CVE-2024-0670-CheckMK-Agent-Local-Privilege-Escalation-Exploit

CVE-2024-0670 – CheckMK Agent 本地权限提升 PoC 本仓库包含 CVE-2024-0670 的一个简洁清晰的验证概念（PoC），该漏洞是 CheckMK Windows Agent 中的一个本地权限提升漏洞。 低权限用户可以通过滥用 MSI 修复过程中执行的可写临时文件路径来获取 SYSTEM 权限。 🔍 漏洞概述 厂商：Tribe29 CVE：CVE-2024-0670...

CVE-2024-34329

CVE-2024-34329 Tested Product: Datacard XPS Card Printer Driver Version: = 8.4 Description: The application is prone to Local Privilege Escalation LPE vulnerability due to insecure file/folder permissions on its default installation, by which it grants the rights for everyone for full control ove...

CVE-2024-34474

CVE-2024-34474 Clario（截至2024-04-11）Windows 桌面版对 %PROGRAMDATA%\Clario 的权限设置较弱，并尝试以 SYSTEM 权限从该目录加载 DLL。 描述： Clario Windows 桌面应用程序在用户执行防病毒扫描时，尝试从 C:\ProgramData\Clario\ 和 C:\ProgramData\Clario\Engines\ 加载不存在的 DLL 库。这些 DLL 文件不存在，且即使非管理员用户执行扫描，该进程也会以 SYSTEM 权限调用。在 Windows 系统中，默认情况下，任何经过身份验证的用户都可以在...

CVE-2025-1910-WatchGuard-Privilege-Escalation

Escalada de privilegios en WatchGuard Mobile VPN with SSL Client CVE-2025-1910 Una vulnerabilidad de escalada de privilegios en Mobile VPN with SSL de WatchGuard MD5SUM Pack into a .wgssl file tar -czf ../clientexploit.wgssl client.ovpn MD5SUM run.bat cd .. 5. Sirva el archivo malicioso...

SeRestoreAbuse

SeRestoreAbuse Ejecuta un comando como SYSTEM cuando se asigna SeRestorePrivilege. En caso de que esté deshabilitado, el programa lo habilitará por ti. Uso: SeRestoreAbuse.exe "cmd /c ..."...

adups-get-super-serial

adups-get-super-serial CVE-2015-2231 Prueba de Concepto La POC que estaba usando para demostrar CVE-2015-2231 'Get Super Serial'. Algunas personas me pidieron que la publicara para que pudieran usar cosas similares en otros dispositivos basados en firmware ADUPS que tienen esta vulnerabilidad...

PUB-A-508717360

In ispdallowed of gemmsg.c, there is a possible missing authorization due to a missing permission check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-36213-poc

CVE-2026-36213：MEmu Android 模拟器 9.2.7.0 本地权限提升 https://img.shields.io/badge/platform-Windows-blue https://img.shields.io/badge/CVE-2026--36213-red https://img.shields.io/badge/EDB--ID-52615-orange 概述 本仓库包含针对 CVE-2026-36213 的 Python 概念验证（PoC），这是 Windows 上 MEmu Android 模拟器 9.2.7.0 中的一个本地权限提升漏洞。 该漏洞...

Multiple vulnerabilities in QND

Overview QND Standard/Premium provided by QualitySoft Corporation contains multiple vulnerabilities listed below: Use of hard-coded cryptographic key CWE-321 - CVE-2026-81326 Improper access control on a named pipe CWE-782 - CVE-2026-84408 Taisei Ogura of MOTEX Inc. reported this vulnerability to...

CVE-2026-58755

In smmuinstallnestedste of arm-smmu-v3.c, there is a possible escalation of privilege due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-58739

In platformmsghandlerinit of defaultmsghandlers.c, there is a possible confused deputy due to a confused deputy. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-58695

In gmcphylp3exitrestoreregisters of phypower.c, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-56992

In multiple files, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-56889

In multiple locations, there is a possible permission bypass due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-55365

In multiple functions of remap.c, there is a possible out-of-bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-55317

In printf of printf.c, there is a possible out-of-bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-55302

In multiple locations, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-79014

In platformmsghandlerinit of defaultmsghandlers.c, there is a possible confused deputy due to a confused deputy. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-58724

In multiple locations, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-58678

In Bootloader, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...