Windows_MSKSSRV_LPE_CVE-2023-36802

CVE-2023-36802 ローカル権限昇格 POC 著者: chompie デモンストレーション目的のみです。完全なエクスプロイトは、脆弱性のある Windows 11 22H2 システムで動作します。 脆弱性のあるすべてのシステムへの適用は読者の課題とします。上手くなれ、など。 使用方法: root@kitploit: WindowsMSKSSRVLPECVE-2023-6802.exe ここで、 は昇格させるプロセスのプロセス ID（10進数）です。 これにより、対象プロセスが SYSTEM に昇格します。 I/O Ring LPE プリミティブコードは、Yarden Shafi...

Auto-Elevate

Auto-Elevate Этот инструмент демонстрирует мощь обходов UAC и встроенных функций Windows. Эта утилита автоматически находит winlogon.exe, похищает и олицетворяет его TOKEN процесса и порождает новый процесс уровня SYSTEM с помощью украденного токена. В сочетании с методом обхода UAC 41 ICMLuaUtil...

CVE-2014-4076

CVE-2014-4076 PoC Это доказательство концепции напрямую скопировано из оригинальной версии на Python и переписано на C++. Сборка Этот проект собран с помощью Visual Studio 2013 Update 4. Примечание Только пользователи из группы Администраторы могут открыть устройство и выполнять IO controls, что...

Windows_LPE_AFD_CVE-2023-21768

CVE-2023-21768 ローカル権限昇格 PoC 著者: chompie & b33f デモンストレーション目的のみ。完全なエクスプロイトは、脆弱性のある Windows 11 22H2 システムで動作します。 書き込みプリミティブは、すべての脆弱性のあるシステムで動作します。 使用方法: root@kitploit: WindowsAFDLPECVE-2023-21768.exe ここで は、昇格させたいプロセスのプロセス ID（10進数）です。 結果として、対象プロセスが SYSTEM に昇格します。 I/O Ring LPE プリミティブコードは、Yarden Shafir...

CVE-2023-21768

CVE-2023-21768 로컬 권한 상승 POC authors: chompie & b33f 데모 목적으로만 사용됩니다. 완전한 익스플로잇은 취약한 Windows 11 22H2 시스템에서 작동합니다. 쓰기 기본 요소는 모든 취약한 시스템에서 작동합니다. 사용법: root@kitploit: WindowsAFDLPECVE-2023-21768.exe 여기서 는 상승시킬 프로세스의 프로세스 ID10진수입니다. 대상 프로세스가 SYSTEM으로 상승되어야 합니다...

Driver-RW

Driver-RW CVE-2018-19321을 이용하여 NT AUTHORITY\SYSTEM으로 권한 상승 WIndows 10 v1511에서 테스트됨...

Amazon WorkSpaces 安全漏洞

Amazon WorkSpaces is a fully managed, persistent desktop virtualization service provided by Amazon, Inc. It allows your users to access the data, applications, and resources they need from any supported device, at any time. Versions of Amazon WorkSpaces prior to 2.6.2034.0 contained a security...

EUVD-2026-26423

CVE-2026-33451 is an arbitrary read/write vulnerability in the Secure Access Windows client prior to 14.50. Attackers with local control of the Windows client can send malformed data to an API and elevate their level of privilege to system...

Security information for Hitachi Disk Array Systems

Overview CVE-2026-20846 | GDI+ Denial of Service Vulnerability CVE-2026-21222 | Windows Kernel Information Disclosure Vulnerability CVE-2026-21231 | Windows Kernel Elevation of Privilege Vulnerability CVE-2026-21234 | Windows Connected Devices Platform Service Elevation of Privilege Vulnerability...

PT-2026-4514

Name of the Vulnerable Software and Affected Versions Epson USB Display version 1.6.0.0 Description The software contains an unquoted service path vulnerability within the EMP UDSA service, which operates with LocalSystem privileges. This allows attackers to potentially gain elevated system acces...

CVE-2025-53841

The GC-AGENTS-SERVICE running as part of Akamai´s Guardicore Platform Agent for Windows versions prior to v49.20.1, v50.15.0, v51.12.0, v52.2.0 is affected by a local privilege escalation vulnerability. The service will attempt to read an OpenSSL configuration file from a non-existent location th...

PT-2025-48814

Name of the Vulnerable Software and Affected Versions Akamai Guardicore Platform Agent versions prior to 50.15.0 Akamai Guardicore Platform Agent versions prior to 51.12.0 Akamai Guardicore Platform Agent versions prior to 52.1.1 Description The Akamai Guardicore Platform Agent has a flaw that...

memoQ 安全漏洞

memoQ is a computer-assisted translation software from the Hungarian company memoQ. A security vulnerability exists in memoQ 10.1.13.ef1b2b52aae and earlier versions, which stems from an unquoted service path and could allow a local user to achieve elevation of privilege to SYSTEM by placing a...

CVE-2025-59273 Azure Event Grid System Elevation of Privilege Vulnerability

...

CVE-2025-59273

Azure Event Grid System Elevation of Privilege vulnerability (CVE-2025-59273) arises from improper access control, enabling a network-based, unauthenticated attacker to elevate privileges. Affected component: Azure Event Grid System in Microsoft Azure; root cause: access control misconfiguration ...

CVE-2025-59273 Azure Event Grid System Elevation of Privilege Vulnerability

...

CVE-2025-32098

An issue was discovered in Samsung Magician 6.3 through 8.3 on Windows. An attacker can achieve Elevation of Privileges to SYSTEM by exploiting insecure file delete operations during the update process...

sudo: LPE via host option

A privilege escalation vulnerability was found in Sudo. In certain configurations, unauthorized users can gain elevated system privileges via the Sudo host option -h or --host. When using the default sudo security policy plugin sudoers, the host option is intended to be used in conjunction with t...

CVE-2023-21042

In TBD of TBD, there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-239873326References: N/...

CVE-2021-35449

The Lexmark Universal Print Driver version 2.15.1.0 and below, G2 driver 2.7.1.0 and below, G3 driver 3.2.0.0 and below, and G4 driver 4.2.1.0 and below are affected by a privilege escalation vulnerability. A standard low priviliged user can use the driver to execute a DLL of their choosing durin...