CVE-2020-0688

Определение серверов Exchange, уязвимых к CVE-2020-0688 CVE-2020-0688 — критическая уязвимость в Microsoft Exchange, вызванная использованием статических ключей. Хотя для эксплуатации требуются действительные учётные данные на уровне почтового пользователя и риск массовой эксплуатации низок, эта...

WSUS-RCE-Mitigation-59287

🚨 サイバーセキュリティ重大警報: WSUS における RCE CVE-2025-59287 🚨 作成者およびクレジット: @esteban11121 このガイドは、コミュニティがこの脆弱性を迅速に緩和できるよう支援するために作成されました。 ステータス: 活発な悪用 In-the-Wild が確認済み。 これは WSUS サーバーに影響を与える リモートコード実行 RCE の脆弱性であり、認証されていない攻撃者が SYSTEM 権限を取得することを可能にします。直ちに 緊急 OOB パッチ適用措置が必要です。...

CVE-2023-21674

Первая 0-day уязвимость 2023 года, эксплуатируемая в реальных атаках 🔥 CVE-2023-21674 — это уязвимость в Windows Advanced Local Procedure Call ALPC, обнаруженная компанией Avast. Она может привести к обходу песочницы браузера и позволить злоумышленникам получить привилегии SYSTEM. root@kitploit: ...

IDiagnosticProfileUAC

IDiagnosticProfileUAC Un altro bypass UAC che utilizza l'oggetto COM auto-elevato Virtual Factory per DiagCpl 12C21EA7-2EB8-4B55-9249-AC243DA8C666. Questo oggetto COM può essere utilizzato per creare un'istanza dell'oggetto COM DiagnosticProfile D0B7E02C-E1A3-11DC-81FF-001185AE5E76 che espone il...

Windows-WinSock-UAF-Mitigation

CVE-2026-68820: Mitigazione della UAF di Windows WinSock afd.sys Questo repository contiene una patch concettuale che dimostra la mitigazione per CVE-2026-68820 , una vulnerabilità critica di tipo Use-After-Free UAF nel driver delle funzioni ancillari di Windows per WinSock afd.sys. Lo sfruttamen...

EUVD-2026-52640

The background service of ABP or AES runs as NT AUTHORITY\SYSTEM and implements a file-based inter-process communication IPC mechanism protected by AES encryption. Because the encryption key file is readable by standard users and protected using DPAPI. Any authenticated local user can recover the...

CVE-2026-15430 CVE-2026-15430

Improper access control in the IRPMJWRITE command interface in Wellbia XIGNCODE3 xhunter2.sys, version 2026.6.1.192, allows a local, unprivileged attacker to achieve local privilege escalation to NT AUTHORITY\SYSTEM, extract credentials from PPL-protected lsass.exe, and terminate PPL-protected...

CVE-2026-20474

In display, there is a possible escalation of privilege due to a race condition. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11019183; Issue ID: MSV-7758...

CVE-2026-12168

The CVE-2026-12168 entry concerns the Little Orbit GFAC product, specifically the GFAC_Sys_x64.sys driver. The vulnerability is described as an improper validation in the Minifilter communication port handling, allowing a local attacker to escalate privileges to SYSTEM and execute arbitrary kerne...

CVE-2026-57919

CVE-2026-57919 affects Matrix42 Empirum (pre-25.5 and pre-26.2). The issue: PBackupVSS.exe creates a named pipe (\.\pipe\PBackupVSS) with a permissive DACL granting GENERIC_READ/WRITE to all authenticated users, enabling a low-privileged, local attacker to connect and send crafted IPC messages to...

CVE-2026-0138

In lwisiobufferwrite of lwisiobuffer.c, there is a possible out of bounds write due to memory corruption. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-44406 DLL Hijacking Vulnerability in ZTE Cloud PC Client uSmartview

ZTE Cloud PC client uSmartView contains a DLL hijacking vulnerability; since uSmartViewServiceAgent.exe runs with SYSTEM privileges, successful hijacking enables local arbitrary code execution, privilege escalation, and memory corruption.contains a DLL hijacking vulnerability; since...

CVE-2026-34459 Sandboxie-Plus sandbox escape via uninitialized memory leak and stack overflow in GetRawInputDeviceInfoSlave

Sandboxie-Plus is an open source sandbox-based isolation software for Windows. In versions 1.17.2 and earlier, the SbieSvc proxy service's GetRawInputDeviceInfoSlave handler contains two vulnerabilities that can be chained for sandbox escape. First, when a sandboxed process sends an IPC request...

CVE-2026-20447

In geniezone, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10724073; Issue ID: MSV-6296...

Exploit for Heap-based Buffer Overflow in Microsoft

CVE-2024-30051 — Windows DWM Heap Overflow EoP · Master's Thes...

PT-2026-24911

An Insufficient Integrity Verification vulnerability in the ASUS ROG peripheral driver installation process allows privilege escalation to SYSTEM. The vulnerability is due to improper access control on the installation directory, which enables the exploitation of a race condition where the...

CVE-2026-20425

In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10320471; Issue ID: MSV-5539...

CVE-2026-20440

In MAE, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10431968; Issue ID: MSV-5824...

CVE-2026-20426

In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10320471; Issue ID: MSV-5538...

CVE-2026-20443

CVE-2026-20443 involves a memory corruption vulnerability caused by a use-after-free in the display path of MediaTek chipsets. This can lead to local escalation of privilege if an attacker already has System-level privileges; exploitation does not require user interaction. The issue is tracked wi...