Dell-Driver-EoP-CVE-2021-21551

Dell Driver EoP CVE-2021-21551 Exploit rápido para el error del driver de Dell CVE-2021-21551 por diversión. Gran hallazgo de @kasifdekel! El informe se puede encontrar aquí. Este exploit ha sido probado en Windows versiones 1809 y 20H2, los offsets de token pueden variar en otras versiones...

CVE-2025-0087-

CVE-2025-0087- CVE-2025-0087 EoP PoC completo...

CVE-2019-1315

Windows Error Reporting Manager arbitrary file move Elevation of Privilege Details: https://offsec.almond.consulting/windows-error-reporting-arbitrary-file-move-eop.html You will need the NtApiDotNet library to run it, as well as a valid Report.wer file, both to be placed in the same directory as...

CVE-2022-21970

CVE-2022-21970 Description Microsoft Edge Chromium-based Elevation of Privilege Vulnerability. This vulnerability allows an attacker to execute javascript code on every host without permission, also an attacker can steal local system files, and also he can manipulate the actions against the machi...

CVE-2020-8290

CVE-2020-8290 – Elevación de Privilegios en Backblaze Resumen Nombre: Elevación de Privilegios en Backblaze CVE: CVE-2020-8290 Descubridor: Jason Geffner Vendedor: Backblaze Producto: Backblaze para Windows y Backblaze para macOS Riesgo: Alto Fecha de descubrimiento: 2020-03-13 Fecha de...

Microsoft-CVE-2021-1675

Microsoft-CVE-2021-1675 I have created a small C project that exploits vulnerability CVE-2021-1675. For more information about CVE-2021-1675, please check my blog post: https://thalpius.com/2021/07/16/windows-print-spooler-elevation-of-privilege-vulnerability-cve-2021-1675-explained Usage Microso...

CVE-2025-54110-Kernel-EoP-PoC

CVE-2025-54110-Kernel-EoP-PoC Implementación del PoC para CVE-2025-54110, una vulnerabilidad de desbordamiento de enteros a nivel de kernel en la llamada al sistema NtQueryDirectoryObject de Windows. CVE-2025-54110 - Análisis de desbordamiento de enteros en el kernel de Windows CVE:...

CVE-2022-30206

CVE-2022-30206 This is the PoC for CVE-2022-30206. Introduction Perform the following operations to arbitrary file deletion： 1. Run the addprinter.exe to create a printer and set the SpoolDirectory in C:\Users\Public\tmp\1. 2. Run the FileLock.exe TargetFile to redirect .SHD file to TargetFile an...

CrackKeyIso

CVE 2023 28229 Windows CNG KeyIso RPC EoP/SBX Discovered by: @k0shl - @Y3A Educational purposes only!...

Windows-EoP

To open some windows local EoP bugs...

CVE-2023-21768-AFD-for-WinSock-EoP-exploit

CVE-2023-21768-AFD-for-WinSock-EoP-exploit Analysis articles here: https://mp.weixin.qq.com/s/9W9puJltbK-xto2A1duqgQ https://www.zoemurmure.top/posts/cve202321768/ Written by myself based on Patch Tuesday - Exploit Wednesday: Pwning Windows Ancillary Function Driver for WinSock afd.sys in 24 Hour...

CVE-2022-45988

CVE-2022-45988 StarSoftComm HP CooCare - Existe una vulnerabilidad de elevación de privilegios He contactado con hp-security-alert. Han corregido este error. Acerca de StarSoftComm CooCare HP-PSRT-IR 4106 El proveedor respondió con la siguiente información: Siga estos pasos para actualizar: 1...

CVE-2023-23397-POC

CVE-2023-23397-POC Exploit POC for CVE-2023-23397 Appointment.cs : the modified file from https://github.com/Sicos1977/MsgKit/blob/master/MsgKit/Appointment.cs Exploit.cs : the code i used to replicate creating the malicious appointment . i modified the code picture in MDSEC article here :...

Microsoft Security Advisory CVE-2026-69439 – .NET and Visual Studio Elevation of Privilege Vulnerability

Microsoft Security Advisory CVE-2026-69439 – .NET and Visual Studio Elevation of Privilege Vulnerability Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft.DiaSymReader.Native. This advisory also provides guidance on what...

CVE-2022-26923

CVE-2022-26923 As described by Tenable: Active Directory Domain Services Elevation of Privilege Vulnerability CVSS v3 Base score: 8.8 Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Severity: High Summary: CVE-2022-26923 exploits a vulnerability in Microsoft Active Directory Certificate...

CVE-2021-43229

Explicación de CVE-2021-43229 Información pública Vulnerabilidad de elevación de privilegios de Windows NTFS Distinto de: CVE-2021-43230 CVE-2021-43231 Parche: 14 de diciembre de 2021 Según @AravGarg3 en Twitter, CVE-2021-43229 parece ser explotable y estar relacionado con un desbordamiento de...

CVE-2022-21882

CVE-2022-21882 Win32k Elevation Of Privileges Techniques inspired from: https://github.com/L4ys/CVE-2022-21882 https://github.com/exploitblizzard/Windows-Privilege-Escalation-CVE-2021-1732...

CVE-2019-1253

CVE-2019-1253 AppXSvc Arbitrary File Security Descriptor Overwrite EoP I have independently reported this vulnerability to MSRC, however, my submission turned out to be a duplicate due to the fact that the fix for CVE-2019-1253 also addressed this issue. My PoC differs from the ones created by...

HTTPsys

A checker site for MS15-034 / CVE-2015-1635. Based on @rhcp011235's POC: https://ghostbin.com/paste/semkg Public site available at https://lab.xpaw.me/MS15-034/...

CVE-2023-21739

CVE-2023-21739 Windows Bluetooth Driver Elevation of Privilege Vulnerability. authentication| complexity| vector ---|---|--- not available| not available| not available confidentiality| integrity| availability ---|---|--- not available| not available| not available CVSS Score: not available...