Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability

Missing authorization in Windows Modern Device Management MDM allows an authorized attacker to elevate privileges locally...

Windows Remote Desktop Services Elevation of Privilege Vulnerability

Use after free in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally...

Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability

Untrusted pointer dereference in Kernel Streaming WOW Thunk Service Driver allows an authorized attacker to elevate privileges locally...

Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability

Untrusted pointer dereference in Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to elevate privileges locally...

Windows Setup Files Cleanup Elevation of Privilege Vulnerability

Improper link resolution before file access 'link following' in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally...

CVE-2026-46300-Fragnesia---TryHackMe-Lab-Project

CVE-2026-46300-Fragnesia---TryHackMe-Proyecto de Laboratorio El proyecto documenta la finalización y el análisis del laboratorio Fragnesia CVE-2026-46300 de TryHackMe, que demuestra una vulnerabilidad de corrupción de la caché de páginas del kernel de Linux capaz de lograr una escalada local de...

CVE-2026-46242

CVE-2026-46242 poc y lpe completos Rango del Kernel Estado Notas 5.15.209 - 5.16 Afectado Commit introducido mediante backport 6.1.175 - 6.2 Afectado Commit introducido mediante backport 6.4 - 6.18.32 Afectado Bug introducido en el mainline 6.4 6.19 - 7.0.9 Afectado Incluye la última estable...

CVE-2026-41651

CVE-2026-41651 root@kitploit: CVSS 3.x : 7.8 HIGH CWE : CWE-367 Time-of-Check Time-of-Use Fix : PackageKit 1.3.5+ Affects : PackageKit 1.0.2 – 1.3.4 Local privilege escalation via TOCTOU race condition in PackageKit's D-Bus transaction handler. Any unprivileged local user can install arbitrary...

CVE-2026-31635-DirtyDecrypt

CVE-2026-31635 · DirtyDecrypt Escalada de privilegios local en Linux en la ruta de descifrado RxRPC/GSSAPI. Una comprobación faltante de skbcowdata en rxgkdecryptskb permite que un atacante local sin privilegios corrompa páginas de la caché de páginas y sobrescriba el contenido en memoria de...

CVE-2026-31431-Copy-Fail---Minified-LPE-PoC

CVE-2026-31431-CopyFail---Minified-LPE-PoC ⚠️ Disclaimer For Educational and Authorized Security Testing Purposes Only. This Proof-of-Concept PoC was synthesized for authorized Red Team emulation and vulnerability auditing. The authors and contributors assume no liability for the misuse of this...

CVE-2025-27591

Below - Local Privilege Escalation CVE-2025-27591 Below .log to any root-owned file like /etc/passwd. When below snapshot is executed with sudo, it forcibly sets mode 0666 on the log file and writes to it—even if it's a symlink. This allows injection of a root-privileged user without password,...

CVE-2026-38766

CVE-2026-38766 An issue in Unistal Systems Pvt. Ltd. Protegent 360 v2.0.0.4 allows a local attacker to escalate privileges via a kernel mode driver...

CVE-2024-37726-MSI-Center-Local-Privilege-Escalation

CVE-2024-37726 Escalada de Privilegios Local en MSI Center – Vulnerabilidad de Sobrescritura Arbitraria de Archivos Resumen de la Vulnerabilidad Se ha identificado una vulnerabilidad de escalada de privilegios local en sistemas Windows en versiones de MSI Center = 2.0.36.0, que permite a un usuar...

CVE-2026-46331

PACKETEDITMEME - CVE-2026-46331 net/sched actpedit partial-COW page-cache corruption culprit 899ee91156e5, present v5.18 .. fixed v7.1-rc7. packeteditmeme.c turns it into unprivileged local root: a userns CAPNETADMIN child overwrites the cached ELF metadata of a setuid-root binary with...

CVE-2025-27591-PoC

CVE-2025-27591-PoC CVE-2025-27591 PoC — Below Local Privilege Escalation This repository contains a Proof of Concept PoC demonstrating the local privilege escalation vulnerability identified as CVE-2025-27591 in Below , a Linux system observability tool. Made for...

CVE-2026-31431-EXPLOIT

CVE-2026-31431 - Copy Fail This vulnerability allows an unprivileged local attacker to gain root privileges on a vulnerable Linux system. ⚠️ DISCLAIMER This code is provided for educational and security research purposes only. It demonstrates a hypothetical vulnerability CVE-2026-31431 in the Linu...

CVE-2025-21333

CVE-2025-21333 Hyper-V NT Kernel Integration VSP vkrnlintvsp.sys Paged Pool heap overflow → Local Privilege Escalation LPE. This directory contains lab PoC source code based on MrAle98/CVE-2025-21333-POC, including a local patch. 1. Vulnerability Summary Item| Content ---|--- CVE| CVE-2025-21333...

CVE-2021-4034-pwnkit

CVE-2021-4034, PwnKit Proof of concept for PwnKit, a local privilege escalation in polkit's pkexec. On a default install any unprivileged local user can become root. About the bug Vulnerable versions of pkexec mishandle the process argument count. That lets controlled environment variables get...

CVE-2026-31431-CopyFail

root@kitploit: ██████╗ ██████╗ ██████╗ ██╗ ██╗ ███████╗ █████╗ ██╗██╗ ██╔════╝██╔═══██╗██╔══██╗╚██╗ ██╔╝ ██╔════╝██╔══██╗██║██║ ██║ ██║ ██║██████╔╝ ╚████╔╝ █████╗ ███████║██║██║ ██║ ██║ ██║██╔═══╝ ╚██╔╝ ██╔══╝ ██╔══██║██║██║ ╚██████╗╚██████╔╝██║ ██║ ██║ ██║ ██║██║███████╗ ╚═════╝ ╚═════╝ ╚═╝ ╚═╝...

CopyFail

Escalada de privilegios local / Escape de contenedor CVE-2026-31431 Uso: go build -ldflags="-s -w" -o CopyFail CVE-2026-31431.go ./CopyFail Versiones afectadas: Ubuntu 18.04, 20.04, 22.04, 24.04 Debian 11, 12, 13 RHEL 8, 9, 10 CentOS 8 Rocky Linux 8, 9, 10 AlmaLinux 8, 9, 10 Fedora 33-42 Alibaba...