CVE-2018-2628

Prueba de vulnerabilidades Subir shell Método 1: Método 2: Ejecutar shell Obtener meterpreter root@kitploit: msf use exploit/multi/script/webdelivery msf exploitmulti/script/webdelivery set target 3 target = 3 msf exploitmulti/script/webdelivery set payload windows/meterpreter/reversetcp payload ...

EUVD-2026-72380

ImageMagick before 7.1.2-30 contains a time-of-check-time-of-use vulnerability in path policy enforcement on Windows that allows attackers to bypass read or write restrictions by exploiting symlink race conditions. Attackers can swap symlinks between policy validation and file access to read or...

CVE-2026-86422 ImageMagick before 7.1.2-30 Path Policy TOCTOU Symlink Race

ImageMagick before 7.1.2-30 contains a time-of-check-time-of-use vulnerability in path policy enforcement on Windows that allows attackers to bypass read or write restrictions by exploiting symlink race conditions. Attackers can swap symlinks between policy validation and file access to read or...

CVE-2026-86422 ImageMagick before 7.1.2-30 Path Policy TOCTOU Symlink Race

ImageMagick before 7.1.2-30 contains a time-of-check-time-of-use vulnerability in path policy enforcement on Windows that allows attackers to bypass read or write restrictions by exploiting symlink race conditions. Attackers can swap symlinks between policy validation and file access to read or...

CVE-2026-86422

ImageMagick versions before 7.1.2-30 are affected by a time-of-check-time-of-use (TOCTOU) vulnerability in its path policy enforcement mechanism on Windows . An attacker with local access and low privileges can exploit symlink race conditions by swapping symlinks between policy validation and act...

CVE-2023-29336

CVE-2023-29336 - Escalada de Privilegios Local en Win32k - PoC Han surgido detalles sobre una falla de seguridad en Microsoft Windows, ya parcheada y explotada activamente, que podría ser aprovechada por un actor de amenazas para obtener privilegios elevados en los sistemas afectados. La...

CVE-2019-0888

CVE-2019-0888 PoC para CVE-2019-0888 - Use-After-Free en Windows ActiveX Data Objects ADO Artículo: https://news.sophos.com/en-us/2019/07/09/cve-2019-0888-use-after-free-in-windows-activex-data-objects-ado/...

cve-2018-8611

CVE-2018-8611 KTM UAF 권한 상승 익스플로잇 이것은 CVE-2018-8611에 대한 제 PoC 권한 상승 익스플로잇입니다. 저는 ost2 windows kernel exploitation 강좌를 공부하면서 이 익스플로잇을 작성했습니다. 강좌가 단계별 접근 방식을 취한다는 점과 제공되는 예제들이 정말 마음에 들었고, 그래서 이것은 익스플로잇의 제 나름의 버전입니다. 제공된 익스플로잇 코드를 복사하여 붙여넣지 않으려고 노력했고, 이상한 커널 버그를 디버깅하는 데 몇 시간을 허비해야 했지만, 어차피 끝낼 수 있다고...

BYOVD

EnPortv-Killer PoC for vulnerability in EnPortv driver from EnCase As of 2026-07-10, the driver is listed onLOLDDrivers but remains absent from Microsoft's recommended driver block rules as of 2026-07-10 Built on byovd-lib -- implements the DriverConfig trait and delegates the full BYOVD flow to...

cve-2016-0040

cve-2016-0040 poc para el error cve-2016-0040 encontrado y explotado por Meysam Firozi @R00tkitSmm este poc ayuda a escribir datos arbitrarios en una dirección arbitraria en el kernel de Windows para más información ver mi blog:...

cve-2020-16898

CVE-2020-16898 PoC BSOD para CVE-2020-16898 badneighbor Probado en Windows 10 versión 2004...

cve-2019-12750

Symantec Local Privilege Escalation - CVE-2019-12750 Basado en el excelente análisis de Kyriakos Economou: https://labs.nettitude.com/blog/cve-2019-12750-symantec-endpoint-protection-local-privilege-escalation-part-1/ Por ahora solo se admiten versiones x64 y versiones anteriores de Windows...

CVE-2018-19320

CVE-2018-19320 Explotando la funcionalidad similar a memcpy en ring0 para deshabilitar Driver Signing Enforcement DSE como se documenta aquí: http://deniable.org/windows/windows-callbacks Referencias https://cve.mitre.org/cgi-bin/cvename.cgi?name=2018-19320...

CVE-2020-17103

🛡️ MiniPlasma - CVE-2020-17103 A Windows Local Privilege Escalation Zero-Day Turning placeholder files into SYSTEM access 📋 Overview MiniPlasma is a powerful local privilege escalation exploit targeting CVE-2020-17103 in the Windows Cloud Files Mini Filter Driver cldflt.sys. It allows any standard...

cve-2020-1015

CVE-2020-1015 Prueba de concepto para CVE-2020-1015 Más detalles disponibles aquí Para compilar: 1. Crear un proyecto vacío de C++ en Visual Studio. 2. Agregar cve20201015.cpp y Source.idl al proyecto como archivos de origen. 3. Compilar Source.idl. Esto generará tres archivos: Sourcec.c, Sourceh...

CVE-2026-40369

🚨 CVE-2026-40369 - Windows Kernel Elevation of Privilege Vulnerability Windows Kernel Heap-Based Buffer Overflow allowing local attackers to elevate privileges toNT AUTHORITY\SYSTEM. 📖 Overview CVE-2026-40369 is a High Severity privilege escalation vulnerability affecting Microsoft Windows Kernel...

CVE-2017-10271

CVE-2017-10271 Usage: CVE-2017-12149.py http://targetip:port/ WEBLOGIC RCE Work with windows only, you could edit code a bit for linux...

CVE-2016-3309_Reloaded

Estudio de Caso de Explotación del Kernel - Desbordamiento de Pool "Salvaje" en Win10 x64 RS2 CVE-2016-3309 Recargado Este repositorio de Github contiene exploits para la vulnerabilidad win32kfull!bFill recientemente parcheada. Ejecutar el exploit de Palette o de Bitmap te otorgará privilegios de...

CVE_2020_0796_CNA

CVE-2020-0796-CNA Modified based on the PoC provided by danigargu, implemented privilege escalation replication on Windows 10, and developed AggressorScripts based on the Reflective DLL project by stephenfewer and the interface provided by CobaltStrike documentation. This repository is only for...

cve-2023-36802

PoC para CVE-2023-36802 Exploit dirigido al controlador MSKSSRV.SYS. El exploit completo funciona en sistemas Windows 11 y 10 vulnerables. Nota Si tienes algún truco o consejo interesante que pueda mejorar este exploit, estoy abierto a sugerencias : Créditos Valentina Palmiotti @chompie1337 de IB...