CVE-2025-60710

CVE-2025-60710 Dies ist ein PoC für eine lokale Privilegienausweitung-Schwachstelle im geplanten Task \Microsoft\Windows\WindowsAI\Recall\PolicyConfiguration. Wenn dieser geplante Task gestartet wird, versucht der Prozess taskhostw.exe, das Verzeichnis...

printix-CVE-2022-25090

CVE-2022-25090 Invece di stampare i tuoi compiti come utente, stampa le policy di sicurezza del tuo sistema come SYSTEM per divertimento. Esplora la documentazione » Guarda la Demo . Segnala un Bug . Richiedi una Funzionalità Indice dei Contenuti Informazioni sul Progetto Realizzato Con Per...

VirtualLockSensorLPE

VirtualLockSensorLPE Descrizione Exploit PoC di escalazione dei privilegi locale per CVE-2025-0886 che colpisce Elliptic Virtual Lock Sensor versione 3.1.60531.2 in esecuzione su Windows, installato per impostazione predefinita su alcuni modelli di laptop Lenovo. Consente l'esecuzione di un paylo...

cve-2024-38077-madlicense_reproduction

CVE-2024-38077: Remotecodeausführung im Windows-Remotedesktop-Lizenzierungsdienst "MadLicense" I. Schwachstellenübersicht CVE-ID : CVE-2024-38077 Alias : MadLicense CVSS-Score : 9.8 Kritisch Typ : Heap-basierter Pufferüberlauf CWE-122 Entdeckt von : Ver, Lewis Lee, Zhiniang Peng Beschreibung : Ei...

printix-CVE-2022-25089

CVE-2022-25089 L'incubo completo di un amministratore di sistema: utenti che modificano il registro da qualsiasi luogo e senza autenticazione. Esplora la documentazione » Vedi Demo . Segnala un bug . Richiedi una funzionalità Indice Informazioni sul progetto Realizzato con Per iniziare Prerequisi...

BlueKeep

Bluekeep PoC Questo repository contiene ricerche riguardanti CVE-2019-0708. Bluekeep o CVE-2019-0708 è un exploit RCE che colpisce le seguenti versioni di sistemi Windows: Windows 2003 Windows XP Windows Vista Windows 7 Windows Server 2008 Windows Server 2008 R2 La vulnerabilità si verifica duran...

CVE-2023-7261

CVE-2023-7261 Google Chrome Updater DosDevices Vulnerabilidade de Escalação de Privilégio Local Detalhes: Esta vulnerabilidade permite que atacantes locais elevem privilégios em instalações afetadas do Google Chrome. Um atacante deve primeiro obter a capacidade de executar código com baixos...

FortiLPE

Descrizione Exploit PoC di escalation dei privilegi locale per CVE-2025-62676 / EUVD-2025-206993 che mira a FortiClient VPN in esecuzione su Windows. Esegue un payload nel contesto di SYSTEM da un contesto utente normale tramite una scrittura arbitraria di file XML. Il PoC è stato testato contro...

CVE-2026-18262

Parallels RAS Client RDP Backend Service Exposed Dangerous Function Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Parallels RAS Client. An attacker must first obtain the ability to execute low-privileged cod...

CVE-2026-18263 Parallels RAS Client RDP Backend Service Exposed Dangerous Function Local Privilege Escalation Vulnerability

Parallels RAS Client RDP Backend Service Exposed Dangerous Function Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Parallels RAS Client. An attacker must first obtain the ability to execute low-privileged cod...

CVE-2026-18263

The flaw is in the RAS RDP Backend Service of Parallels RAS Client, which exposes a dangerous function. A local low-privileged attacker can exploit it to execute arbitrary code as SYSTEM. CVSS 7.8 (HIGH). No patch or exploit details are provided in the documents. Monitor ZDI-26-556 for remediatio...

CVE-2026-18262

Parallels RAS Client contains a local privilege escalation vulnerability in the RAS RDP Backend Service , caused by an exposed dangerous function . A local attacker with the ability to execute low-privileged code can leverage this flaw to execute arbitrary code in the SYSTEM context, resulting in...

CVE-2026-18262 Parallels RAS Client RDP Backend Service Exposed Dangerous Function Local Privilege Escalation Vulnerability

Parallels RAS Client RDP Backend Service Exposed Dangerous Function Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Parallels RAS Client. An attacker must first obtain the ability to execute low-privileged cod...

EUVD-2026-63462

Parallels RAS Client RDP Backend Service Exposed Dangerous Function Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Parallels RAS Client. An attacker must first obtain the ability to execute low-privileged cod...

CVE-2026-13121 Parallels RAS Client RDP Backend Service Exposed Dangerous Function Local Privilege Escalation Vulnerability

Parallels RAS Client RDP Backend Service Exposed Dangerous Function Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Parallels RAS Client. An attacker must first obtain the ability to execute low-privileged cod...

CVE-2026-13121

The flaw exists in the RAS RDP Backend Service of Parallels RAS Client, which exposes a dangerous function allowing a local low-privileged attacker to escalate privileges and execute arbitrary code as SYSTEM. CVSS 7.8 HIGH. Exploitation in the wild is not reported in the provided documents. Patch...

EUVD-2026-63461

Parallels RAS Client RDP Backend Service Exposed Dangerous Function Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Parallels RAS Client. An attacker must first obtain the ability to execute low-privileged cod...

CVE-2026-76350

In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user that holds a role with the schedulesearch capability could configure Portable Document Format PDF attachments in the email alert action workflow. When the email alert action runs, it could execute arbitrary Search...

CVE-2026-6102

The CVE-2026-6102 entry concerns MSI Center NTIOLib_X64 with a local privilege-escalation flaw in the NTIOLib_X64.sys driver due to insufficient validation of the origin of commands. A local attacker who can run low-privileged code can escalate to SYSTEM and execute arbitrary code. The issue is i...

CVE-2026-6102 MSI Center NTIOLib_X64 Origin Validation Error Local Privilege Escalation Vulnerability

MSI Center NTIOLibX64 Origin Validation Error Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of MSI Center. An attacker must first obtain the ability to execute low-privileged code on the target system in order ...