Lucene search
+L

49 matches found

Kitploit
Kitploit
added 2026/09/04 7:03 p.m.4 views

byeintegrity-uac

ByeIntegrity — Windows UAC Bypass ユーザーアカウント制御(UAC)をバイパスして昇格(管理者)特権を取得し、任意のプログラムを高整合性レベルで実行します。 必要条件 管理者アカウント UAC通知レベルがデフォルト以下に設定されていること 2021年アップデート...

5.6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/04 10:38 a.m.4 views

wanderer

Wanderer Wandererは、実行中のプロセスに関する情報を収集するオープンソースプログラムです。この情報には、整合性レベル、読み込まれたモジュールとしてのAMSIの有無、64ビットか32ビットかのアーキテクチャ、および現在のプロセスの特権レベルが含まれます。この情報は、プロセスインジェクションに最適な候補に合わせたペイロードを構築する際に非常に役立ちます。 このプロジェクトは、Offensive...

5.5AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/04 10:38 a.m.34 views

wanderer

Wanderer Wanderer is an open-source program that collects information about running processes. This information includes the integrity level, the presence of the AMSI as a loaded module, whether it is running as 64-bit or 32-bit as well as the privilege level of the current process. This...

5.8AI score
SaveExploits0
Kitploit
Kitploit
added 2026/08/30 11:52 p.m.7 views

CVE-2026-50416-writeup-and-poc

CVE-2026-50416:桌面堆中多出的一个 QWORD 在 Windows 11 Insider 版本 10.0.28020.2149 上,Win32k 桌面堆的用户模式映射在偏移量 0x100 处暴露了一个原始的内核会话池指针。 这次读取本身小得几乎有些可笑: root@kitploit: ULONG64 leaked = ULONG64 desktopheap + 0x100; 在我的测试会话中,该读取返回: root@kitploit: 0xffffc600dcc00040...

3.3CVSS4.5AI score0.00458EPSS
SaveExploits1
GoogleProjectZero
GoogleProjectZero
added 2026/02/26 12:00 a.m.14 views

A Deep Dive into the GetProcessHandleFromHwnd API

Posted by James Forshaw In my previous blog post I mentioned the GetProcessHandleFromHwnd API. This was an API I didn’t know existed until I found a publicly disclosed UAC bypass using the Quick Assist UI Access application. This API looked interesting so I thought I should take a closer look. I...

7.8CVSS8.4AI score0.11756EPSS
SaveExploits1
EUVD
EUVD
added 2025/10/07 12:30 a.m.9 views

EUVD-2017-3419

Malware in sbrugna...

4.5CVSS6.9AI score0.01165EPSS
SaveExploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.12 views

EUVD-2021-21697

Malware in sbrugna...

7.8CVSS7.7AI score0.00331EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.10 views

EUVD-2015-5121

Malware in sbrugna...

6.8CVSS6.1AI score0.04065EPSS
SaveExploits0References5
Microsoft KB
Microsoft KB
added 2022/03/08 8:00 a.m.163 views

March 8, 2022—KB5011560 (Security-only update)

None None...

9CVSS6.5AI score0.56376EPSS
SaveExploits0
Prion
Prion
added 2021/11/23 4:15 p.m.39 views

Design/Logic Flaw

A component in Kaspersky Password Manager could allow an attacker to elevate a process Integrity level from Medium to High...

4.6CVSS7.6AI score0.00331EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2021/11/23 3:30 p.m.85 views

CVE-2021-35052

Summary: CVE-2021-35052 concerns Kaspersky Password Manager. The connected ZDI advisory states the flaw exists in the Kaspersky Password Manager Service and arises from execution with unnecessary privileges, enabling local attackers to escalate from medium to high integrity by running code in the...

7.8CVSS7.5AI score0.00331EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2021/11/23 3:30 p.m.40 views

CVE-2021-35052

A component in Kaspersky Password Manager could allow an attacker to elevate a process Integrity level from Medium to High...

