PrivescCheck

PrivescCheck Quickly identify common Windows vulnerabilities and configuration issues that are not necessarily covered by public security standards, and collect useful information for exploitation and post-exploitation tasks. !IMPORTANT A major aspect to be aware of when using this tool is that a...

CVE-2016-5195

CVE-2016-5195 gcc -pthread dirty.c -o dirty -lcrypt References https://github.com/FireFart/dirtycow/blob/master/dirty.c...

RottenPotato

This code is no longer maintained - for a newer implementation see https://github.com/breenmachine/RottenPotatoNG RottenPotato Local Privilege Escalation from Windows Service Accounts to SYSTEM For a technical overview of this exploit see our blog post at...

CVE-2021-3156-centos7

CVE-2021-3156-centos7 sudo का उपयोग करके विशेषाधिकार वृद्धि, केवल cnetos7 के लिए प्रभावित संस्करण: sudo: 1.8.2 - 1.8.31p2 sudo: 1.9.0 - 1.9.5p1 गैर-रूट उपयोगकर्ता के रूप में सिस्टम में लॉग इन करें और निम्नलिखित कमांड चलाएँ: sudoedit -s / प्रतिक्रिया 'not a regular file' होती है संभवतः यह भेद्यता...

PoC--CVE-2019-10149_Exim

PoC-CVE-2019-10149Exim طورت MNEMO-CERT PoC تسمح بتنفيذ أوامر بصلاحيات مرتفعة من خلال استغلال الثغرة CVE-2019-10149، التي تؤثر على إصدارات مختلفة من Exim 4.87 - 4.91. للاستغلال المحلي لهذه الثغرة، يجب تحديد الأمر المراد تنفيذه. من ناحية أخرى، بالنسبة للحالة عن بُعد، تم النظر فقط في السيناريو الذي ...

Astra Linux – Vulnerability in unbound

Before version 1.9.5, Unbound allowed an integer overflow in the regional allocator through the ALIGNUP macro. NOTE: The vendor denies that this is a vulnerability. Although the code may be vulnerable, an ongoing Unbound installation cannot be remotely or locally exploited...

Research-CVE-2016-5195

CVE-2016-5195 Dirty Cow Cow signifie copy-on-write copie à l'écriture, présente dans les noyaux Linux depuis 2007 et découverte en 2016. Comme je suis en train de faire un lab sur ce CVE, j'en profite pour écrire une analyse à son sujet. 1. Introduction Comme le noyau s'exécute avec les privilège...

PT-2026-93927

Name of the Vulnerable Software and Affected Versions GPAC version 26.08-DEV Description A use after free issue exists in the BIFS Handler component within the gf sg command del function located in the src/scenegraph/commands.c file. This flaw allows for local exploitation through specific...

EUVD-2026-79568

Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM component: Server Infrastructure. Supported versions that are affected are 17.0-26.7. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Siebel CRM Deployment executes to...

CVE-2026-58721

In multiple locations, there is a possible information disclosure due to uninitialized memory use. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-56889

In multiple locations, there is a possible permission bypass due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-58739

In platformmsghandlerinit of defaultmsghandlers.c, there is a possible confused deputy due to a confused deputy. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-58721

In multiple locations, there is a possible information disclosure due to uninitialized memory use. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-56988

In multiple functions of bluetoothcco.cc, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-56922

In CPM, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-56922

In CPM, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-56914

In multiple locations, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-55332

A possible out-of-bounds write exists in multiple locations due to improper input validation . This vulnerability could allow for local escalation of privilege requiring System execution privileges . Exploitation does not require user interaction. While the impact is significant, no specific affe...

CVE-2026-0194

In multiple locations, there is a possible permission bypass due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-0192

In Bootloader, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...