PrivescCheck

PrivescCheck Quickly identify common Windows vulnerabilities and configuration issues that are not necessarily covered by public security standards, and collect useful information for exploitation and post-exploitation tasks. !IMPORTANT A major aspect to be aware of when using this tool is that a...

RottenPotato

This code is no longer maintained - for a newer implementation see https://github.com/breenmachine/RottenPotatoNG RottenPotato Local Privilege Escalation from Windows Service Accounts to SYSTEM For a technical overview of this exploit see our blog post at...

CVE-2016-5195

CVE-2016-5195 gcc -pthread dirty.c -o dirty -lcrypt 参考リンク https://github.com/FireFart/dirtycow/blob/master/dirty.c...

CVE-2021-3156-centos7

CVE-2021-3156-centos7 sudoを利用した権限昇格、cnetos7のみ対象 影響を受けるバージョン： sudo: 1.8.2 - 1.8.31p2 sudo: 1.9.0 - 1.9.5p1 非rootユーザーでシステムにログインし、次のコマンドを実行します： sudoedit -s / not a regular file と表示される おそらくこの脆弱性が存在します 使用方法： まず非rootユーザーでログインし、/etc/passwd内のすべての内容をCVE-2021-3156.pyのAPPENDCONTENT = b"""\n""";...

PoC--CVE-2019-10149_Exim

PoC-CVE-2019-10149Exim MNEMO-CERTは、Eximの複数のバージョン（4.87～4.91）に影響を与える脆弱性CVE-2019-10149を悪用して、昇格した権限でコマンドを実行できるPoCを開発しました。 この脆弱性をローカルで悪用するには、実行するコマンドを定義する必要があります。一方、リモートの場合は、EximがACL "verify= recipient" を使用しないシナリオのみが考慮されており、この場合、コマンドに加えてサービスのIPアドレスとポートを指定する必要があります。...

Research-CVE-2016-5195

CVE-2016-5195Dirty Cow Cow は copy-on-write で、2007年から Linux Kernel に存在し、2016年に発見されました。ちょうどこのCVEに関連するラボに取り組んでいるので、ついでに分析記事を書きます。 1. はじめに カーネルは root 権限で動作するため、このCVEは権限昇格の脆弱性として悪用される可能性があります。つまり、攻撃者は低権限ユーザーから Race condition（競合状態） を悪用して root 権限を取得できるということです。 2. では、Race condition（競合状態）とは何か？...

EUVD-2026-79568

Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM component: Server Infrastructure. Supported versions that are affected are 17.0-26.7. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Siebel CRM Deployment executes to...

CVE-2026-58721

In multiple locations, there is a possible information disclosure due to uninitialized memory use. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-56889

In multiple locations, there is a possible permission bypass due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-58739

In platformmsghandlerinit of defaultmsghandlers.c, there is a possible confused deputy due to a confused deputy. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-58721

In multiple locations, there is a possible information disclosure due to uninitialized memory use. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-56988

In multiple functions of bluetoothcco.cc, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-56922

In CPM, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-56922

In CPM, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-56914

In multiple locations, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-55332

In multiple locations, there is a possible out-of-bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-0194

In multiple locations, there is a possible permission bypass due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-0192

In Bootloader, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-0183

In CPM, there is a possible information disclosure due to a confused deputy. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-0177

In dosssaesgcm256op of crypto-aes.c, there is a possible out-of-bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation...