CVE-2019-0803

CVE-2019-0803 Win32k Elevation of Privilege Poc Screenshot 效果图 Reference steal Security token https://github.com/mwrlabs/CVE-2016-7255...

HTTPsys

A checker site for MS15-034 / CVE-2015-1635. Based on @rhcp011235's POC: https://ghostbin.com/paste/semkg Public site available at https://lab.xpaw.me/MS15-034/...

CVE-2021-43229

CVE-2021-43229 Walkthrough Public information Windows NTFS Elevation of Privilege Vulnerability Unique from: CVE-2021-43230 CVE-2021-43231 Patch: Dec 14, 2021 According to @AravGarg3 on Twitter, CVE-2021-43229 seems to be exploitable and related to an integer overflow. Source :...

CVE-2021-1732

CVE-2021-1732 CVE-2021-1732 Microsoft Windows 10 Local Privilege Elevation Vulnerability Research and Poc/Exploit Development Affected Systems and Application Versions Windows Server, version 20H2 Server Core Installation Windows 10 Version 20H2 for ARM64-based Systems Windows 10 Version 20H2 for...

CVE-2025-21293

CVE-2025-21293 CVE-2025-21293 is an elevation of privilege vulnerability in Active Directory Domain Services. It allows "Network Configuration Operators" to execute code with SYSTEM privileges via Windows Performance Counters. Affected Windows versions include Windows 10, 11, and Server. Microsof...

CVE-2025-54110-Kernel-EoP-PoC

CVE-2025-54110-Kernel-EoP-PoC PoC implementation for CVE-2025-54110 a Kernel-Level Integer Overflow Vulnerability in the Windows NtQueryDirectoryObject system call. CVE-2025-54110 - Windows Kernel Integer Overflow Analysis CVE: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-54110...

Kerberos-CVE-2026-27912

Kerberos-CVE-2026-27912 CVE-2026-27912 - Windows Kerberos Elevation of Privilege Vulnerability ResetNightmare - Unauthorized password reset via Kerberos Change Password protocol flaw. 📋 Details Field| Value ---|--- CVE| CVE-2026-27912 Title| Windows Kerberos Elevation of Privilege Vulnerability...

CVE-2026-110150

Privilege elevation in Installer in Google Chrome on on Windows prior to 155.0.8059.79 allowed a local attacker to obtain sensitive information via a local program. Chromium security severity: High...

Security Updates for Azure Connected Machine Agent < 1.68 (October 2026)

The Microsoft Azure Connected Machine Agent installation on the remote host is missing security updates. It is, therefore, affected by an elevation of privilege vulnerability: - Server-side request forgery ssrf in Azure Arc allows an authorized attacker to elevate privileges over a network...

CVE-2026-70179

Authentication bypass by spoofing in ASP.NET Core allows an authorized attacker to elevate privileges over a network...

CVE-2026-70175

Improper authentication in ASP.NET Core allows an unauthorized attacker to elevate privileges over a network...

EUVD-2026-101506

Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network...

CVE-2026-88164

A Missing Authorization vulnerability in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. This issue is associated with CWE-862 . While specific technical details regarding the affected component or root cause are not provided, the vulnerability has ...

CVE-2026-110150

A privilege elevation flaw was found in the Installer component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/561334760...

EUVD-2026-100637

Privilege elevation in Installer in Google Chrome on on Windows prior to 155.0.8059.79 allowed a local attacker to obtain sensitive information via a local program. Chromium security severity: High...

Linux Distros Unpatched Vulnerability : CVE-2026-70179

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Authentication bypass by spoofing in ASP.NET Core allows an authorized attacker to elevate privileges over a network. CVE-2026-70179 Note that Nessus relies on...

Linux Distros Unpatched Vulnerability : CVE-2026-110150

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Privilege elevation in Installer in Google Chrome on on Windows prior to 155.0.8059.79 allowed a local attacker to obtain sensitive information via a local...

Security Updates for Microsoft SharePoint Server Subscription Edition (October 2026)

The Microsoft SharePoint Server Subscription Edition installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Remote Code Execution via integer overflow in Microsoft Office SharePoint CVE-2026-88166 - Elevation of Privilege in SharePoi...

Security Updates for Microsoft Exchange Server (October 2026)

The Microsoft Exchange Server installed on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Exchange Server allows an unauthorized attacker to...

Linux Distros Unpatched Vulnerability : CVE-2026-70175

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper authentication in ASP.NET Core allows an unauthorized attacker to elevate privileges over a network. CVE-2026-70175 Note that Nessus relies on the...