iqvw64e-privilege-escalation

iqvw64e-privilege-escalation CVE-2015-2291 إثبات مفهوم لتصعيد الامتيازات المحلية نظرة عامة هذا المشروع هو إثبات مفهوم تعليمي لثغرة تصعيد الامتيازات المحلية LPE في برنامج التشغيل iqvw64e.sys SHA256: 37c637a74bf20d7630281581a8fae124200920df11ad7cd68c14c26cc12c5ec9 — وهو برنامج تشغيل تشخيصات إيثرنت ...

NotCVE-2026-0010

الملخص الثغرة: تصعيد امتيازات محلي غير مصادق عليه إلى SYSTEM عبر منفذ TCP 24801 الخاص بخفي Barrier المورّد: debauchee مشروع Barrier المنتج: Barrier 2.4.0 الإصدار النهائي، 2021-11-01 CWE: CWE-306: غياب المصادقة لوظيفة حرجة الوصف خدمة ويندوز الخاصة بـ Barrier barrierd.exe، التي تُثبَّت وتعمل بحساب...

NT-AUTHORITY-SYSTEM-CONTEXT-RTCORE

NT-AUTHORITY-SYSTEM-CONTEXT-RTCORE يقوم هذا الاستغلال بإعادة بناء واستغلال CVE-2019-16098 الموجود في برنامج التشغيل Micro-Star MSI Afterburner 4.6.2.15658 المعروف أيضًا باسم RTCore64.sys وRTCore32.sys والذي يسمح لأي مستخدم مصادق عليه بقراءة وكتابة الذاكرة العشوائية ومنافذ الإدخال/الإخراج وMSRs...

CVE-2020-11492

CVE-2020-11492 إثبات المفهوم PoC لثغرة رفع الامتيازات في Docker Desktop لنظام Windows. تم إصلاح هذه الثغرة في إصدار Docker 2.3.0.2 بتاريخ 11 مايو 2020. يقوم هذا الإثبات PoC بما يلي: إنشاء named pipe يُحاكي named pipe الخاص بـ Docker \.\pipe\dockerLifecycleServer، استدعاء...

PrintSpoofer

PrintSpoofer LOCAL/NETWORK SERVICE से SYSTEM तक जाने के लिए Windows 10 और Server 2016/2019 पर SeImpersonatePrivilege का दुरुपयोग करके। अधिक जानकारी के लिए: https://itm4n.github.io/printspoofer-abusing-impersonate-privileges/ उपयोग आप -h विकल्प का उपयोग करके सहायता संदेश देख सकते हैं। root@kitploi...

EUVD-2026-62956

In Splunk AI Toolkit versions below 6.0.0, a user who does not hold the "admin" or "power" Splunk roles could run searches with system-level privileges, access all relevant data, affect system integrity, and read or delete search jobs belonging to other users through Agent Run History. The improp...

CVE-2026-76391

In Splunk AI Toolkit versions below 6.0.0, a user who does not hold the "admin" or "power" Splunk roles could run searches with system-level privileges, access all relevant data, affect system integrity, and read or delete search jobs belonging to other users through Agent Run History. The improp...

Privilege escalation vulnerability via unprotected IOCTL interface in Pegatron Tdelo64.sys

Overview A privilege escalation vulnerability exists in the tdeio64.sys driver due to an unprotected input/output control IOCTL dispatch routine that fails to validate the origin and permissions of user-supplied requests. An unprivileged local attacker can abuse exposed IOCTL dispatch routines...

GO-2026-5711 Tekton Pipelines git resolver leaks API token to user-controlled serverURL in github.com/tektoncd/pipeline

Tekton Pipelines git resolver leaks API token to user-controlled serverURL in github.com/tektoncd/pipeline...

fox-foxone-exploit

markdown FoxFOXONE Driver Exploit Local privilege escalat...

Exploit for CVE-2026-0828

CVE-2026-0828 — Safetica ProcessMonitorDriver.sys BYOVD PoC S...

MS16-032-Cobalt-Strike-LPE-BOF

MS16-032 Beacon Object File BOF A Cobalt Strike Beacon Obje...

Exploit for CVE-2026-29923

CVE-2026-29923 — pstrip64.sys Local Privilege Escalation A mi...

CVE-2026-4858

Mattermost CVE-2026-4858 affects versions 11.6.x, 11.5.x, 11.4.x and 10.11.x where the integration action URL does not properly validate path traversal. This allows a malicious authenticated user to call an arbitrary API using the system admin Mattermost token by exploiting the path traversal in ...

Tekton Pipelines: Git resolver API mode leaks system-configured API token to user-controlled serverURL

Summary The Tekton Pipelines git resolver in API mode sends the system-configured Git API token to a user-controlled serverURL when the user omits the token parameter. A tenant with TaskRun or PipelineRun create permission can exfiltrate the shared API token GitHub PAT, GitLab token, etc. by...

CVE-2026-40161

Summary: Tekton Pipelines before 1.10.0, specifically the git resolver in API mode, can exfiltrate system-configured Git tokens when the token parameter is omitted. Affected software: Tekton Pipelines git resolver (API mode), versions 1.0.0–1.10.0. Vulnerability details: In API mode, the resolver...

CVE-2026-34990 OpenPrinting CUPS: Local print admin token disclosure using temporary printers

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.16 and prior, a local unprivileged user can coerce cupsd into authenticating to an attacker-controlled localhost IPP service with a reusable Authorization: Local ... token. That...

CVE-2025-63691

In pig-mesh In Pig version 3.8.2 and below, within the Token Management function under the System Management module, the token query interface /api/admin/sys-token/page has an improper permission verification issue, which leads to information leakage. This interface can be called by any user who...

EUVD-2024-16988

Malicious code in bioql PyPI...

CVE-2024-1221

This vulnerability potentially allows files on a PaperCut NG/MF server to be exposed using a specifically formed payload against the impacted API endpoint. The attacker must carry out some reconnaissance to gain knowledge of a system token. This CVE only affects Linux and macOS PaperCut NG/MF...