287466 matches found
CVE-2024-27518
CVE-2024-27518 - SUPERAntiSpyware Professional X 本地权限提升概念验证 此漏洞由 Secunnix 漏洞研究团队的 M. Akil Gündoğan 发现并公开披露。本仓库将包含概念验证代码和相关公告。 详情： 产品： SUPERAntiSpyware Professional X 及所有版本。 受影响版本： =10.0.1262 及最新版本 10.0.1264 CVE ID： CVE-2024-27518 操作系统： 所有受支持的 Windows 版本，已在 Windows 10 Pro 上测试 状态： 公共负责任的披露。 发布日期：...
EUVD-2026-76447
Concrete CMS versions 9.0.0 to 9.5.2 is vulnerable to Stored XSS in Board Custom Slot dialog. The customslot savetemplate endpoint authorizes the request only against the target board instance canEditBoardContents and then persists the client-supplied selectedTemplateOptioncollection verbatim,...
CVE-2026-81911 Concrete CMS versions 9.0.0 to 9.5.2 is vulnerable to Stored XSS in Board Custom Slot save_template via Unescaped Summary Description
Concrete CMS versions 9.0.0 to 9.5.2 is vulnerable to Stored XSS in Board Custom Slot dialog. The customslot savetemplate endpoint authorizes the request only against the target board instance canEditBoardContents and then persists the client-supplied selectedTemplateOptioncollection verbatim,...
CVE-2026-79395
An improper authentication vulnerability in the WS-Security wsse:UsernameToken verification routine within the Sofia IPC daemon in Xiongmai IP Camera XM530 firmware HMT.CM2005-v220608.1837 and earlier allows remote attackers to bypass authentication and execute privileged ONVIF actions including...
CVE-2026-62102
Subscriber Privilege Escalation in Gato GraphQL = 19.2.3 versions...
CVE-2026-62106
Subscriber Privilege Escalation in SMS Alert Order Notifications = 3.9.9 versions...
CVE-2026-62089
Missing Authorization vulnerability in Pixar Labs Master Addons for Elementor allows Privilege Abuse. This issue affects Master Addons for Elementor: from n/a through 3.2.2...
GIUDA
GIUDA GET a TGS on behalf of another user without password Scenario: you are Local Administrator and there is a logged User you want to Impersonate! Chain: SeTcbPrivilege allows you to read LSA storage, extract the SESSION KEY from TGT, and forge a request asking for a TGS; You must use LUID...
CVE-2026-84195
A flaw was found in Kyverno, a policy engine for Kubernetes. This vulnerability allows attackers with low privileges to exfiltrate the admission controller's ServiceAccount token. By directing apiCall requests to external or attacker-controlled endpoints, the token is automatically attached witho...
NoFilter
NoFilter Tool for abusing the Windows Filtering Platform for privilege escalation. It can launch a new console as "NT AUTHORITY\SYSTEM" or as another user that is logged on to the machine. Usage root@kitploit: Usage: NoFilter.exe -s SESSIONID Credits Ron Ben Yizhak References DEF CON talk...
SspiUacBypass
SspiUacBypass Bypassing UAC with SSPI Datagram Contexts Full technical details at -- https://splintercod3.blogspot.com/p/bypassing-uac-with-sspi-datagram.html Demo...
cve-2026-62737-lab
CVE-2026-62737: from crash to lab-assisted SYSTEM A follow-up to the original CVE-2026-62737 writeup ExecutionContext.sys arbitrary kernel indirect call. It turns the crash PoC into a working token-swap chain that spawns cmd.exe as SYSTEM, but only in a lab where a debugger supplies addresses and...
CVE-2025-7771
CVE-2025-7771 — ThrottleStop.sys Arbitrary Physical Memory R/W Full proof-of-concept for the TechPowerUp ThrottleStop.sys driver CVE-2025-7771. A signed, still-loadable kernel driver exposes unvalidated physical memory read and write through two IOCTLs. This repo turns that primitive into a worki...
EUVD-2026-76194
Missing Authorization vulnerability in Pixar Labs Master Addons for Elementor allows Privilege Abuse. This issue affects Master Addons for Elementor: from n/a through 3.2.2...
CVE-2026-62089 WordPress Master Addons for Elementor plugin <= 3.2.2 - Broken Access Control vulnerability
Missing Authorization vulnerability in Pixar Labs Master Addons for Elementor allows Privilege Abuse. This issue affects Master Addons for Elementor: from n/a through 3.2.2...
CVE-2026-62089
CVE-2026-62089 is a Missing Authorization (Broken Access Control) vulnerability in the WordPress plugin Master Addons for Elementor by Pixar Labs, affecting versions from n/a through 3.2.2 . The flaw allows Privilege Abuse , enabling a low-privilege authenticated user to exploit the missing autho...
CVE-2026-62106
SMS Alert Order Notifications WordPress plugin (versions ≤ 3.9.9 ) is affected by a Subscriber-level privilege escalation vulnerability. The CNA-assigned CVSS 3.1 score is 8.8 (HIGH) with a vector of AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating a low-privileged (Subscriber) user can achieve hi...
CVE-2026-62106 WordPress SMS Alert Order Notifications plugin <= 3.9.9 - Privilege Escalation vulnerability
Subscriber Privilege Escalation in SMS Alert Order Notifications = 3.9.9 versions...