FortiLPE

Description Local privilege escalation PoC exploit for CVE-2025-62676 / EUVD-2025-206993 that targets FortiClient VPN running on Windows. Executes a payload in the context of SYSTEM from a normal user context via an arbitrary XML file write. The PoC has been tested against FortiClient version 7.4...

cve-2024-38077-madlicense_reproduction

CVE-2024-38077: Windows Remote Desktop Licensing Service Remote Code Execution "MadLicense" I. भेद्यता अवलोकन CVE ID : CVE-2024-38077 उपनाम : MadLicense CVSS स्कोर : 9.8 गंभीर प्रकार : हीप-आधारित बफर ओवरफ़्लो CWE-122 खोजकर्ता : Ver, Lewis Lee, Zhiniang Peng विवरण : Windows Remote Desktop Licensin...

printix-CVE-2022-25089

CVE-2022-25089 सिस्टम एडमिन के लिए एक पूर्ण दुःस्वप्न, उपयोगकर्ता बिना प्रमाणीकरण के कहीं से भी और हर जगह से रजिस्ट्री बदल रहे हैं। दस्तावेज़ देखें » डेमो देखें . बग रिपोर्ट करें . सुविधा का अनुरोध करें विषय सूची परियोजना के बारे में निर्माण में प्रयुक्त आरंभ करना पूर्वापेक्षाएँ स्थापना उपयोग...

printix-CVE-2022-25090

CVE-2022-25090 अपना होमवर्क एक उपयोगकर्ता के रूप में प्रिंट करने के बजाय, मज़े के लिए अपने सिस्टम सुरक्षा नीतियों को SYSTEM के रूप में प्रिंट करें। दस्तावेज़ देखें » डेमो देखें . बग रिपोर्ट करें . सुविधा का अनुरोध करें विषय सूची परियोजना के बारे में निर्माण में प्रयुक्त शुरुआत करना पूर्वापेक्षाएँ...

VirtualLockSensorLPE

VirtualLockSensorLPE विवरण CVE-2025-0886 के लिए स्थानीय विशेषाधिकार वृद्धि Local Privilege Escalation PoC एक्सप्लॉइट, जो Windows पर चलने वाले Elliptic Virtual Lock Sensor संस्करण 3.1.60531.2 को लक्षित करता है, जो कुछ Lenovo लैपटॉप मॉडलों पर डिफ़ॉल्ट रूप से स्थापित होता है। यह एक सामान्य उपयोगकर्त...

CVE-2023-7261

CVE-2023-7261 Google Chrome Updater DosDevices ثغرة تصعيد الامتيازات المحلية التفاصيل: تسمح هذه الثغرة للمهاجمين المحليين بتصعيد الامتيازات على التثبيتات المتأثرة من Google Chrome. يجب على المهاجم أولاً الحصول على القدرة على تنفيذ كود منخفض الامتيازات على النظام المستهدف لاستغلال هذه الثغرة. الخل...

VulnCheck KEV: CVE-2023-39470

PaperCut NG print.script.sandboxed Exposed Dangerous Function Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PaperCut NG. Authentication is required to exploit this vulnerability. The specific flaw exists with...

BlueKeep

Bluekeep PoC This repo contains research concerning CVE-2019-0708. Bluekeep or CVE-2019-0708 is an RCE exploit that effects the following versions of Windows systems: Windows 2003 Windows XP Windows Vista Windows 7 Windows Server 2008 Windows Server 2008 R2 The vulnerability occurs during...

CVE-2025-60710

CVE-2025-60710 This is PoC for local privilege escalation vulnerability in \Microsoft\Windows\WindowsAI\Recall\PolicyConfiguration scheduled task. When this scheduled task is started the taskhostw.exe process whill try to open the C:\Users%username%\AppData\Local\CoreAIPlatform.00\UKP directory...

CVE-2026-18262

Parallels RAS Client RDP Backend Service Exposed Dangerous Function Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Parallels RAS Client. An attacker must first obtain the ability to execute low-privileged cod...

CVE-2026-18263 Parallels RAS Client RDP Backend Service Exposed Dangerous Function Local Privilege Escalation Vulnerability

Parallels RAS Client RDP Backend Service Exposed Dangerous Function Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Parallels RAS Client. An attacker must first obtain the ability to execute low-privileged cod...

CVE-2026-18263

The flaw is in the RAS RDP Backend Service of Parallels RAS Client, which exposes a dangerous function. A local low-privileged attacker can exploit it to execute arbitrary code as SYSTEM. CVSS 7.8 (HIGH). No patch or exploit details are provided in the documents. Monitor ZDI-26-556 for remediatio...

CVE-2026-18262

Parallels RAS Client contains a local privilege escalation vulnerability in the RAS RDP Backend Service , caused by an exposed dangerous function . A local attacker with the ability to execute low-privileged code can leverage this flaw to execute arbitrary code in the SYSTEM context, resulting in...

CVE-2026-18262 Parallels RAS Client RDP Backend Service Exposed Dangerous Function Local Privilege Escalation Vulnerability

Parallels RAS Client RDP Backend Service Exposed Dangerous Function Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Parallels RAS Client. An attacker must first obtain the ability to execute low-privileged cod...

EUVD-2026-63462

Parallels RAS Client RDP Backend Service Exposed Dangerous Function Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Parallels RAS Client. An attacker must first obtain the ability to execute low-privileged cod...

CVE-2026-13121 Parallels RAS Client RDP Backend Service Exposed Dangerous Function Local Privilege Escalation Vulnerability

Parallels RAS Client RDP Backend Service Exposed Dangerous Function Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Parallels RAS Client. An attacker must first obtain the ability to execute low-privileged cod...

CVE-2026-13121

The flaw exists in the RAS RDP Backend Service of Parallels RAS Client, which exposes a dangerous function allowing a local low-privileged attacker to escalate privileges and execute arbitrary code as SYSTEM. CVSS 7.8 HIGH. Exploitation in the wild is not reported in the provided documents. Patch...

EUVD-2026-63461

Parallels RAS Client RDP Backend Service Exposed Dangerous Function Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Parallels RAS Client. An attacker must first obtain the ability to execute low-privileged cod...

CVE-2026-76350

In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user that holds a role with the schedulesearch capability could configure Portable Document Format PDF attachments in the email alert action workflow. When the email alert action runs, it could execute arbitrary Search...

CVE-2026-6102

The CVE-2026-6102 entry concerns MSI Center NTIOLib_X64 with a local privilege-escalation flaw in the NTIOLib_X64.sys driver due to insufficient validation of the origin of commands. A local attacker who can run low-privileged code can escalate to SYSTEM and execute arbitrary code. The issue is i...