653 matches found
Auto-Elevate
Auto-Elevate This tool demonstrates the power of UAC bypasses and built-in features of Windows. This utility auto-locates winlogon.exe, steals and impersonates it's process TOKEN, and spawns a new SYSTEM-level process with the stolen token. Combined with UAC bypass method 41 ICMLuaUtil UAC bypass...
CVE-2026-83888
Buffer over-read in Windows CD-ROM Driver allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-102863
Improper control of generation of code 'code injection' in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network...
CVE-2026-88075
The Microsoft Configuration Manager is susceptible to an SQL injection vulnerability (CWE-89) due to the improper neutralization of special elements used in an SQL command. An authorized attacker can exploit this flaw over a network to elevate privileges . Microsoft has released updates to addres...
EUVD-2026-99694
Improper authentication in ASP.NET Core allows an unauthorized attacker to elevate privileges over a network...
PT-2026-111953
Name of the Vulnerable Software and Affected Versions .NET affected versions not specified Visual Studio affected versions not specified Description An issue involving type confusion, which occurs when a program uses a resource with a type that is incompatible with the expected type, allows an...
PT-2026-112000
Improper limitation of a pathname to a restricted directory 'path traversal' in Dynamics Business Central allows an authorized attacker to elevate privileges over a network...
PT-2026-112905
Improper neutralization of special elements used in an sql command 'sql injection' in Microsoft Configuration Manager allows an authorized attacker to elevate privileges over a network...
PT-2026-95170
Name of the Vulnerable Software and Affected Versions Azure Logic Apps affected versions not specified Description Azure Logic Apps contains a path traversal issue, which occurs when a program improperly limits a pathname to a restricted directory. This flaw allows an unauthorized attacker to...
PT-2026-95169
Name of the Vulnerable Software and Affected Versions Azure Arc affected versions not specified Description An issue exists where improper limitation of a pathname to a restricted directory, known as path traversal, allows an unauthorized attacker to elevate privileges over a network. Path...
PT-2026-68824
Name of the Vulnerable Software and Affected Versions Application Insights Profiler affected versions not specified Description An authorized attacker can elevate privileges over a network due to a path traversal issue. This occurs because the software fails to properly limit pathnames to a...
ASP.NET Core: ASP.NET Core: Privilege Elevation via Authentication Bypass
A flaw was found in ASP.NET Core. An authorized attacker can exploit this authentication bypass vulnerability over a network by manipulating assumed-immutable data. This can allow the attacker to elevate their privileges within the system...
Elevate Session (Keep Root)
Marks the active Linux/SSH session so subsequent post modules run as root, and auto-escalates SSH interactive PTY sessions sudo -i on sessions interact. Uses native root when already uid 0, otherwise sudo -n or sudo -S with a password. Solves SSH sessions where interactive sudo/su is lost after...
EUVD-2026-43839
Improper access control in Windows Win32K allows an authorized attacker to elevate privileges locally...
EUVD-2026-44260
Time-of-check time-of-use toctou race condition in Windows Network File System allows an authorized attacker to elevate privileges over a network...
Windows NFS Server Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Network File System allows an authorized attacker to elevate privileges over a network...
Windows USB Video Driver Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows USB Video Driver allows an unauthorized attacker to elevate privileges with a physical attack...
CVE-2026-50330: Heap-based Buffer Overflow
Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to elevate privileges over a network...
PT-2026-58229
Name of the Vulnerable Software and Affected Versions Windows Hyper-V affected versions not specified Description A use after free issue exists in Windows Hyper-V, which allows an authorized attacker to elevate privileges locally. This flaw can enable an attacker with low-privilege access to gain...