6540 matches found
Win-PortFwd
Win-PortFwd 使用原生 netsh 客户端设置 Windows 端口转发的 Powershell 脚本 安装： git clone https://github.com/deepzec/Win-PortFwd.git 用法： .\win-portfwd.ps1 或 powershell.exe -noprofile -executionpolicy bypass -file .\win-portfwd.ps1 示例： 注意：此脚本需要管理员权限才能运行，如果你在普通用户权限下运行，它会自动尝试提升权限。 作者：Deepu TV；欢迎通过 @twitter.com/DeepZec...
CVE-2020-3153
CVE-2020-3153 Código POC para CVE-2020-3153 - vulnerabilidad de path traversal en Cisco AnyConnect Lea más sobre la vulnerabilidad aquí: https://ssd-disclosure.com/ssd-advisory-cisco-anyconnect-privilege-elevation-through-path-traversal/ Pasos a seguir para obtener un shell de Windows en el...
CVE-2026-73596
Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, contains an Initialization of a Resource with an Insecure Default vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges, Informatio...
EUVD-2026-88749
Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, contains an Incorrect Permission Assignment for Critical Resource vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges...
The vulnerability of the FOQUZ platform, related to the incorrect expiration time of sessions, allows attackers to elevate their privileges and gain unauthorized access to protected information.
The vulnerability of the FOQUZ platform is related to an incorrect session duration. Exploiting this vulnerability can allow a remote attacker to increase their privileges and gain unauthorized access to protected information...
SdoKeyCrypt-sys-local-privilege-elevation
SdoKeyCrypt.sys - Vulnerabilidad de Elevación de Privilegios Local 1. ¿Qué es SdoKeyCrypt.sys? SdoKeyCrypt.sys es un controlador de protección de teclado para un MMORPG, también conocido como Massively-Multiplayer-Online-Role-Playing-Game, llamado MapleStory Online, publicado por Shanda Group en...
CVE-2021-1732
CVE-2021-1732 CVE-2021-1732 Microsoft Windows 10 本地提权漏 研究及Poc/Exploit开发 受影响系统及应用版本 Windows Server, version 20H2 Server Core Installation Windows 10 Version 20H2 for ARM64based Systems Windows 10 Version 20H2 for 32bit Systems Windows 10 Version 20H2 for x64based Systems Windows Server, versi...
CVE-2023-21768
CVE-2023-21768 OS information OS 名称: Microsoft Windows 11 专业版 OS 版本: 10.0.22621 暂缺 Build 22621 LPE...
CVE-2024-26229-exploit
CVE-2024-26229 Windows LPE This repository is a rewrite of the code from here, but without additional dependencies. PATCHED: Apr 9, 2024...
smm_usbrt_poc
UsbRt SMM Privilege Elevation 这是一个概念验证代码，演示了CVE-2017-5721漏洞的利用。该PoC会导致系统因发生机器检查异常而完全卡住。 您只需安装CHIPSEC Framework即可。如果您有Intel设备，别忘了在/etc/default/grub中添加GRUBCMDLINELINUXDEFAULT="quiet splash acpi=off"。 使用示例： sudo python poc.py...
CVE-2024-26229-lpe
CVE-2024-26229 CWE-781: Validación de direcciones incorrecta en IOCTL con código de control de E/S METHODNEITHER en el controlador csc.sys...
CVE-2020-1020-Exploit
CVE-2020-1020 Exploit de desbordamiento del grupo de fuentes Type1 para LPE SO compatible: Windows 7,8,8.1 x64...
CVE-2025-24999
CVE-2025-24999 prueba de concepto para CVE-2025-24999 https://databasesecurityninja.wordpress.com/2026/04/02/microsoft-sql-server-privilege-elevation-through-msdatabasemanager-role-cve-2025-24999/...
CVE-2026-66075
RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.1, isauthorized/2 for the /federation-links/.../restart route uses isauthorizedmonitor accepts the monitoring tag, while allowedmethods permits DELETE and deleteresource/2 triggers...
EUVD-2026-85309
Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, contains an Insufficient Session Expiration vulnerability. A low privileged attacker with adjacent network access could potentially exploit this vulnerability, leading to Elevation of privileges, Protection mechanism...
CVE-2026-71177
Dell Secure Connect Gateway (SCG) Policy Manager , versions prior to 5.34.00.16 , is vulnerable to an Improper Restriction of Rendered UI Layers or Frames vulnerability. A low privileged attacker with remote access could exploit this flaw to achieve Elevation of privileges and Session theft . Rem...
CVE-2026-73586: Insufficient Session Expiration
Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, contains an Insufficient Session Expiration vulnerability. A low privileged attacker with adjacent network access could potentially exploit this vulnerability, leading to Elevation of privileges, Protection mechanism...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: xorg-x11-server (UTSA-2023-000014)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-000014 advisory. A vulnerability was found in X.Org. This security flaw occurs because the XkbCopyNames function left a dangling pointer to freed memory, resulting in out-of-bounds...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: xorg-x11-server (UTSA-2023-000009)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-000009 advisory. A vulnerability was found in X.Org. This security flaw occurs because the handler for the XIChangeProperty request has a length-validation issues, resulting in...