7.8AI score0.00331EPSS
SaveExploits0References2
Packet Storm
Packet Storm
added 2021/03/10 12:00 a.m.1498 views

Microsoft Windows Containers Privilege Escalation

Windows Containers: ContainerUser has Elevated Privileges Windows Containers: ContainerUser has Elevated Privileges Platform: Windows 10 20H2 not tested other versions Class: Elevation of Privilege Security Boundary: User Summary: The standard user ContainerUser in a Windows Container has elevate...

0.7AI score0.00858EPSS
SaveExploits2
OSV
OSV
added 2020/04/15 3:15 p.m.5 views

CVE-2020-0981

A security feature bypass vulnerability exists when Windows fails to properly handle token relationships.An attacker who successfully exploited the vulnerability could allow an application with a certain integrity level to execute code at a different integrity level, leading to a sandbox escape.T...

8.8CVSS7.4AI score0.01271EPSS
SaveExploits0References2
Prion
Prion
added 2020/04/15 3:15 p.m.23 views

Security feature bypass

A security feature bypass vulnerability exists when Windows fails to properly handle token relationships.An attacker who successfully exploited the vulnerability could allow an application with a certain integrity level to execute code at a different integrity level, leading to a sandbox escape.T...

4.6CVSS8.7AI score0.01271EPSS
SaveExploits0References2Affected Software2
Cvelist
Cvelist
added 2020/04/15 3:13 p.m.51 views

CVE-2020-0981

A security feature bypass vulnerability exists when Windows fails to properly handle token relationships.An attacker who successfully exploited the vulnerability could allow an application with a certain integrity level to execute code at a different integrity level, leading to a sandbox escape.T...

8.8AI score0.01271EPSS
SaveExploits0References2
Microsoft CVE
Microsoft CVE
added 2020/04/14 7:00 a.m.66 views

Windows Token Security Feature Bypass Vulnerability

A security feature bypass vulnerability exists when Windows fails to properly handle token relationships. An attacker who successfully exploited the vulnerability could allow an application with a certain integrity level to execute code at a different integrity level, leading to a sandbox escape...

8.8CVSS1.5AI score0.01271EPSS
SaveExploits0
canvas
canvas
added 2019/04/09 9:29 p.m.91 views

Immunity Canvas: ALPC_TAKEOVER_LPE

Name| alpctakeoverlpe ---|--- CVE| CVE-2019-0841 Exploit Pack| CANVAS Description| ALPC Takeover LPE Notes| CVE Name: CVE-2019-0841 NOTES: Works with Medium Integrity Level Tested: - Windows 10 1703 x64 - Windows 10 1709 x64 - Windows 10 1803 x86, x64 - Windows 10 1809 x86, x64 VENDOR: Microsoft...

7.2CVSS0.8AI score0.414EPSS
SaveExploits20
exploitpack
exploitpack
added 2019/03/25 12:00 a.m.43 views

VMware Workstation 14.1.5 VMware Player 15.0.2 - Host VMX Process Impersonation Hijack Privilege Escalation

VMware Workstation 14.1.5 VMware Player 15.0.2 - Host VMX Process Impersonation Hijack Privilege Escalation VMware: Host VMX Process Impersonation Hijack EoP Platform: VMware Workstation Windows v14.1.5 on Windows 10. Also tested VMware Player 15.0.2. Class: Elevation of Privilege Summary: The...

1.1AI score
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2018/12/11 8:00 a.m.46 views

Internet Explorer Remote Code Execution Vulnerability

A remote code execution vulnerability exists when the Internet Explorer VBScript execution policy does not properly restrict VBScript under specific conditions. An attacker who exploited the vulnerability could run arbitrary code with medium-integrity level privileges the permissions of the curre...

7.6CVSS2.7AI score0.44844EPSS
SaveExploits3
Rows per page
Query Builder