CVE-2022-37973: Undefined Security Weakness

Windows Local Session Manager LSM Denial of Service Vulnerability...

CVE-2022-38016: Undefined Security Weakness

Windows Local Security Authority LSA Elevation of Privilege Vulnerability...

Microsoft Windows Local Session Manager (LSM) 资源管理错误漏洞

Microsoft Windows is a set of operating systems for personal devices from the U.S. Microsoft Windows Local Session Manager LSM has a denial-of-service vulnerability that can be exploited by attackers to launch denial-of-service attacks...

CVE-2022-37998: Undefined Security Weakness

Windows Local Session Manager LSM Denial of Service Vulnerability...

PT-2022-4335 · Microsoft · Windows Local Security Authority +1

Name of the Vulnerable Software and Affected Versions: Windows Local Security Authority LSA affected versions not specified Description: The issue is related to insufficient input validation in the Local Security Authority LSA service of the Microsoft Windows operating system. It can be exploited...

CVE-2022-34706: Improper Privilege Management

Windows Local Security Authority LSA Elevation of Privilege Vulnerability...

CVE-2022-34006

An issue was discovered in TitanFTP aka Titan FTP NextGen before 1.2.1050. When installing, Microsoft SQL Express 2019 installs by default with an SQL instance running as SYSTEM with BUILTIN\Users as sysadmin, thus enabling unprivileged Windows users to execute commands locally as NT...

CVE-2022-24496: Undefined Security Weakness

Windows Local Security Authority LSA Elevation of Privilege Vulnerability...

CVE-2022-24487: Undefined Security Weakness

Windows Local Security Authority Subsystem Service LSASS Remote Code Execution Vulnerability...

VulnCheck KEV: CVE-2021-36942

Microsoft Windows Local Security Authority LSA contains a spoofing vulnerability allowing an unauthenticated attacker to call a method on the LSARPC interface and coerce the domain controller to authenticate against another server using NTLM...

PT-2021-3785

Name of the Vulnerable Software and Affected Versions Microsoft Windows Local Security Authority LSA versions are affected, but specific versions are not provided in the input data. Description A spoofing issue allows attackers to affect the system. The problem is related to the Local Security...

CVE-2021-33788

Windows LSA Denial of Service Vulnerability...

Palo Alto Networks Cortex XDR Agent Security Vulnerability

Palo Alto Networks Cortex XDR Agent is a client software from Palo Alto Networks Malaysia used to check the security of client devices. A security vulnerability exists in Cortex XDR Agent that arises from improper handling that allows a local authenticated Windows user to create files in the...

Exploit for Improper Resource Shutdown or Release in Microsoft

CVE-2018-8120 CVE-2018-8120 Windows LPE exploit Supports both x32 and x64. Tested on: Win7 x32, Win7 x64, Win2008 x32, Win2008 R2 x32, Win2008 R2 Datacenter x64, Win2008 Enterprise x64. Usage shell CVE-2018-8120 exploit by @unamerhttps://github.com/unamer Usage: exp.exe command Example: exp.exe...

CVE-2013-10046

creationtimestamp| type| source ---|---|--- 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/local/agnitumoutpostacs.rb 2025-10-23 21:12:57+00:00| seen| MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7 2026-09-08 06:52:06+00:00| seen|...

Prime95 29.4b8 - Stack Buffer Overflow (SEH) Exploit

Exploit for windows platform in category local exploits Exploit Author: crashmanucoot Contact: twitter.com/crashmanucoot Vendor Homepage: https://www.mersenne.org/ Software Link: https://www.mersenne.org/download/download Version: 29.4b8 Tested on: Windows 10 Pro x64 SPANISH Windows 7 Home Premiu...

Windows Manage RID Hijacking

This module will create an entry on the target by modifying some properties of an existing account. It will change the account attributes by setting a Relative Identifier RID, which should be owned by one existing account on the destination machine. Taking advantage of some Windows Local Users...

Microsoft Windows Local Elevation of Privilege Vulnerability (CNVD-2016-07746)

Microsoft Windows is a series of operating systems released by the American company Microsoft. An elevation of privilege vulnerability exists in Microsoft Windows 10 Gold, 1511 and 1607 versions. A local attacker can exploit the vulnerability to execute arbitrary code with system administrator...

Privilege escalation

Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 Gold and 1511 allow local users to gain privileges via a crafted application that triggers a Winsock call referencing an...

CVE-2012-1893

win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly validate callback parameters during creation of a hook procedure, which allows local users t...