293296 matches found
Microsoft Windows: CVE-2026-83692: Windows Bind Filter Driver Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally...
PT-2026-112737
Name of the Vulnerable Software and Affected Versions Windows Volume Manager Extension Driver affected versions not specified Description An out-of-bounds read in the Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally. An out-of-bounds read occurs...
Microsoft Windows: CVE-2026-85377: Windows CD-ROM Driver Elevation of Privilege Vulnerability
Access of resource using incompatible type 'type confusion' in Windows CD-ROM Driver allows an authorized attacker to elevate privileges locally...
CVE-2026-103555: Heap-based Buffer Overflow
Heap-based buffer overflow in Virtual Hard Disk VHD Miniport Driver allows an authorized attacker to elevate privileges locally...
CVE-2026-102220: Use After Free
Use after free in Windows VHD miniport driver allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-70274: Windows Bind Filter Driver Elevation of Privilege Vulnerability
Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-70299: Windows Bind Filter Driver Elevation of Privilege Vulnerability
Improper access control in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-85812: Windows Bind Filter Driver Information Disclosure Vulnerability
Files or directories accessible to external parties in Windows Bind Filter Driver allows an authorized attacker to disclose information locally...
Microsoft Windows: CVE-2026-69969: Windows AppX Deployment Service Information Disclosure Vulnerability
Improper link resolution before file access 'link following' in Windows AppX Deployment Service allows an authorized attacker to disclose information locally...
CVE-2023-43871-WBCE-Arbitrary-File-Upload--XSS---Media
WBCE File Upload XSS - WBCE v1.6.1 Author: Sergio Description: File upload vulnerability in WBCE v.1.6.1 allows a local attacker to upload a pdf file with hidden XSS. Attack Vectors: A vulnerability in Media file upload sanitation allows you to upload a PDF file with hidden XSS. POC: When logging...
CVE-2026-41091
🛡️ CVE-2026-41091 - RedSun Microsoft Defender Elevation of Privilege Vulnerability RedSun is a local privilege escalation LPE technique and associated PoC abusing a link-following vulnerability in Microsoft Defender's Malware Protection Engine. It allows a low-privileged authenticated attacker to...
CVE-2026-108941 Linketic CityGaussian Sidecar Parsing common.py parse_cfg_args code injection
A vulnerability was identified in Linketic CityGaussian up to 2.0. This affects the function parsecfgargs of the file internal/utils/common.py of the component Sidecar Parsing. The manipulation of the argument cfgargs leads to code injection. The attack can only be performed from a local...
CVE-2026-108941
The Linketic CityGaussian software (versions up to 2.0 ) contains a code injection vulnerability within the Sidecar Parsing component. Specifically, the parse_cfg_args function in the internal/utils/common.py file is susceptible to exploitation because the manipulation of the cfg_args argument al...
CVE-2026-108941 Linketic CityGaussian Sidecar Parsing common.py parse_cfg_args code injection
A vulnerability was identified in Linketic CityGaussian up to 2.0. This affects the function parsecfgargs of the file internal/utils/common.py of the component Sidecar Parsing. The manipulation of the argument cfgargs leads to code injection. The attack can only be performed from a local...
CVE-2021-4034
CVE-2021-4034 One day for the polkit privilege escalation exploit Just execute make, ./cve-2021-4034 and enjoy your root shell. The original advisory by the real authors is here PoC If the exploit is working you'll get a root shell immediately: vagrant@ubuntu-impish:/CVE-2021-4034$ make cc -Wall...
CVE-2026-49952
setup pip3 install Pillow torch torchvision run $ python3 exploit.py http://localhost/discuz5/ +----------------------------------------------------+ | Discuz! X5.0 Remote Code Execution Exploit by EgiX | +----------------------------------------------------+ + Getting authcode for DB export +...
CVE-2025-66516-POC
⚠️ READ DISCLAIMER BEFORE USE ⚠️ Educational/Authorized Testing Only | License | Security Policy About This POC This repository contains a proof-of-concept POC exploit for CVE-2025-66516 , an XML External Entity XXE injection vulnerability in Apache Tika versions prior to 3.2.2. The vulnerability...
CVE-2019-13272
CVE-2019-13272 PTRACETRACEME CVE-2019-13272 local privilege escalation vulnerability analysis PTRACETRACEME is a privilege escalation vulnerability in the Linux Kernel discovered by Jann Horn in July 2019. Vulnerability Analysis: Ptrace is a system call that provides a method allowing a process...