SIMATIC RTLS Locating Manager Code Execution

The vulnerability of the software for calculating positions of individual RTLS transponders in the SIMATIC RTLS Locating Manager is related to deficiencies in the mechanism for verifying input data during backup scenario execution. Exploiting this vulnerability could allow an attacker, operating...

CVE-2026-110464

Missing authorization in ASUS Armoury Crate allows a local attacker to write content into a specific file or registry location with Local System privileges, or to cause a recoverable system crash, via the service's exposed inter-process interface. Refer to the ' Security Update for Armoury Crate...

CVE-2026-110464

A missing authorization vulnerability in the ASUS Armoury Crate app allows a local attacker to exploit the service's exposed inter-process interface . This flaw enables the attacker to either write content into a specific file or registry location with Local System privileges or trigger a recover...

...[ More ]

Microsoft Windows Ancillary Function Driver for WinSock AFD.sys contains a local privilege escalation vulnerability that allows an attacker to obtain SYSTEM privileges. This C proof-of-concept exploits CVE-2023-21768 through an arbitrary kernel write primitive triggered using the AFDNOTIFYSOCKIOC...

PT-2026-135819

Name of the Vulnerable Software and Affected Versions Google Android affected versions not specified Description An out-of-bounds write exists in the is valid header function within timed cache item.c due to a missing bounds check. This flaw allows for local escalation of privilege, granting Syst...

CVE-2025-49144_PoC

CVE-2025-49144PoC 📌 CVE-2025-49144 is a high-severity local privilege escalation vulnerability found in the Notepad++ v8.8.1 and prior version installers. This vulnerability stems from uncontrolled executable search path behavior during installation, allowing a local attacker to gain SYSTEM-level...

CVE-2016-3309_Reloaded

Kernel Exploitation Case Study - "Wild" Pool Overflow on Win10 x64 RS2 CVE-2016-3309 Reloaded This Github repo contains exploits for the recently-patched win32kfull!bFill vulnerability. Executing the Palette or Bitmap exploit will give you SYSTEM privileges on the affected system. The exploits...

CVE-2020-0688

CVE-2020-0688 Microsoft Exchange Server Fixed Cryptographic Key Remote Code Execution RCE Instead of having randomly-generated keys on a per-installation basis, all installations of Microsoft Exchange Server have the same validationKey and decryptionKey values in web.config. Thus, an authenticate...

CVE-2023-27350

! Be careful executing this as it re-configures the server config in order to execute commands. The script reverts the changes on exit but might not revert it if the process is improperly killed ! CVE-2023-27350 Papercut Unauthenticated RCE Versions The script automatically tests if server is...

CVE-2024-26229

CVE-2024-26229 Windows CSC service privilege escalation vulnerability. When a program writes more data to a buffer than its capacity, a heap-based buffer overflow occurs, causing excess data to overflow into adjacent memory areas. This overflow can corrupt memory and may allow an attacker to...

CVE-2025-21293

CVE-2025-21293 CVE-2025-21293 is an elevation of privilege vulnerability in Active Directory Domain Services. It allows "Network Configuration Operators" to execute code with SYSTEM privileges via Windows Performance Counters. Affected Windows versions include Windows 10, 11, and Server. Microsof...

cve-2025-59287-exploit-poc

CVE-2025-59287 Proof-of-Concept Exploit Vulnerability Overview CVE-2025-59287 is a critical Remote Code Execution RCE vulnerability in Microsoft Windows Server Update Services WSUS. The vulnerability is caused by unsafe deserialization of AuthorizationCookie data through BinaryFormatter in the...

CVE-2025-59287

In this study, we will examine a critical vulnerability CVE-2025-59287 discovered in the Microsoft Windows Server Update Services WSUS environment. This vulnerability arises from the unsafe deserialization of AuthorizationCookie objects sent to the GetCookie endpoint, where encrypted cookie data ...

CVE-2025-24076

CVE-2025-24076 Microsoft Windows Cross Device Service Elevation of Privilege Vulnerability Exploit Overview This script exploits a vulnerability in the Windows Cross Device Service that allows privilege escalation on Windows 11 , Windows Server 2025 , and Windows Server 2022 23H2 Server Core...

CVE-2024-0670

CVE-2024-0670 PoC This repository provides a Proof of Concept PoC exploit for the CVE-2024-0670 vulnerability, affecting the CheckMK Agent on Windows systems. The vulnerability occurs when the CheckMK Agent creates and executes temporary files in the C:\Windows\Temp directory. An attacker can abu...

PUB-A-508385434

In multiple files, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

PUB-A-505398752

In multiple locations, there is a possible out-of-bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

PUB-A-511307981

In multiple locations, there is a possible way to corrupt host allocator metadata in shared memory due to memory corruption. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

PUB-A-514732244

In multiple locations, there is a possible denial of service due to a logic error in the code. This could lead to local denial of service with System execution privileges needed. User interaction is not needed for exploitation...

PUB-A-534335355

In smmudomainconfigs1 of arm-smmu-v3.c, there is a possible way to access stale stream table entries across reassigned stream identifiers due to a logic error. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation...