5327 matches found
CVE-2020-3153
CVE-2020-3153 CVE-2020-3153 的 POC 代码 - Cisco AnyConnect 路径遍历漏洞 在此处阅读有关该漏洞的更多信息：https://ssd-disclosure.com/ssd-advisory-cisco-anyconnect-privilege-elevation-through-path-traversal/ 按照以下步骤在桌面上获取具有 SYSTEM 权限的 Windows shell： 1. 在文件 class1.cs 中，将 Username 字符串更改为你的用户账户目录，对应 CAC-nc-install 命令行参数。 2...
CVE-2021-1732
CVE-2021-1732 CVE-2021-1732 Microsoft Windows 10 本地提权漏 研究及Poc/Exploit开发 受影响系统及应用版本 Windows Server, version 20H2 Server Core Installation Windows 10 Version 20H2 for ARM64based Systems Windows 10 Version 20H2 for 32bit Systems Windows 10 Version 20H2 for x64based Systems Windows Server, versi...
CVE-2024-26229-lpe
CVE-2024-26229 CWE-781: csc.sysドライバにおけるMETHODNEITHER I/O制御コードを使用したIOCTLでの不適切なアドレス検証...
CVE-2024-26229-exploit
CVE-2024-26229 Windows 本地权限提升 该仓库是对此处代码的重写，但不包含额外依赖。 已修补：2024 年 4 月 9 日...
smm_usbrt_poc
UsbRt SMM Elevación de Privilegios Este es un código de Prueba de Concepto que demuestra la explotación de la vulnerabilidad CVE-2017-5721. Este PoC provoca que un sistema se bloquee completamente debido a una Excepción de Verificación de Máquina. Todo lo que necesitas es tener instalado CHIPSEC...
Win-PortFwd
Win-PortFwd Powershell script to setup windows port forwarding using native netsh client Install: git clone https://github.com/deepzec/Win-PortFwd.git Usage: .\win-portfwd.ps1 or powershell.exe -noprofile -executionpolicy bypass -file .\win-portfwd.ps1 Example : Note: This script require admin...
SdoKeyCrypt-sys-local-privilege-elevation
SdoKeyCrypt.sys - 本地权限提升漏洞 1. 什么是 SdoKeyCrypt.sys？ SdoKeyCrypt.sys 是一款大型多人在线角色扮演游戏（MMORPG） 冒险岛Online 的键盘保护驱动程序，该游戏在中国由 盛大集团发行。 游戏官方网站：http://mxd.sdo.com。（语言：中文） 该驱动程序会在游戏首次运行时下载并安装到 C:\Windows\System32\ 文件夹中。由于游戏体积很大（约 13.11 GB），我在这里备份了一份 SdoKeyCrypt.sys 以便想要复现此漏洞的人使用。 SdoKeyCrypt.sys...
CVE-2025-24999
CVE-2025-24999 CVE-2025-24999 的概念验证 https://databasesecurityninja.wordpress.com/2026/04/02/microsoft-sql-server-privilege-elevation-through-msdatabasemanager-role-cve-2025-24999/...
CVE-2026-87506
Privilege elevation in WebUI in Google Chrome prior to 153.0.8010.36 a...
CVE-2026-87506
A flaw was found in Google Chrome's WebUI. A remote attacker, after compromising the renderer process, could exploit this vulnerability by tricking a user into visiting a specially crafted HTML page. This could lead to privilege elevation, allowing the attacker to execute arbitrary code outside o...
DEBIAN-CVE-2026-87506
Privilege elevation in WebUI in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-87506
Privilege elevation in WebUI in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...
EUVD-2026-74317
Privilege elevation in WebUI in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-87506
Privilege elevation in WebUI in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-87506
Privilege elevation in WebUI in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-87506
Google Chrome contained a privilege elevation vulnerability in the WebUI component prior to version 153.0.8010.36 . A remote attacker who had already compromised the renderer process could potentially execute arbitrary code outside the sandbox by delivering a crafted HTML page. The vulnerability ...
Linux Distros Unpatched Vulnerability : CVE-2026-87506
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Privilege elevation in WebUI in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute...
PT-2026-88606
Privilege elevation in WebUI in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...