BlueKeep

Bluekeep PoC This repo contains research concerning CVE-2019-0708. Bluekeep or CVE-2019-0708 is an RCE exploit that effects the following versions of Windows systems: Windows 2003 Windows XP Windows Vista Windows 7 Windows Server 2008 Windows Server 2008 R2 The vulnerability occurs during...

printix-CVE-2022-25090

CVE-2022-25090 Instead of printing your homework as a user, print your system security policies as SYSTEM for fun. Explorez la documentation » Voir la démo . Signaler un bug . Demander une fonctionnalité Table Of Contents À propos du projet Construit avec Pour commencer Prérequis Installation...

printix-CVE-2022-25089

CVE-2022-25089 Полный кошмар системного администратора: пользователи изменяют реестр откуда угодно и где угодно без аутентификации. Изучить документацию » Посмотреть демо . Сообщить об ошибке . Предложить функцию Содержание О проекте Создано с помощью Начало работы Предварительные требования...

CVE-2025-60710

CVE-2025-60710 이것은 \Microsoft\Windows\WindowsAI\Recall\PolicyConfiguration 예약된 작업의 로컬 권한 상승 취약점에 대한 PoC입니다. 이 예약된 작업이 시작되면 taskhostw.exe 프로세스는 C:\Users%username%\AppData\Local\CoreAIPlatform.00\UKP 디렉터리를 열고 다음 필터를 사용하여 디렉터리를 검색합니다: ????????-????-????-????-????????????. 해당 디렉터리가 발견되면 심볼릭 링크를 확인하지...

FortiLPE

Description Exploit PoC d'escalade de privilèges locaux pour CVE-2025-62676 / EUVD-2025-206993 qui cible FortiClient VPN sur Windows. Exécute une charge utile dans le contexte de SYSTEM depuis un contexte utilisateur normal via une écriture arbitraire de fichier XML. Le PoC a été testé contre...

cve-2024-38077-madlicense_reproduction

CVE-2024-38077: Удалённое выполнение кода в службе лицензирования удалённого рабочего стола Windows "MadLicense" I. Обзор уязвимости CVE ID : CVE-2024-38077 Псевдоним : MadLicense Оценка CVSS : 9.8 критическая Тип : Переполнение буфера в куче CWE-122 Обнаружена : Ver, Lewis Lee, Zhiniang Peng...

VirtualLockSensorLPE

VirtualLockSensorLPE Описание PoC-эксплойт для локального повышения привилегий для CVE-2025-0886, направленный на Elliptic Virtual Lock Sensor версии 3.1.60531.2, работающий на Windows, который по умолчанию установлен на некоторых моделях ноутбуков Lenovo. Позволяет выполнить полезную нагрузку в...

CVE-2023-7261

CVE-2023-7261 Уязвимость локального повышения привилегий в Google Chrome Updater через DosDevices Описание: Эта уязвимость позволяет локальным злоумышленникам повышать привилегии на уязвимых установках Google Chrome. Для эксплуатации этой уязвимости злоумышленник должен сначала получить возможнос...

Foxit PDF Reader FoxitUpdater Race Condition Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Foxit PDF Reader. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the update...

CVE-2026-92180

pdfforge PDF Architect activation-service Update Service Uncontrolled Search Path Element Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of pdfforge PDF Architect. An attacker must first obtain the ability to...

CVE-2026-92180: Uncontrolled Search Path Element

pdfforge PDF Architect activation-service Update Service Uncontrolled Search Path Element Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of pdfforge PDF Architect. An attacker must first obtain the ability to...

PT-2026-92195

pdfforge PDF Architect activation-service Update Service Uncontrolled Search Path Element Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of pdfforge PDF Architect. An attacker must first obtain the ability to...

Microsoft Windows MIDI Service Incorrect Permission Assignment Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the Windows MIDI...

Microsoft Windows UMPDDrvStretchBlt Improper Object Management Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the win32kfull...

VulnCheck KEV: CVE-2023-39470

PaperCut NG print.script.sandboxed Exposed Dangerous Function Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PaperCut NG. Authentication is required to exploit this vulnerability. The specific flaw exists with...

CVE-2026-18262

Parallels RAS Client RDP Backend Service Exposed Dangerous Function Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Parallels RAS Client. An attacker must first obtain the ability to execute low-privileged cod...

CVE-2026-18263 Parallels RAS Client RDP Backend Service Exposed Dangerous Function Local Privilege Escalation Vulnerability

Parallels RAS Client RDP Backend Service Exposed Dangerous Function Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Parallels RAS Client. An attacker must first obtain the ability to execute low-privileged cod...

CVE-2026-18263

The flaw is in the RAS RDP Backend Service of Parallels RAS Client, which exposes a dangerous function. A local low-privileged attacker can exploit it to execute arbitrary code as SYSTEM. CVSS 7.8 (HIGH). No patch or exploit details are provided in the documents. Monitor ZDI-26-556 for remediatio...

CVE-2026-18262

Parallels RAS Client contains a local privilege escalation vulnerability in the RAS RDP Backend Service , caused by an exposed dangerous function . A local attacker with the ability to execute low-privileged code can leverage this flaw to execute arbitrary code in the SYSTEM context, resulting in...

CVE-2026-18262 Parallels RAS Client RDP Backend Service Exposed Dangerous Function Local Privilege Escalation Vulnerability

Parallels RAS Client RDP Backend Service Exposed Dangerous Function Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Parallels RAS Client. An attacker must first obtain the ability to execute low-privileged cod...