attackers to elevate their privileges and gain unauthorized access to protected information.

The vulnerability of the FOQUZ platform is related to an incorrect session duration. Exploiting this vulnerability can allow a remote attacker to increase their privileges and gain unauthorized access to protected information...

smm_usbrt_poc

UsbRt SMM 特権昇格 これは、CVE-2017-5721 脆弱性の悪用を実証する Proof-of-Concept コードです。この PoC は、Machine Check Exception が発生するため、システムを完全にフリーズさせます。 必要なのは、CHIPSEC Framework がインストールされていることだけです。また、Intel デバイスをお使いの場合は、/etc/default/grub に GRUBCMDLINELINUXDEFAULT="quiet splash acpi=off" を設定するのを忘れないでください。 使用例: sudo python...

CVE-2024-26229-exploit

CVE-2024-26229 Windows LPE このリポジトリは、ここからのコードを、追加の依存関係なしで書き直したものです。 修正済み: 2024年4月9日...

SdoKeyCrypt-sys-local-privilege-elevation

SdoKeyCrypt.sys - ローカル特権昇格の脆弱性 1. SdoKeyCrypt.sys とは何ですか？ SdoKeyCrypt.sys は、中国の Shanda Group が運営する MapleStory Online と呼ばれる MMORPG（Massively-Multiplayer-Online-Role-Playing-Game）用のキーボード保護ドライバです。 ゲーム公式サイト: http://mxd.sdo.com. 言語: 中国語 このドライバは、ゲームが初回起動時に C:\Windows\System32...

CVE-2026-106378

A privilege elevation flaw was found in the Sandbox component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/507596239...

Win-PortFwd

Win-PortFwd ネイティブのnetshクライアントを使用してWindowsのポートフォワーディングを設定するPowershellスクリプト インストール: git clone https://github.com/deepzec/Win-PortFwd.git 使用方法: .\win-portfwd.ps1 または powershell.exe -noprofile -executionpolicy bypass -file .\win-portfwd.ps1 例: 注意:...

CVE-2020-3153

CVE-2020-3153 CVE-2020-3153のPOCコード - Cisco AnyConnectパストラバーサル脆弱性 脆弱性の詳細はこちら: https://ssd-disclosure.com/ssd-advisory-cisco-anyconnect-privilege-elevation-through-path-traversal/ SYSTEM 権限でデスクトップにWindowsシェルを取得する手順: 1. class1.csファイル内で、CAC-nc-installコマンドラインパラメータのUsername文字列を自分のユーザーアカウントディレクトリに変更します。...

CVE-2026-78341

Dell Secure Connect Gateway (SCG) Policy Manager versions prior to 5.34.00.16 are susceptible to an Incorrect Authorization vulnerability (CWE-863). A high privileged attacker with remote access could exploit this flaw to achieve Elevation of privileges and Unauthorized access . Specific exploit ...

CVE-2026-76769

Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, contains a Missing Authorization vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges...

CVE-2026-78023

Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, contains an Authorization Bypass Through User-Controlled Key vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges...

EUVD-2026-95579

Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, contains an Authorization Bypass Through User-Controlled Key vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges...

CVE-2026-76779

Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, contains an Improper Restriction of Excessive Authentication Attempts vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges,...

CVE-2026-76769

Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, contains a Missing Authorization vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges...

CVE-2021-1732

CVE-2021-1732 CVE-2021-1732 Microsoft Windows 10 ローカル権限昇格の研究とPoc/Exploit開発 影響を受けるシステムとアプリケーションバージョン Windows Server, version 20H2 Server Core Installation Windows 10 Version 20H2 for ARM64­based Systems Windows 10 Version 20H2 for 32­bit Systems Windows 10 Version 20H2 for x64­based Systems Window...

CVE-2024-26229-lpe

CVE-2024-26229 CWE-781: csc.sysドライバにおけるMETHODNEITHER I/O制御コードを使用したIOCTLでの不適切なアドレス検証...

EUVD-2026-95399

Improper certificate validation in Microsoft Partner Center allows an unauthorized attacker to elevate privileges over a network...

EUVD-2026-95398

Authorization bypass through user-controlled key in Microsoft Bookings allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-96207

Improper certificate validation in Microsoft Partner Center allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-94510

Authorization bypass through user-controlled key in Microsoft Bookings allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-69435

Missing authorization in Azure SRE Agent allows an authorized attacker to elevate privileges over a network...