CVE-2022-42046

EvilWfshbr CVE-2022-42046 PoC повышения привилегий локально через wfshbr64.sys wfshbr64.sys и wfshbr32.sys специально сформированный payload позволяет любому пользователю выполнять побитовые операции с произвольным смещением и значениями флагов EPROCESS для намеренного повышения уровня защиты...

ntoskrnl-metadata

ntoskrnl-metadata Ein IDA-Python-Skript zum Extrahieren kritischer Kernel-Metadaten aus Windows-ntoskrnl.exe-Binärdateien. Dieses Tool extrahiert automatisch Funktions-RVAs und EPROCESS-Strukturoffsets, die für die Entwicklung von Exploits gegen CVE-2026-40369 und andere Kernel-Schwachstellen...

HITCON-2023-Demo-CVE-2023-20562

HITCON 2023 Demo CVE-2023-20562 Descrizione Questa dimostrazione si è svolta a HITCON 2023 a Taiwan. La demo evidenzia lo sfruttamento di AMDCpuProfiler.sys all'interno di AMD μProf. Attivando una scrittura arbitraria sul token EPROCESS, si ottiene l'escalation dei privilegi a livello SYSTEM. La...

forti_shield

fortishield Um POC combinado para CVE-2021-31955, CVE-2015-4077 e CVE-2015-5736 Esta uma das possíveis soluções para um extra mile na versão de 2022 do curso EXP-401. Este extra mile foi removido na versão de 2025 do curso. Esta solução não funcionará para o extra mile atual sem alterar os offset...

Tokenizer

Tokenizer Tokenizer è un progetto di driver in modalità kernel che consente la sostituzione del token di un processo in EPROCESS con un token di sistema, elevando efficacemente i privilegi del processo. Il driver è progettato per essere utilizzato con un'applicazione in modalità utente che invia ...

fox-foxone-exploit

markdown FoxFOXONE Driver Exploit Local privilege escalat...

CVE-2026-7063

A vulnerability was detected in code-projects Employee Management System 1.0. This vulnerability affects unknown code of the file /370project/process/eprocess.php of the component Endpoint. Performing a manipulation of the argument pwd results in sql injection. The attack is possible to be carrie...

CVE-2026-7063 code-projects Employee Management System Endpoint eprocess.php sql injection

A vulnerability was detected in code-projects Employee Management System 1.0. This vulnerability affects unknown code of the file /370project/process/eprocess.php of the component Endpoint. Performing a manipulation of the argument pwd results in sql injection. The attack is possible to be carrie...

CVE-2026-7063

A vulnerability was detected in code-projects Employee Management System 1.0. This vulnerability affects unknown code of the file /370project/process/eprocess.php of the component Endpoint. Performing a manipulation of the argument pwd results in sql injection. The attack is possible to be carrie...

EUVD-2026-25733

A vulnerability was detected in code-projects Employee Management System 1.0. This vulnerability affects unknown code of the file /370project/process/eprocess.php of the component Endpoint. Performing a manipulation of the argument pwd results in sql injection. The attack is possible to be carrie...

PT-2026-35270

A vulnerability was detected in code-projects Employee Management System 1.0. This vulnerability affects unknown code of the file /370project/process/eprocess.php of the component Endpoint. Performing a manipulation of the argument pwd results in sql injection. The attack is possible to be carrie...

CVE-2025-6957

A vulnerability was found in Campcodes Employee Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /process/eprocess.php. The manipulation of the argument mailuid leads to sql injection. The attack can be initiated remotely. The exploit ha...

CampCodes Employee Management System 注入漏洞

CampCodes Employee Management System is an employee management system from CampCodes Philippines. An injection vulnerability exists in CampCodes Employee Management System version 1.0, which is caused by an incorrect manipulation of the mailuid parameter in the file /process/eprocess.php, resulti...

Exploit for Integer Underflow (Wrap or Wraparound) in Microsoft

" CVE-2021-31956" WIP PoC code for CVE-2021-31956 in preparat...

Microsoft Windows 7 SP1 x86 - GDI Palette Objects Local Privilege Escalation (MS17-017) Exploit

Exploit for windows platform in category local exploits E-DB Note: + Source: https://github.com/sensepost/gdi-palettes-exp + Binary: https://github.com/offensive-security/exploit-database-bin-sploits/raw/master/sploits/42432.exe include include include include //From...

win2003/x64 - Token Stealing shellcode - 59 bytes

;token stealing shellcode Win 2003 x64 ;based on the widely available x86 version ;syntax for NASM ;Author: Csaba Fitzl, @theevilbit ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; ;important structures and offsets; ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; ;kd dt -r1 nt!TEB ; +0x110 SystemReserved1 : 54 Ptr64 Void...

Win2003 x64 - Token Stealing shellcode - 59 bytes

Win2003 x64 - Token Stealing shellcode - 59 bytes. Shellcode exploit for win64 platform ;token stealing shellcode Win 2003 x64 ;based on the widely available x86 version ;syntax for NASM ;Author: Csaba Fitzl, @theevilbit ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; ;important structures and offsets;...

Comodo Backup 4.4.0.0 - Null Pointer Dereference Privilege Escalation

Comodo Backup 4.4.0.0 - Null Pointer Dereference Privilege Escalation / Exploit Title - Comodo Backup Null Pointer Dereference Privilege Escalation Date - 23rd January 2015 Discovered by - Parvez Anwar @parvezghh Vendor Homepage - https://www.comodo.com Tested Version - 4.4.0.0 Driver Version -...

Comodo Backup 4.4.0.0 NULL Pointer Dereference

/ Exploit Title - Comodo Backup Null Pointer Dereference Privilege Escalation Date - 23rd January 2015 Discovered by - Parvez Anwar @parvezghh Vendor Homepage - https://www.comodo.com Tested Version - 4.4.0.0 Driver Version - 1.0.0.957 - bdisk.sys Tested on OS - 32bit Windows XP SP3 and Windows 7...

DriveCrypt <= 5.3 - Local Kernel ring0 SYSTEM Exploit

No description provided by source. / drivecrypt-dcr.c Copyright c 2009 by [email protected] DriveCrypt = 5.3 local kernel ring0 SYSTEM exploit by mu-b - Sun 16 Aug 2009 - Tested on: DCR.sys Compile: MinGW + -lntdll - Private Source Code -DO NOT DISTRIBUTE - http://www.digit-labs.org/ --...