dazzleUP

dazzleUP A tool that detects the privilege escalation vulnerabilities caused by misconfigurations and missing updates in the Windows operating systems. dazzleUP detects the following vulnerabilities. Exploit Checks The first feature of dazzleUP is that it uses Windows Update Agent API instead of...

UsoDllLoader

UsoDllLoader ⚠️ 2020-06-06 Update: this trick no longer works on the latest builds of Windows 10 Insider Preview. This means that, although it still works on the mainstream version of Windows 10 , you should expect it to be patched in the coming months. Description This PoC shows a technique that...

Vulmap

Vulmap is an open-source online local vulnerability scanner project. It consists of online local vulnerability scanning programs for Windows and Linux operating systems. These scripts can be used for defensive and offensive purposes. It is possible to make vulnerability assessments using these...

Sherlock

Deprecated. Have a look at Watson instead. Sherlock PowerShell script to quickly find missing software patches for local privilege escalation vulnerabilities. Currently looks for: MS10-015 : User Mode to Ring KiTrap0D MS10-092 : Task Scheduler MS13-053 : NTUserMessageCall Win32k Kernel Pool...

CVE-2026-123064

The WP BASE Booking of Appointments, Services and Events WordPress plugin (versions before 6.5.1 ) contains a privilege escalation vulnerability. The flaw exists because the plugin fails to properly restrict access to a specific user-creation action . This allows authenticated users with Subscrib...

CVE-2026-121875

The Post Duplicator WordPress plugin (versions prior to 3.0.18 ) is vulnerable to a privilege escalation flaw. The root cause is a failure to validate capabilities assigned to roles within the plugin's permissions settings. Specifically, a site administrator on a multisite network who lacks Super...

CVE-2026-121874

The Post Duplicator WordPress plugin versions before 3.0.18 is vulnerable to an arbitrary option update due to an unvalidated option name. This flaw allows a site administrator on a multisite network who is not a Super Admin to overwrite arbitrary site options. By manipulating these options, spec...

Windows Update Orchestrator Service Privilege Escalation

The vulnerability of the Windows Update Orchestrator Service on Windows operating systems is related to the improper handling of symbolic links before accessing the file. Exploiting this vulnerability can allow an attacker to elevate their privileges to the SYSTEM level...

DesktopServicesHelper Privilege Escalation

The vulnerability of DesktopServicesHelper in macOS operating systems is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to gain increased privileges...

Windows Update Orchestrator Service Privilege Escalation

The vulnerability of the Windows Update Orchestrator Service on Windows operating systems is related to incorrect handling of symbolic links before accessing the file. Exploiting this vulnerability can allow an attacker to elevate their privileges to the SYSTEM level and gain unauthorized access ...

Tekon SCADA Privilege Escalation

The vulnerability of the “Tekon” SCADA system is related to the incorrect assignment of permissions for critical resources. Exploiting this vulnerability could allow a malicious actor to increase their privileges remotely...

TrueConf Server Authentication Privilege Escalation

The vulnerability of the TrueConf Server software is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor, operating remotely, to obtain an administrator-level token...

Windows kernel Code Execution

The vulnerability of the Windows operating system’s kernel is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code or enhance their privileges...

NTFS Privilege Escalation

The vulnerability of the NTFS file system in Windows operating systems relates to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow a remote attacker to increase their privileges...

FOQUZ Platform Privilege Escalation

The vulnerability of the FOQUZ platform is related to an incorrect session duration. Exploiting this vulnerability can allow a remote attacker to increase their privileges and gain unauthorized access to protected information...

Kerberos Privilege Escalation

The vulnerability of the Kerberos protocol for Windows operating systems is related to errors in the mechanism for handling relative pathnames to the directory. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...

ThrottleBlood.sys RCE

The vulnerability of the MmMapIoSpace function in the ThrottleBlood.sys driver, as part of the ThrottleStop utility, is related to open IOCTLs with insufficient access control. Exploiting this vulnerability could allow an attacker to enhance their privileges, execute arbitrary code, or cause...

Qlik Sense Enterprise - HTTP Request Smuggling

An HTTP Request Tunneling vulnerability found in Qlik Sense Enterprise for Windows for versions May 2023 Patch 3 and earlier, February 2023 Patch 7 and earlier, November 2022 Patch 10 and earlier, and August 2022 Patch 12 and earlier allows a remote attacker to elevate their privilege by tunnelin...

Rank Math SEO <= 1.0.40.2 - Privilege Escalation via Unprotected REST API Endpoint

The Rank Math plugin through 1.0.40.2 for WordPress allows unauthenticated remote attackers to update arbitrary WordPress metadata, including the ability to escalate or revoke administrative privileges for existing users via the unsecured rankmath/v1/updateMeta REST API endpoint. id: CVE-2020-115...

Gogs 0.5.5 - 0.12.2 - Remote Code Execution

Gogs 0.5.5 through 0.12.2 is susceptible to authenticated remote code execution via the git hooks functionality. There can be a privilege escalation if access to this feature is granted to a user who does not have administrative privileges. NOTE: Since this is mentioned in the documentation but n...