1268 matches found
CVE-2023-36874
CVE-2023-36874 Proof of Concept PoC An educational and defensive research implementation of the CVE-2023-36874 vulnerability, demonstrating a Local Privilege Escalation LPE flaw within the Windows Error Reporting WER component. ⚠️ Disclaimer This repository and the provided source code are intende...
zygote-injection-toolkit
Kit de herramientas de inyección Zygote Esta es una utilidad de línea de comandos en Python para ejecutar y respaldar fácilmente datos privados de aplicaciones utilizando la vulnerabilidad de inyección Zygote de Android CVE-2024-31317. Para ejecutar esto, debes tener un dispositivo que no haya si...
CVE-2023-41772
CVE-2023-41772 / UIFuckUp UIFuckUp exploit to gain system privileges as user on Windows 10 1809 and up and 11. How To: 1. Compile uiaccessexploit.exe and uiaccessexploit.dll 2. Create directory C:\exploit 3. Place uiaccessexploit.exe, uiaccessexploit.dll and JuciyPotatoNG.exe in C:\exploit 4. Run...
SCCM-CVE-2026-47301-Remote-Code-Execution-Exploit
SCCM-CVE-2026-47301-Remote-Code-Execution-Exploit Proof-of-concept exploit chain I have discovered assigned as CVE-2026-47301 for Microsoft Configuration Manager SCCM, combining broken access control, CAB extraction-path traversal arbitrary file write, certificate verification bypass, and DLL...
CVE-2026-50656-rogueplanet-validation
RoguePlanet PoC Validation Report for Microsoft Defender Purpose and scope of the report This report concerns the validation of the publicly described RoguePlanet PoC related to Microsoft Defender. The described technique was presented in the media on 10 June 2026 as a Local Privilege Escalation...
IDiagnosticProfileUAC
IDiagnosticProfileUAC Just another UAC bypass using auto-elevated COM object Virtual Factory for DiagCpl 12C21EA7-2EB8-4B55-9249-AC243DA8C666. This COM object can be used to create instance of DiagnosticProfile D0B7E02C-E1A3-11DC-81FF-001185AE5E76 COM object which exposes SaveDirectoryAsCab metho...
PrintNightmare-CVE-2021-34527
PrintNightmare - Vulnerabilidad RCE/LPE del Servicio de Cola de Impresión de Windows CVE-2021-34527, CVE-2021-1675 Resumen Esta es una vulnerabilidad de ejecución remota de código que puede ser utilizada para obtener privilegios de nivel SYSTEM por parte de un usuario remoto autenticado contra...
Windows-WinSock-UAF-Mitigation
CVE-2026-68820: Windows WinSock afd.sys UAF Mitigation This repository contains a conceptual patch demonstrating the mitigation for CVE-2026-68820 , a critical Use-After-Free UAF vulnerability in the Windows Ancillary Function Driver for WinSock afd.sys. Active exploitation of this flaw allows a...
cve-2014-7912
cve-2014-7911 Exp for cve-2014-7911 which can get system privillage, based on most of the codes of others but different gadget 1. install the apk and click the button 2. system server will restart 3. will write system id100 into /data/1.txt...
ShieldCrash
ShieldCrash Vulnerabilidad 0day de Windows Defender Microsoft no ha logrado parchear correctamente ShieldBreak CVE-2026-69414; bajo condiciones específicas, todavía es posible desencadenar exactamente el mismo problema que causó ShieldBreak. Aunque Microsoft corrigió varias cosas para evitar...
CVE-2026-84408
QND contains an improper access control vulnerability in a named pipe, which may allow a local attacker who is logged in to a Windows PC where the affected product's client is installed to execute arbitrary commands with SYSTEM privileges...
CVE-2026-56932
In Trusted Execution Environment, there is a possible memory corruption due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...
CVE-2026-21103
Path traversal in GalaxyDiagnostics prior to SMR Sep-2026 Release 1 allows physical attackers to access files with system privilege...
CVE-2026-21092
Path traversal in ImsService prior to SMR Sep-2026 Release 1 allows remote attackers to create image files with system server privilege...
CVE-2026-21103
Path traversal in GalaxyDiagnostics prior to SMR Sep-2026 Release 1 allows physical attackers to access files with system privilege...
CVE-2026-21103
CVE-2026-21103 is a path traversal vulnerability in Samsung's GalaxyDiagnostics component, affecting versions prior to SMR Sep-2026 Release 1 . A physical attacker with no required privileges or user interaction can exploit this flaw to access files with system privilege , resulting in high confi...
EUVD-2026-74644
Path traversal in GalaxyDiagnostics prior to SMR Sep-2026 Release 1 allows physical attackers to access files with system privilege...
CVE-2026-21103
Path traversal in GalaxyDiagnostics prior to SMR Sep-2026 Release 1 allows physical attackers to access files with system privilege...
