5444 matches found
smm_usbrt_poc
UsbRt SMM Privilege Elevation This is a Proof-of-Concept code that demonstrates the exploitation of the CVE-2017-5721 vulnerability. This PoC causes a system to be completely stuck because of Machine Check Exception occurred. All you need is CHIPSEC Framework installed. And don't forget to put...
SdoKeyCrypt-sys-local-privilege-elevation
SdoKeyCrypt.sys - Local Privilege Elevation Vulnerability 1. What is SdoKeyCrypt.sys? SdoKeyCrypt.sys is a keyboard protection driver for a MMORPG, aka Massively-Multiplayer-Online-Role-Playing-Game, called MapleStory Online which is published by Shanda Group in China. The game's official website...
Win-PortFwd
Win-PortFwd Powershell script to setup windows port forwarding using native netsh client Install: git clone https://github.com/deepzec/Win-PortFwd.git Usage: .\win-portfwd.ps1 or powershell.exe -noprofile -executionpolicy bypass -file .\win-portfwd.ps1 Example : Note: This script require admin...
CVE-2025-24999
CVE-2025-24999 prueba de concepto para CVE-2025-24999 https://databasesecurityninja.wordpress.com/2026/04/02/microsoft-sql-server-privilege-elevation-through-msdatabasemanager-role-cve-2025-24999/...
CVE-2021-1732
CVE-2021-1732 CVE-2021-1732 Microsoft Windows 10 Local Privilege Elevation Vulnerability Research and Poc/Exploit Development Affected Systems and Application Versions Windows Server, version 20H2 Server Core Installation Windows 10 Version 20H2 for ARM64-based Systems Windows 10 Version 20H2 for...
CVE-2024-26229-exploit
CVE-2024-26229 Windows LPE This repository is a rewrite of the code from here, but without additional dependencies. PATCHED: Apr 9, 2024...
CVE-2024-26229-lpe
CVE-2024-26229 CWE-781: Improper Address Validation in IOCTL with METHODNEITHER I/O Control Code in the csc.sys driver...
CVE-2020-3153
CVE-2020-3153 POC code for CVE-2020-3153 - Cisco anyconnect path traversal vulnerability Read more about the vulnerability here: https://ssd-disclosure.com/ssd-advisory-cisco-anyconnect-privilege-elevation-through-path-traversal/ Steps to follow to get Windows shell on desktop with SYSTEM...
EUVD-2026-85309
Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, contains an Insufficient Session Expiration vulnerability. A low privileged attacker with adjacent network access could potentially exploit this vulnerability, leading to Elevation of privileges, Protection mechanism...
CVE-2026-71177
Dell Secure Connect Gateway (SCG) Policy Manager , versions prior to 5.34.00.16 , is vulnerable to an Improper Restriction of Rendered UI Layers or Frames vulnerability. A low privileged attacker with remote access could exploit this flaw to achieve Elevation of privileges and Session theft . Rem...
CVE-2023-21768
CVE-2023-21768 OS information root@kitploit: OS 名称: Microsoft Windows 11 专业版 OS 版本: 10.0.22621 暂缺 Build 22621 LPE...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: xorg-x11-server (UTSA-2023-000014)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-000014 advisory. A vulnerability was found in X.Org. This security flaw occurs because the XkbCopyNames function left a dangling pointer to freed memory, resulting in out-of-bounds...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: xorg-x11-server (UTSA-2023-000009)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-000009 advisory. A vulnerability was found in X.Org. This security flaw occurs because the handler for the XIChangeProperty request has a length-validation issues, resulting in...
CVE-2020-1020-Exploit
CVE-2020-1020 Type1 Font Pool Overflow LPE Exploit Supported OS : Windows 7,8,8.1 x64...
EUVD-2026-82596
Insufficient verification of data authenticity in Azure Billing allows an unauthorized attacker to elevate privileges over a network...
EUVD-2026-82598
Authentication bypass by spoofing in Microsoft Fabric allows an unauthorized attacker to elevate privileges over a network...
EUVD-2026-82585
Authentication bypass by spoofing in Microsoft Dataverse allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-69843
Authentication bypass by spoofing in Microsoft Fabric allows an unauthorized attacker to elevate privileges over a network...
Microsoft Edge (Chromium) < 153.0.4234.48 (CVE-2026-88097)
The version of Microsoft Edge installed on the remote Windows host is prior to 153.0.4234.48. It is, therefore, affected by a vulnerability as referenced in the September 18, 2026 advisory. - Use after free in Microsoft Edge Chromium-based allows an unauthorized attacker to elevate privileges...