CVE-2018-19320

CVE-2018-19320 Exploiting ring0 memcpy-like functionality to disable Driver Signing Enforcement DSE as documented here: http://deniable.org/windows/windows-callbacks References https://cve.mitre.org/cgi-bin/cvename.cgi?name=2018-19320...

CVE-2020-17103

🛡️ MiniPlasma - CVE-2020-17103 A Windows Local Privilege Escalation Zero-Day Turning placeholder files into SYSTEM access 📋 Overview MiniPlasma is a powerful local privilege escalation exploit targeting CVE-2020-17103 in the Windows Cloud Files Mini Filter Driver cldflt.sys. It allows any standard...

cve-2020-1015

CVE-2020-1015 PoC for CVE-2020-1015 More detail available here To compile: 1. Create an empty C++ project in Visual Studio. 2. Add cve20201015.cpp and Source.idl to the project as source files. 3. Compile Source.idl. This will generate three files: Sourcec.c, Sourceh.h and Sources.c. 4. Add the...

CVE-2026-40369

🚨 CVE-2026-40369 - Windows Kernel Elevation of Privilege Vulnerability Windows Kernel Heap-Based Buffer Overflow allowing local attackers to elevate privileges toNT AUTHORITY\SYSTEM. 📖 Overview CVE-2026-40369 is a High Severity privilege escalation vulnerability affecting Microsoft Windows Kernel...

CVE-2017-10271

CVE-2017-10271 Usage: CVE-2017-12149.py http://targetip:port/ WEBLOGIC RCE Work with windows only, you could edit code a bit for linux...

CVE-2016-3309_Reloaded

Kernel Exploitation Case Study - "Wild" Pool Overflow on Win10 x64 RS2 CVE-2016-3309 Reloaded 이 Github 저장소는 최근 패치된 win32kfull!bFill 취약점에 대한 익스플로잇을 포함하고 있습니다. Palette 또는 Bitmap 익스플로잇을 실행하면 영향을 받는 시스템에서 SYSTEM 권한을 얻을 수 있습니다. 이 익스플로잇은 Creators Update가 적용된 Windows 10 x64 빌드 15063.540마이크로소프트의 9월 업데이트가...

CVE_2020_0796_CNA

CVE-2020-0796-CNA Modified based on the PoC provided by danigargu, implemented privilege escalation replication on Windows 10, and developed AggressorScripts based on the Reflective DLL project by stephenfewer and the interface provided by CobaltStrike documentation. This repository is only for...

cve-2023-36802

CVE-2023-36802를 위한 PoC MSKSSRV.SYS 드라이버를 대상으로 하는 익스플로잇입니다. 완전한 익스플로잇은 취약한 Windows 11 및 10 시스템에서 작동합니다. 참고 이 익스플로잇을 개선할 멋진 트릭이나 팁이 있다면 언제든지 제안해 주세요 : 크레딧 IBM X Force의 Valentina Palmiotti @chompie1337 Google의 Project Zero 분석...

CVE-2022-21907

CVE-2022-21907 Настоящий DoS-эксплойт для CVE-2022-21907 Поддерживает IPv4/IPv6/HTTP/HTTPS Поражённые системы root@kitploit: - Windows - 10 Версия 1809 для 32-разрядных систем - 10 Версия 1809 для систем на базе x64 - 10 Версия 1809 для систем на базе ARM64 - 10 Версия 21H1 для 32-разрядных систе...

CVE-2017-11882-metasploit

CVE-2017-11882-metasploit This is a Metasploit module which exploits CVE-2017-11882 using the POC below: https://embedi.com/blog/skeleton-closet-ms-office-vulnerability-you-didnt-know-about. Installation 1. Copy the cve201711882.rb to /usr/share/metasploit-framework/modules/exploits/windows/local...

CVE-2020-1034

CVE-2020-1034 CVE-2020-1034를 이용한 권한 상승을 보여주는 PoC입니다. 패치되지 않은 Windows 10 2004, 빌드 19041.488에서 테스트되었습니다. 해당 취약점은 Microsoft에 의해 발견되었으며 2020년 8월 9일 패치 화요일에 수정되었습니다: https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2020-1034 분석 글 파트 1:...

CVE-2025-21298

Содержание Это доказательство концепции для CVE-2025-21298 - Уязвимость удаленного выполнения кода в Windows OLE CVSS 9.8. Это доказательство концепции повреждения памяти , а не эксплойт. Полный дифф патча через ghidriff: ССЫЛКА уязвимость Уязвимость находится в ole32.dll!UtOlePresStmToContentsSt...

CVE-2025-24071_PoC

CVE-2025-24071PoC CVE-2025-24071: NTLM Hash Leak via RAR/ZIP Extraction and .library-ms File Windows Explorer automatically initiates an SMB authentication request when a .library-ms file is extracted from a .rar archive, leading to NTLM hash disclosure. The user does not need to open or execute...

CVE-2019-0708

내일 결혼식 때문에 떠나요. 아무것도 찾지 못하면 다른 사람이 대신 맡아주세요. 금요일에 여기에 크래시 PoC를 공개할 예정입니다. 이미 공개된 것이 없다면요... 어쩌면 다음 주에 할 수도 있습니다. 취약한 숫자가 일관되게 떨어지는지에 따라 다릅니다. https://vimeo.com/339425966 이것으로 무엇을 하든 저는 책임지지 않으며, 교육 목적으로만 사용해야 합니다. server 2003 및 win xp와 통신하도록 소켓을 포팅하지는 않았지만, 원한다면 간단할 것입니다보안 교환 PDU를 추가하고 계산만 하면 됩니다...

CVE-2026-78221

A flaw was found in OpenVPN. An incorrect buffer size calculation within the Windows Interactive Service allows local authenticated users to trigger memory corruption or disclose sensitive information. This vulnerability can be exploited by providing specially crafted inputs...

CVE-2026-82312

A flaw was found in OpenVPN on Windows. A local authenticated user could exploit a vulnerability related to a NULL Discretionary Access Control List DACL on named Inter-Process Communication IPC objects. This could allow the user to cause a denial of service, making the service unavailable to...

CVE-2026-81830

A flaw was found in OpenVPN. The Windows interactive service in OpenVPN contains an incorrect file path validation vulnerability. A local authenticated user could exploit this flaw to bypass the trusted configuration directory constraint, leading to a security bypass and potential integrity...

CVE-2026-82325

A use-after-free vulnerability in the OpenVPN ovpn-dco-win driver version 2.5.0 through 2.8.6 allows local authenticated users to cause a system crash via crafted control messages...

CVE-2026-84256

A flaw was found in OpenVPN on Windows. An argument parsing issue allows remote authenticated users to execute arbitrary commands by providing a specially crafted certificate subject. This vulnerability could lead to a complete compromise of the affected system...

cve-2026-0828

CVE-2026-0828 — PoC BYOVD для Safetica ProcessMonitorDriver.sys Драйвер ядра Safetica DLP ProcessMonitorDriver.sys предоставляет неаутентифицированный IOCTL, который позволяет любому пользовательскому вызывающему объекту завершать произвольные процессы через ZwTerminateProcess в контексте ядра,...