36 matches found
Windows_MSKSSRV_LPE_CVE-2023-36802
CVE-2023-36802 本地权限提升 POC 作者：chompie 仅供演示用途。完整漏洞利用适用于有漏洞的 Windows 11 22H2 系统。 将漏洞利用适配到所有有漏洞的系统留给读者作为练习。好好练练吧，等等。 使用方法： root@kitploit: WindowsMSKSSRVLPECVE-2023-6802.exe 其中 是要提升权限的目标进程的进程 ID（十进制）。 应导致目标进程被提升至 SYSTEM 权限。 I/O Ring LPE 原语代码基于 Yarden Shafir 的 I/ORing 读写 PoC。 博客文章此处...
Auto-Elevate
Auto-Elevate 此工具演示了UAC绕过和Windows内置功能的能力。该工具自动定位winlogon.exe，窃取并模拟其进程令牌，并使用窃取的令牌生成一个新的SYSTEM级进程。结合来自hfiref0x的UACME工具中的UAC绕过方法41（ICMLuaUtil UAC绕过），此工具可以将低权限的管理员帐户自动提升到NT AUTHORITY\SYSTEM。 下图演示了在Windows 10 21H1上，使用UACME结合Auto-Elevate从低权限管理员帐户提升到NT AUTHORITY\SYSTEM的过程。...
CVE-2023-21768
CVE-2023-21768 本地权限提升 POC 作者：chompie 和 b33f 仅用于演示目的。完整漏洞利用可在存在漏洞的 Windows 11 22H2 系统上运行。 写入原语适用于所有存在漏洞的系统。 用法： root@kitploit: WindowsAFDLPECVE-2023-21768.exe 其中 是要提升权限的进程的进程 ID（十进制）。 最终应使目标进程被提升至 SYSTEM 权限。...
Driver-RW
Driver-RW 通过 CVE-2018-19321 提升至 NT AUTHORITY\SYSTEM 已在 WIndows 10 v1511 上测试...
Amazon WorkSpaces 安全漏洞
Amazon WorkSpaces is a fully managed, persistent desktop virtualization service provided by Amazon, Inc. It allows your users to access the data, applications, and resources they need from any supported device, at any time. Versions of Amazon WorkSpaces prior to 2.6.2034.0 contained a security...
EUVD-2026-26423
CVE-2026-33451 is an arbitrary read/write vulnerability in the Secure Access Windows client prior to 14.50. Attackers with local control of the Windows client can send malformed data to an API and elevate their level of privilege to system...
Security information for Hitachi Disk Array Systems
Overview CVE-2026-20846 | GDI+ Denial of Service Vulnerability CVE-2026-21222 | Windows Kernel Information Disclosure Vulnerability CVE-2026-21231 | Windows Kernel Elevation of Privilege Vulnerability CVE-2026-21234 | Windows Connected Devices Platform Service Elevation of Privilege Vulnerability...
PT-2026-4514
Name of the Vulnerable Software and Affected Versions Epson USB Display version 1.6.0.0 Description The software contains an unquoted service path vulnerability within the EMP UDSA service, which operates with LocalSystem privileges. This allows attackers to potentially gain elevated system acces...
CVE-2025-53841
The GC-AGENTS-SERVICE running as part of Akamai´s Guardicore Platform Agent for Windows versions prior to v49.20.1, v50.15.0, v51.12.0, v52.2.0 is affected by a local privilege escalation vulnerability. The service will attempt to read an OpenSSL configuration file from a non-existent location th...
PT-2025-48814
Name of the Vulnerable Software and Affected Versions Akamai Guardicore Platform Agent versions prior to 50.15.0 Akamai Guardicore Platform Agent versions prior to 51.12.0 Akamai Guardicore Platform Agent versions prior to 52.1.1 Description The Akamai Guardicore Platform Agent has a flaw that...
memoQ 安全漏洞
memoQ is a computer-assisted translation software from the Hungarian company memoQ. A security vulnerability exists in memoQ 10.1.13.ef1b2b52aae and earlier versions, which stems from an unquoted service path and could allow a local user to achieve elevation of privilege to SYSTEM by placing a...
CVE-2025-59273 Azure Event Grid System Elevation of Privilege Vulnerability
...
CVE-2025-59273
Azure Event Grid System Elevation of Privilege vulnerability (CVE-2025-59273) arises from improper access control, enabling a network-based, unauthenticated attacker to elevate privileges. Affected component: Azure Event Grid System in Microsoft Azure; root cause: access control misconfiguration ...
CVE-2025-59273 Azure Event Grid System Elevation of Privilege Vulnerability
...
CVE-2025-32098
An issue was discovered in Samsung Magician 6.3 through 8.3 on Windows. An attacker can achieve Elevation of Privileges to SYSTEM by exploiting insecure file delete operations during the update process...
sudo: LPE via host option
A privilege escalation vulnerability was found in Sudo. In certain configurations, unauthorized users can gain elevated system privileges via the Sudo host option -h or --host. When using the default sudo security policy plugin sudoers, the host option is intended to be used in conjunction with t...
CVE-2023-21042
In TBD of TBD, there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-239873326References: N/...
CVE-2021-35449
The Lexmark Universal Print Driver version 2.15.1.0 and below, G2 driver 2.7.1.0 and below, G3 driver 3.2.0.0 and below, and G4 driver 4.2.1.0 and below are affected by a privilege escalation vulnerability. A standard low priviliged user can use the driver to execute a DLL of their choosing durin...
WatchGuard Terminal Services Agent 安全漏洞
WatchGuard Terminal Services Agent is a terminal agent service from WatchGuard USA. A security vulnerability exists in WatchGuard Terminal Services Agent versions 12.0 through 12.10, which stems from improperly configured directory permissions during a non-default directory installation, which...