Lucene search
+L

49 matches found

Kitploit
Kitploit
added 2026/09/05 11:21 a.m.5 views

wanderer

Wanderer Wanderer — это программа с открытым исходным кодом, которая собирает информацию о запущенных процессах. Эта информация включает уровень целостности, наличие AMSI в качестве загруженного модуля, работает ли процесс как 64-битный или 32-битный, а также уровень привилегий текущего процесса...

5.5AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/04 7:03 p.m.4 views

byeintegrity-uac

ByeIntegrity — Обход UAC в Windows Обходите контроль учётных записей UAC для получения повышенных привилегий администратора и запуска любой программы на высоком уровне целостности. Требования Учётная запись администратора Уровень уведомлений UAC установлен на «По умолчанию» или ниже Обновление 20...

5.6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/04 10:38 a.m.35 views

wanderer

Wanderer Wanderer is an open-source program that collects information about running processes. This information includes the integrity level, the presence of the AMSI as a loaded module, whether it is running as 64-bit or 32-bit as well as the privilege level of the current process. This...

5.8AI score
SaveExploits0
Kitploit
Kitploit
added 2026/08/30 11:52 p.m.7 views

CVE-2026-50416-writeup-and-poc

CVE-2026-50416: Одно QWORD слишком много в desktop heap В Windows 11 Insider сборке 10.0.28020.2149 пользовательское отображение Win32k desktop heap раскрывало необработанный указатель на пул ядра сессии по смещению 0x100. Само чтение почти оскорбительно мало: root@kitploit: ULONG64 leaked =...

3.3CVSS4.5AI score0.00458EPSS
SaveExploits1
GoogleProjectZero
GoogleProjectZero
added 2026/02/26 12:00 a.m.14 views

A Deep Dive into the GetProcessHandleFromHwnd API

Posted by James Forshaw In my previous blog post I mentioned the GetProcessHandleFromHwnd API. This was an API I didn’t know existed until I found a publicly disclosed UAC bypass using the Quick Assist UI Access application. This API looked interesting so I thought I should take a closer look. I...

7.8CVSS8.4AI score0.11756EPSS
SaveExploits1
EUVD
EUVD
added 2025/10/07 12:30 a.m.9 views

EUVD-2017-3419

Malware in sbrugna...

4.5CVSS6.9AI score0.01165EPSS
SaveExploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.12 views

EUVD-2021-21697

Malware in sbrugna...

7.8CVSS7.7AI score0.00331EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.10 views

EUVD-2015-5121

Malware in sbrugna...

6.8CVSS6.1AI score0.04065EPSS
SaveExploits0References5
Microsoft KB
Microsoft KB
added 2022/03/08 8:00 a.m.163 views

March 8, 2022—KB5011560 (Security-only update)

None None...

9CVSS6.5AI score0.56376EPSS
SaveExploits0
Prion
Prion
added 2021/11/23 4:15 p.m.39 views

Design/Logic Flaw

A component in Kaspersky Password Manager could allow an attacker to elevate a process Integrity level from Medium to High...

4.6CVSS7.6AI score0.00331EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2021/11/23 3:30 p.m.85 views

CVE-2021-35052

Summary: CVE-2021-35052 concerns Kaspersky Password Manager. The connected ZDI advisory states the flaw exists in the Kaspersky Password Manager Service and arises from execution with unnecessary privileges, enabling local attackers to escalate from medium to high integrity by running code in the...

7.8CVSS7.5AI score0.00331EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2021/11/23 3:30 p.m.40 views

CVE-2021-35052

A component in Kaspersky Password Manager could allow an attacker to elevate a process Integrity level from Medium to High...

7.8AI score0.00331EPSS
SaveExploits0References2
Packet Storm
Packet Storm
added 2021/03/10 12:00 a.m.1498 views

Microsoft Windows Containers Privilege Escalation

Windows Containers: ContainerUser has Elevated Privileges Windows Containers: ContainerUser has Elevated Privileges Platform: Windows 10 20H2 not tested other versions Class: Elevation of Privilege Security Boundary: User Summary: The standard user ContainerUser in a Windows Container has elevate...

0.7AI score0.00858EPSS
SaveExploits2
OSV
OSV
added 2020/04/15 3:15 p.m.5 views

CVE-2020-0981

A security feature bypass vulnerability exists when Windows fails to properly handle token relationships.An attacker who successfully exploited the vulnerability could allow an application with a certain integrity level to execute code at a different integrity level, leading to a sandbox escape.T...

8.8CVSS7.4AI score0.01271EPSS
SaveExploits0References2
Prion
Prion
added 2020/04/15 3:15 p.m.23 views

Security feature bypass

A security feature bypass vulnerability exists when Windows fails to properly handle token relationships.An attacker who successfully exploited the vulnerability could allow an application with a certain integrity level to execute code at a different integrity level, leading to a sandbox escape.T...

4.6CVSS8.7AI score0.01271EPSS
SaveExploits0References2Affected Software2
Cvelist
Cvelist
added 2020/04/15 3:13 p.m.51 views

CVE-2020-0981

A security feature bypass vulnerability exists when Windows fails to properly handle token relationships.An attacker who successfully exploited the vulnerability could allow an application with a certain integrity level to execute code at a different integrity level, leading to a sandbox escape.T...

8.8AI score0.01271EPSS
SaveExploits0References2
Microsoft CVE
Microsoft CVE
added 2020/04/14 7:00 a.m.66 views

Windows Token Security Feature Bypass Vulnerability

A security feature bypass vulnerability exists when Windows fails to properly handle token relationships. An attacker who successfully exploited the vulnerability could allow an application with a certain integrity level to execute code at a different integrity level, leading to a sandbox escape...

8.8CVSS1.5AI score0.01271EPSS
SaveExploits0
canvas
canvas
added 2019/04/09 9:29 p.m.91 views

Immunity Canvas: ALPC_TAKEOVER_LPE

Name| alpctakeoverlpe ---|--- CVE| CVE-2019-0841 Exploit Pack| CANVAS Description| ALPC Takeover LPE Notes| CVE Name: CVE-2019-0841 NOTES: Works with Medium Integrity Level Tested: - Windows 10 1703 x64 - Windows 10 1709 x64 - Windows 10 1803 x86, x64 - Windows 10 1809 x86, x64 VENDOR: Microsoft...

7.2CVSS0.8AI score0.414EPSS
SaveExploits20
exploitpack
exploitpack
added 2019/03/25 12:00 a.m.43 views

VMware Workstation 14.1.5 VMware Player 15.0.2 - Host VMX Process Impersonation Hijack Privilege Escalation

VMware Workstation 14.1.5 VMware Player 15.0.2 - Host VMX Process Impersonation Hijack Privilege Escalation VMware: Host VMX Process Impersonation Hijack EoP Platform: VMware Workstation Windows v14.1.5 on Windows 10. Also tested VMware Player 15.0.2. Class: Elevation of Privilege Summary: The...

1.1AI score
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2018/12/11 8:00 a.m.46 views

Internet Explorer Remote Code Execution Vulnerability

A remote code execution vulnerability exists when the Internet Explorer VBScript execution policy does not properly restrict VBScript under specific conditions. An attacker who exploited the vulnerability could run arbitrary code with medium-integrity level privileges the permissions of the curre...

7.6CVSS2.7AI score0.44844EPSS
SaveExploits3
Rows per page
Query Builder