concealed_position

Posición Oculta Posición Oculta es un ataque de escalada de privilegios locales contra Windows que utiliza el concepto de "Trae tu propia vulnerabilidad". Específicamente, Posición Oculta CP utiliza la lógica tal como fue diseñada de paquete punto e impresión en Windows que permite a un usuario c...

CVE-2025-32462-Exploit

CVE-2025-32462-Exploit: Matrix-Sudo Escape Hostname Spoofing Privilege Escalation CVE-2025-32462 "You take the blue pill... the story ends. You take the red pill... you get root." Description This exploit demonstrates a privilege escalation vulnerability in sudo CVE-2025-32462 where hostname-base...

CVE-2023-2640-32629

Ubuntu Privilege Escalation: CVE-2023-2640 and CVE-2023-32629 This is a local privilege escalation vulnerability affecting certain Ubuntu kernels. It allows unprivileged users to set privileged extended attributes on mounted files, bypassing security checks and potentially gaining elevated...

cve-2025-32463

CVE-2025-32463-sudo-chwoot PoC for CVE-2025-32463 - Sudo chroot Elevation of Privilege Vulnerability Original PoC sudo-chwoot.sh CTF Demo chwoot-demo.c Docs Write-up: https://www.stratascale.com/vulnerability-alert-CVE-2025-32463-sudo-chroot Advisory:...

CVE-Writeups

CVE-Writeups Security vulnerability research writeups. CVE-2026-50402: Windows NTFS Elevation of Privilege CVSS 7.8...

cve-2024-32019-PoC

CVE-2024-32019 — ndsudo di Netdata: Escalation dei Privilegi Locali Riepilogo L’helper ndsudo di Netdata installato con setuid root limita i comandi che può eseguire, ma risolve questi comandi usando ilPATH del chiamante. Nelle versioni vulnerabili, un utente locale può posizionare un binario...

CVE-2025-27519

Exploit di elevazione dei privilegi di Below CVE-2025-27519 Questo repository contiene uno script Bash proof-of-concept PoC per sfruttare la vulnerabilità di elevazione dei privilegi di Below CVE-2025-27519 su sistemi Linux. L'exploit consente a un utente locale di elevare i propri privilegi a ro...

NoFilter

NoFilter Tool zum Missbrauch der Windows-Filterplattform zur Rechteausweitung. Es kann eine neue Konsole als "NT AUTHORITY\SYSTEM" oder als einen anderen Benutzer starten, der an der Maschine angemeldet ist. Verwendung root@kitploit: Usage: NoFilter.exe -s SESSIONID Danksagungen Ron Ben Yizhak...

CVE-2019-0708-Exploit

CVE-2019-0708-Exploit Verwendung von CVE-2019-0708 zur lokalen Privilegienausweitung im Windows 10 System...

CVE-2022-1015

CVE-2022-1015 Questo repository contiene un PoC per l'escalation locale dei privilegi di CVE-2022-1015, un bug nel componente nftables del kernel Linux che ho trovato. Puoi leggere un'analisi dettagliata di questa vulnerabilità e della strategia di sfruttamento sul mio blog. Al momento, l'exploit...

COPY-FAIL-CVE-2026-31431

Este é um Proof-of-Concept PoC público para CVE-2026-31431 "Copy Fail", uma vulnerabilidade de escalonamento local de privilégios no kernel Linux CVSS 7.8 que afeta a maioria das principais distribuições desde 2017. Ele corrompe o cache de páginas de um binário setuid como /usr/bin/su usando a AP...

Windows-Local-Privilege-Escalation-Cookbook

Windows Local Privilege Escalation Cookbook Indice Windows Local Privilege Escalation Cookbook Indice Disclaimer Descrizione Keynote Definizione Strumenti utili Vulnerabilità Riferimenti Disclaimer Questo repository, "Windows Local Privilege Escalation Cookbook", è destinato esclusivamente a scop...

CVE-2021-4034

CVE-2021-4034 Un semplice PoC per CVE-2021-4034 - Escalation dei privilegi locale binario SUID pkexec La vulnerabilità è spiegata nell'advisory qui...

CVE-2025-32462-POC

CVE-2025-32462 – PoC de Escalação de Privilégios via sudo -h 🚨 Exploit local de escalação de privilégios para sudo através do argumento -h/--host Afeta sistemas com configurações incorretas de sudo que permitem acesso root não intencional. 🧠 Sobre Este PoC demonstra CVE-2025-32462 , uma falha...

CVE-2025-68921

CVE-2025-68921 In Nahimic, einer auf vielen Gaming-Laptops vorinstallierten Audioverbesserungssoftware, existiert eine lokale Schwachstelle zur Rechteausweitung. Das Problem ermöglicht es einem Benutzer mit niedrigen Rechten, seine Rechte auf NT AUTHORITY\SYSTEM auszuweiten. Diese Schwachstelle...

CVE-2022-37706

CVE-2022-37706 Exploit: escalation dei privilegi in Enlightenment v0.25.3 Descrizione Questa repository contiene un exploit per CVE-2022-37706 , una vulnerabilità di escalation locale dei privilegi in Enlightenment v0.25.3 e versioni precedenti. La vulnerabilità è dovuta alla gestione impropria d...

kernel: net: openvswitch: reject oversized nested action attrs

A flaw was found in Open vSwitch in the Linux kernel. Improper handling of oversized nested action attributes can lead to a truncated length field, which could be exploited by a local attacker to alter kernel memory. This alteration might result in the disclosure of sensitive information or a loc...

CVE-2026-20467

In apusys, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: AUTO00837766; Issue ID: MSV-6767...

CVE-2026-20495

In Bluetooth driver, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00488300; Issue ID: MSV-7296...

CVE-2026-20469

CVE-2026-20469 affects the trusted_mem path where improper input validation can lead to local privilege escalation if an attacker already has System privileges. Exploitation requires user interaction per the description. Patch AUTO00834868 (MSV-6533) is referenced as the remedy.