25784 matches found
CVE-2025-21420_POC
Diffing cleanmgr.exe The new version of cleanmgr.exe includes a call to the SetProcessMitigationPolicy function. With MitigationPolicy set to 16, corresponding to ProcessRedirectionTrustPolicy. Combined with Microsoft's description of CWE-59: Improper Link Resolution Before File Access 'Link...
CVE-2016-7255
CVE-2016-7255 The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allow local users to gain privileges via a crafted...
CVE-2019-0803
CVE-2019-0803 Win32k Elevation of Privilege Poc Screenshot Reference steal Security token https://github.com/mwrlabs/CVE-2016-7255...
CVE-2019-0803
CVE-2019-0803 Win32k Elevation of Privilege Poc Screenshot Reference steal Security token https://github.com/mwrlabs/CVE-2016-7255...
CVE-2022-21882
CVE-2022-21882 Win32k Elevation of Privilege Vulnerability For Windows 10 21H2 Only...
CVE-2019-1132
CVE-2019-1132 EoP POC for CVE-2019-1132 This exploit is tested on Windows 7 x86 build 7601 With June Patch installed...
CVE-2021-1732
CVE-2021-1732 Win32k Elevation Of Privileges Techniques inspired from: https://github.com/L4ys/CVE-2022-21882 https://github.com/exploitblizzard/Windows-Privilege-Escalation-CVE-2021-1732...
CVE-2024-30051
Windows DWM Core Library Elevation of Privilege Vulnerability CVE-2024-30051 Published August 15 of 2024 In this blog post, I will explain a vulnerability in the Microsoft Windows DWM Core library that I analyzed when the exploit for Core Impact was being developed. Allows an unprivileged attacke...
SpoolFool
SpoolFool Exploit for CVE-2022-21999 - Windows Print Spooler Elevation of Privilege Vulnerability LPE Details The provided exploit should work by default on all Windows desktop versions. Please see the blog post for full technical details here. Usage root@kitploit: PS C:\SpoolFool .\SpoolFool.exe...
Dell-Driver-EoP-CVE-2021-21551
Dell Driver EoP CVE-2021-21551 Exploit rápido para el error del driver de Dell CVE-2021-21551 por diversión. Gran hallazgo de @kasifdekel! El informe se puede encontrar aquí. Este exploit ha sido probado en Windows versiones 1809 y 20H2, los offsets de token pueden variar en otras versiones...
CVE-2025-63946-Tencent-PC-Manager-EoP
CVE-2025-63946 Tencent PC Manager EoP version: PCManager Version lower or equal 17.10.28554.205 Summary: I discovered a vulnerability in Tencent PC Manager where files and directories under C:\Windows\Temp are insecurely handled. An attacker can leverage symbolic link symlink attacks to coerce a...
CVE-2025-0087-
CVE-2025-0087- CVE-2025-0087 EoP full PoC...
CVE-2019-1315
Windows Error Reporting Manager arbitrary file move Elevation of Privilege Details: https://offsec.almond.consulting/windows-error-reporting-arbitrary-file-move-eop.html You will need the NtApiDotNet library to run it, as well as a valid Report.wer file, both to be placed in the same directory as...
CVE-2022-21970
CVE-2022-21970 Description Microsoft Edge Chromium-based Elevation of Privilege Vulnerability. This vulnerability allows an attacker to execute javascript code on every host without permission, also an attacker can steal local system files, and also he can manipulate the actions against the machi...
CVE-2020-8290
CVE-2020-8290 – Elevación de Privilegios en Backblaze Resumen Nombre: Elevación de Privilegios en Backblaze CVE: CVE-2020-8290 Descubridor: Jason Geffner Vendedor: Backblaze Producto: Backblaze para Windows y Backblaze para macOS Riesgo: Alto Fecha de descubrimiento: 2020-03-13 Fecha de...
Microsoft-CVE-2021-1675
Microsoft-CVE-2021-1675 I have created a small C project that exploits vulnerability CVE-2021-1675. For more information about CVE-2021-1675, please check my blog post: https://thalpius.com/2021/07/16/windows-print-spooler-elevation-of-privilege-vulnerability-cve-2021-1675-explained Usage Microso...
CVE-2025-54110-Kernel-EoP-PoC
CVE-2025-54110-Kernel-EoP-PoC Implementación del PoC para CVE-2025-54110, una vulnerabilidad de desbordamiento de enteros a nivel de kernel en la llamada al sistema NtQueryDirectoryObject de Windows. CVE-2025-54110 - Análisis de desbordamiento de enteros en el kernel de Windows CVE:...
CVE-2022-30206
CVE-2022-30206 This is the PoC for CVE-2022-30206. Introduction Perform the following operations to arbitrary file deletion： 1. Run the addprinter.exe to create a printer and set the SpoolDirectory in C:\Users\Public\tmp\1. 2. Run the FileLock.exe TargetFile to redirect .SHD file to TargetFile an...