CVE-2014-4076

CVE-2014-4076 إثبات المفهوم PoC تم نسخ إثبات المفهوم هذا مباشرة من نسخته البايثون الأصلية وأُعيدت كتابته بلغة C++. البناء تم بناء هذا المشروع باستخدام Visual Studio 2013 Update 4. ملاحظة يمكن فقط للمستخدمين في مجموعة المسؤولين فتح الجهاز وتنفيذ تحكمات الإدخال/الإخراج، مما يعني أن الاستغلال يرفع...

Windows_MSKSSRV_LPE_CVE-2023-36802

CVE-2023-36802 POC d'élévation de privilèges locale auteurs : chompie À des fins de démonstration uniquement. L'exploit complet fonctionne sur les systèmes Windows 11 22H2 vulnérables. L'adaptation de l'exploit à tous les systèmes vulnérables est laissée en exercice au lecteur. Git gud, etc...

Auto-Elevate

Auto-Elevate توضح هذه الأداة قوة تجاوزات UAC والميزات المضمنة في Windows. تقوم هذه الأداة بتحديد موقع winlogon.exe تلقائيًا، وسرقة وانتحال TOKEN العملية الخاصة به، وإنشاء عملية جديدة بمستوى SYSTEM باستخدام الـ token المسروق. بالإضافة إلى طريقة تجاوز UAC رقم 41 تجاوز UAC الخاص بـ ICMLuaUtil من أدا...

Windows_LPE_AFD_CVE-2023-21768

CVE-2023-21768 Локальное повышение привилегий POC авторы: chompie и b33f Только для демонстрационных целей. Полный эксплойт работает на уязвимых системах Windows 11 22H2. Примитив записи работает на всех уязвимых системах. Использование: root@kitploit: WindowsAFDLPECVE-2023-21768.exe где — это...

CVE-2023-21768

CVE-2023-21768 POC d'élévation de privilèges locaux auteurs: chompie & b33f À des fins de démonstration uniquement. L'exploit complet fonctionne sur les systèmes Windows 11 22H2 vulnérables. La primitive d'écriture fonctionne sur tous les systèmes vulnérables. Usage: root@kitploit:...

Driver-RW

Driver-RW Élévation vers NT AUTHORITY\SYSTEM avec CVE-2018-19321 Testé sur WIndows 10 v1511...

Amazon WorkSpaces 安全漏洞

Amazon WorkSpaces is a fully managed, persistent desktop virtualization service provided by Amazon, Inc. It allows your users to access the data, applications, and resources they need from any supported device, at any time. Versions of Amazon WorkSpaces prior to 2.6.2034.0 contained a security...

EUVD-2026-26423

CVE-2026-33451 is an arbitrary read/write vulnerability in the Secure Access Windows client prior to 14.50. Attackers with local control of the Windows client can send malformed data to an API and elevate their level of privilege to system...

Security information for Hitachi Disk Array Systems

Overview CVE-2026-20846 | GDI+ Denial of Service Vulnerability CVE-2026-21222 | Windows Kernel Information Disclosure Vulnerability CVE-2026-21231 | Windows Kernel Elevation of Privilege Vulnerability CVE-2026-21234 | Windows Connected Devices Platform Service Elevation of Privilege Vulnerability...

PT-2026-4514

Name of the Vulnerable Software and Affected Versions Epson USB Display version 1.6.0.0 Description The software contains an unquoted service path vulnerability within the EMP UDSA service, which operates with LocalSystem privileges. This allows attackers to potentially gain elevated system acces...

CVE-2025-53841

The GC-AGENTS-SERVICE running as part of Akamai´s Guardicore Platform Agent for Windows versions prior to v49.20.1, v50.15.0, v51.12.0, v52.2.0 is affected by a local privilege escalation vulnerability. The service will attempt to read an OpenSSL configuration file from a non-existent location th...

PT-2025-48814

Name of the Vulnerable Software and Affected Versions Akamai Guardicore Platform Agent versions prior to 50.15.0 Akamai Guardicore Platform Agent versions prior to 51.12.0 Akamai Guardicore Platform Agent versions prior to 52.1.1 Description The Akamai Guardicore Platform Agent has a flaw that...

memoQ 安全漏洞

memoQ is a computer-assisted translation software from the Hungarian company memoQ. A security vulnerability exists in memoQ 10.1.13.ef1b2b52aae and earlier versions, which stems from an unquoted service path and could allow a local user to achieve elevation of privilege to SYSTEM by placing a...

CVE-2025-59273

Azure Event Grid System Elevation of Privilege vulnerability (CVE-2025-59273) arises from improper access control, enabling a network-based, unauthenticated attacker to elevate privileges. Affected component: Azure Event Grid System in Microsoft Azure; root cause: access control misconfiguration ...

CVE-2025-59273 Azure Event Grid System Elevation of Privilege Vulnerability

...

CVE-2025-59273 Azure Event Grid System Elevation of Privilege Vulnerability

...

CVE-2025-32098

An issue was discovered in Samsung Magician 6.3 through 8.3 on Windows. An attacker can achieve Elevation of Privileges to SYSTEM by exploiting insecure file delete operations during the update process...

sudo: LPE via host option

A privilege escalation vulnerability was found in Sudo. In certain configurations, unauthorized users can gain elevated system privileges via the Sudo host option -h or --host. When using the default sudo security policy plugin sudoers, the host option is intended to be used in conjunction with t...

CVE-2023-21042

In TBD of TBD, there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-239873326References: N/...

CVE-2021-35449

The Lexmark Universal Print Driver version 2.15.1.0 and below, G2 driver 2.7.1.0 and below, G3 driver 3.2.0.0 and below, and G4 driver 4.2.1.0 and below are affected by a privilege escalation vulnerability. A standard low priviliged user can use the driver to execute a DLL of their choosing durin...