CVE-2024-26229-exploit

CVE-2024-26229 LPE en Windows Este repositorio es una reescritura del código desde aquí, pero sin dependencias adicionales. PARCHEADO: 9 de abril de 2024...

Win-PortFwd

Win-PortFwd 使用原生 netsh 客户端设置 Windows 端口转发的 Powershell 脚本 安装： git clone https://github.com/deepzec/Win-PortFwd.git 用法： .\win-portfwd.ps1 或 powershell.exe -noprofile -executionpolicy bypass -file .\win-portfwd.ps1 示例： 注意：此脚本需要管理员权限才能运行，如果你在普通用户权限下运行，它会自动尝试提升权限。 作者：Deepu TV；欢迎通过 @twitter.com/DeepZec...

CVE-2021-1732

CVE-2021-1732 CVE-­2021­-1732 Microsoft Windows 10 本地提权漏 研究及Poc/Exploit开发 受影响系统及应用版本 Windows Server, version 20H2 Server Core Installation Windows 10 Version 20H2 for ARM64­based Systems Windows 10 Version 20H2 for 32­bit Systems Windows 10 Version 20H2 for x64­based Systems Windows Server, versi...

SdoKeyCrypt-sys-local-privilege-elevation

SdoKeyCrypt.sys - Vulnerabilidad de Elevación de Privilegios Local 1. ¿Qué es SdoKeyCrypt.sys? SdoKeyCrypt.sys es un controlador de protección de teclado para un MMORPG, también conocido como Massively-Multiplayer-Online-Role-Playing-Game, llamado MapleStory Online, publicado por Shanda Group en...

CVE-2020-3153

CVE-2020-3153 Código POC para CVE-2020-3153 - vulnerabilidad de path traversal en Cisco AnyConnect Lea más sobre la vulnerabilidad aquí: https://ssd-disclosure.com/ssd-advisory-cisco-anyconnect-privilege-elevation-through-path-traversal/ Pasos a seguir para obtener un shell de Windows en el...

CVE-2024-26229-lpe

CVE-2024-26229 CWE-781: Validación de direcciones incorrecta en IOCTL con código de control de E/S METHODNEITHER en el controlador csc.sys...

smm_usbrt_poc

UsbRt SMM Privilege Elevation 这是一个概念验证代码，演示了CVE-2017-5721漏洞的利用。该PoC会导致系统因发生机器检查异常而完全卡住。 您只需安装CHIPSEC Framework即可。如果您有Intel设备，别忘了在/etc/default/grub中添加GRUBCMDLINELINUXDEFAULT="quiet splash acpi=off"。 使用示例： root@kitploit: sudo python poc.py...

EUVD-2026-82598

Authentication bypass by spoofing in Microsoft Fabric allows an unauthorized attacker to elevate privileges over a network...

EUVD-2026-82585

Authentication bypass by spoofing in Microsoft Dataverse allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-69843

Authentication bypass by spoofing in Microsoft Fabric allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-77903

Authentication bypass by spoofing in Microsoft Dataverse allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-69865

Microsoft Container Registry is affected by an authorization bypass through user-controlled key , allowing an unauthorized attacker to elevate privileges over a network . The CVSS v3.1 base score is 10.0 (Critical) with a changed scope and high impact to both confidentiality and integrity, while ...

CVE-2025-24999

CVE-2025-24999 proof of concept for CVE-2025-24999 https://databasesecurityninja.wordpress.com/2026/04/02/microsoft-sql-server-privilege-elevation-through-msdatabasemanager-role-cve-2025-24999/...

CVE-2023-21768

CVE-2023-21768 OS information root@kitploit: OS 名称: Microsoft Windows 11 专业版 OS 版本: 10.0.22621 暂缺 Build 22621 LPE...

CVE-2020-1020-Exploit

CVE-2020-1020 Exploit de desbordamiento del grupo de fuentes Type1 para LPE SO compatible: Windows 7,8,8.1 x64...

Microsoft Edge (Chromium) < 151.0.4129.107 Multiple Vulnerabilities

The version of Microsoft Edge installed on the remote Windows host is prior to 151.0.4129.107. It is, therefore, affected by multiple vulnerabilities as referenced in the September 11, 2026 advisory. - Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft...

SQL Server Management Studio (September 2026)

The SQL Server Management Studio installation on the remote host is missing a security update. It is, therefore, affected by an other vulnerability: - Improper neutralization of special elements in output used by a downstream component 'injection' in SQL Server allows an unauthorized attacker to...

CVE-2026-87506

A flaw was found in Google Chrome's WebUI. A remote attacker, after compromising the renderer process, could exploit this vulnerability by tricking a user into visiting a specially crafted HTML page. This could lead to privilege elevation, allowing the attacker to execute arbitrary code outside o...

DEBIAN-CVE-2026-87506

Privilege elevation in WebUI in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87506

Privilege elevation in WebUI in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...