zygote-injection-toolkit

Zygote injection toolkit This is a Python command-line utility to easily run and backup private app data using the Android Zygote injection vulnerability CVE-2024-31317. To run this, you must have any device that has not been updated to the June 1, 2024 security patch. If you don't know whether...

CVE-2023-28324

CVE-2023-28324 POC for CVE-2023-28324 affecting Ivanti EPM. Technical Analysis A technical root cause analysis of the vulnerability can be found on our blog: https://www.horizon3.ai/attack-research/attack-blogs/cve-2023-28324-deep-dive/ Summary This POC abuses a vulnerability in AgentPortal.exe t...

CVE-2020-8289

CVE-2020-8289 – Remote Code Execution as SYSTEM/root via Backblaze Summary Name: Remote Code Execution as SYSTEM/root via Backblaze CVE: CVE-2020-8289 Discoverer: Jason Geffner Vendor: Backblaze Product: Backblaze for Windows and Backblaze for macOS Risk: Critical Discovery Date: 2020-03-13...

CVE-2025-49144

Notepad++ Binary Planting PoC CVE-2025-49144 ⚠️ EDUCATIONAL PURPOSE ONLY This code is designed for educational and research purposes to understand binary planting vulnerabilities. Use only in controlled environments with proper authorization. 📋 Overview This Proof of Concept demonstrates the binar...

CVE-2016-0051

Proof-of-concept BSoD Blue Screen of Death and Elevation of Privilege to SYSTEM code for my CVE-2016-0051 MS-016. vulnerabilty poc auhor: koczkatamas https://twitter.com/koczkatamas Original code: https://github.com/koczkatamas/CVE-2016-0051 Thanks to koczkatamas this PoC will run from CMD and th...

SCCM-CVE-2026-47301-Remote-Code-Execution-Exploit

SCCM-CVE-2026-47301-Remote-Code-Execution-Exploit 私が発見した、Microsoft Configuration Manager SCCM に対する CVE-2026-47301 として割り当てられた概念実証エクスプロイトチェーンです。アクセス制御の不備、CAB 展開パストラバーサルによる任意ファイル書き込み、証明書検証バイパス、および DLL ハイジャックを組み合わせて、SYSTEM レベルのコード実行を実現します。 使用方法 このエクスプロイトは、この CVE を悪用するために特別に細工された悪意のある cab を使用します。POC 用...

CVE-2026-20537

In aidl, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11185225; Issue ID: MSV-9024...

CVE-2026-20529

In battery, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11276677; Issue ID: MSV-9217...

CVE-2026-20542

The apusys component is susceptible to a memory corruption vulnerability caused by a use after free condition. If a malicious actor already possesses System privilege , they can exploit this flaw to achieve a local escalation of privilege . No user interaction is required for exploitation. Remedi...

CVE-2026-20537

A memory corruption vulnerability exists in aidl due to a use after free condition. This flaw could allow a malicious actor to achieve local escalation of privilege if they have already obtained System privileges. Exploitation does not require user interaction. Remediation is available via Patch ...

EUVD-2026-92187

In aidl, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11242428; Issue ID: MSV-9038...

CVE-2026-20536

In aidl, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11242428; Issue ID: MSV-9038...

CVE-2026-20536

A memory corruption vulnerability exists in aidl due to a use after free condition. This flaw could allow a malicious actor with System privileges to achieve a local escalation of privilege . Exploitation does not require user interaction. Remediation is addressed in Patch ID: ALPS11242428 (Issue...

CVE-2026-20535

In aidl, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11185216; Issue ID: MSV-9039...

EUVD-2026-92199

In vdec, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11383899; Issue ID: MSV-9800...

CVE-2026-20579

A vulnerability in vdec allows for an out of bounds write caused by type confusion . This flaw could lead to a local escalation of privilege if an attacker has already secured System privileges. Exploitation does not require user interaction. Remediation information is available via Patch ID: ALP...

CVE-2024-40586-Windows-Coerced-Authentication-in-FortiClient

CVE-2024-40586 Windows における FortiClient の強制認証 Windows システムにおいて、FortiClient アプリバージョン 7.0.8.0427 は、FortiSSLVPNdaemon サービスが担当する名前付きパイプを介して、リモートの非特権ユーザーが Windows ホストに他のマシンへの認証を強制することを許可することが判明しました。 名前付きパイプ "FortiSslvpnNamedPipe" があらゆるユーザーからの読み取りと書き込みを許可していることが観測されました。 分析 アプリは名前付きパイプからバッファの5バイト目を op コ...

CVE-2026-50656-rogueplanet-validation

RoguePlanet PoC Validation Report for Microsoft Defender Purpose and scope of the report This report concerns the validation of the publicly described RoguePlanet PoC related to Microsoft Defender. The described technique was presented in the media on 10 June 2026 as a Local Privilege Escalation...

CVE-2020-0688

Identify Exchange Servers vulnerable to CVE-2020-0688 CVE-2020-0688 is a critical vulnerability in Microsoft Exchange due to use of static keys. Although exploitation requires valid credentials at an email user level and the risk of mass-exploitation is low, this vulnerability might be very usefu...

CVE-2016-0051

CVE-2016-0051 CVE-2016-0051（MS-016）用のBSoD（ブルースクリーン・オブ・デス）および特権昇格（SYSTEMへ）の概念実証コード。 Windows 7 SP1 x86 上の SYSTEM への EoP Windows 10 x64 での BSoD リンク Microsoft セキュリティ情報 MS16-016 Microsoft 謝辞ページ 同じCMD内でシェルが起動されるこのPoCの亜種（hexx0r による） タイムライン 2015.09.18. 脆弱性を発見 2015.09.24. この概念実証コードとともに MSRC（Microsoft...