CVE-2026-9789

CVE ID: CVE-2026-9789 Researcher: Vo Duc Thang ugvxb Acknowledgement: https://community.acer.com/en/kb/articles/19670 Video POC: https://drive.google.com/file/d/1B8b42bE68CWMnlqG6eJWi0txGFsHAJZc/view?usp=sharing 1. Executive Summary A critical local privilege escalation vulnerability has been...

CVE-2023-21768-POC

CVE-2023-21768-POC CVE-2023-21768 Windows 11 22H2 Local Privilege Escalation POC Usage: WindowsAFDLPECVE-2023-21768.exe Where is the process ID decimal to elevate, causing the target process to be elevated to SYSTEM privileges...

CVE-2025-4172026

Security Advisory: CVE-2025-4172026 Summary All systems are now active and aligned. Recursive analysis confirms continuity with prior operational directives. No inconsistencies detected. Proceeding with full-system engagement. 🔹 Protocol Confirmation: ✔️ Processing framework has been initialized...

Get-ReconInfo

Get-ReconInfo NAME Get-ReconInfo SYNOPSIS Lists connections and relevant info about a system Author: Chris King @raikiasec SYNTAX Get-ReconInfo DESCRIPTION This script runs the following commands on the local system, parses the output, and prints the results to the screen: netstat -ano ipconfig...

CVE-2019-6329

Local Privilege Escalation in HP Support Assistant A local privilege escalation bug in HP Support Assistant by abusing hard link Researcher: ManhNDd of Bkav Description In HP Support Assistant GUI , when you click Check for updates and messages , the service HP Support Solution Framework will run...

CVE-2023-21768

CVE-2023-21768 Local Privilege Escalation POC authors: chompie & b33f For demonstration purposes only. Complete exploit works on vulnerable Windows 11 22H2 systems. Write primitive works on all vulnerable systems. Usage: WindowsAFDLPECVE-2023-21768.exe where is the process ID in decimal of the...

CVE-2009-4623

CVE-2009-4623 Advanced Comment System 1.0 Reverse Shell Multiple PHP remote file inclusion vulnerabilities in Advanced Comment System 1.0 allow remote attackers to execute arbitrary PHP code via a URL in the ACSpath parameter to 1 index.php and 2 admin.php in advancedcommentsystem/. NOTE: this...

CVE-2025-65881

CVE-2025-65881 The Project Zoo Management System v1.00 is vulnerable to Cross-site scripting XSS on /zms/classes/Login.php?f=login due to: 1. Invalid Content-type of JSON Responses on /zms/classes/Login.php?f=login 2. Unsanitized User Input in Responses Allowing unauthenticated attackers to injec...

CVE-2026-98396

A flaw was found in the Linux kernel. On PowerPC systems, Kernel Userspace Access Prevention KUAP controls are restored prematurely before platform-specific exit routines complete during system call and interrupt handling. A local user can trigger these execution paths to cause the kernel to run...

CVE-2024-46635

CVE-2024-46635 Background The GongZhiDao System is a platform developed by GongZhiDao. It provides enterprise solutions including user management, data analysis, and operational functionalities. However, a security vulnerability was discovered in one of the API endpoints that could potentially le...

CVE-2019-8805

CVE-2019-8805 Exploit for CVE-2019-8805 Apple EndpointSecurity framework Privilege Escalation A validation issue existed in the entitlement verification. This issue was addressed with improved validation of the process entitlement. This issue is fixed in macOS Catalina 10.15.1. An application may...

CVE-2023-51801

CVE-2023-51801 Simple Student Attendance System v.1.0 - Multiple SQL injection vulnerabilities - studentform.php and classform.php Description :Simple Student Attendance System v.1.0 is prone to multiple SQL injection vulnerabilities that can be exploited by authenticated attackers. These...

CVE-2025-59424

CVE-2025-59424 LinkAce Stored Cross-Site Scripting XSS on the /system/audit page...

cve-2014-7911-exp

cve-2014-7911-exp exploit for cve-2014-7911; android; java deserialization ;system privilege;ace; This exp refers to retme7's exp,but the rop chain is different. And the most important part is Chunk Spray. Hope it will help. environment device:nexus5 os version:Android4.4.4...

CVE-2026-110746 CVE-2026-110746

A local privilege escalation vulnerability in TotalAV allows an unprivileged local user to forge the gRPC IPC authentication token, through loading IPC.dll and abuse the SYSTEM service's within TotalAV to execute arbitrary code as NT AUTHORITY\SYSTEM...

EUVD-2026-102075

A local privilege escalation vulnerability in TotalAV allows an unprivileged local user to forge the gRPC IPC authentication token, through loading IPC.dll and abuse the SYSTEM service's within TotalAV to execute arbitrary code as NT AUTHORITY\SYSTEM...

CVE-2026-110746

A local privilege escalation vulnerability exists in TotalAV that allows an unprivileged local user to execute arbitrary code as NT AUTHORITYSYSTEM . The root cause is the ability for an attacker to forge the gRPC IPC authentication token by loading IPC.dll and abusing the SYSTEM service within t...

os-experiment-4

os-experiment-4 os experiment 4 CVE-2016-5195 ./run.sh...

Event-ID-263-Arbitrary-File-Read-on-Checkpoint-Security-Gateway-CVE-2024-24919-

SOC Alert Analysis: Arbitrary File Read on Checkpoint Security Gateway CVE-2024-24919 Introduction CVE-2024-24919 is a critical zero-day vulnerability in Check Point Security Gateways that allows unauthenticated remote attackers to read arbitrary files from affected systems. Discovered in May 202...

CVE-2023-7261

CVE-2023-7261 Google Chrome Updater DosDevices Local Privilege Escalation Vulnerability Details: This vulnerability allows local attackers to escalate privileges on affected installations of Google Chrome. An attacker must first obtain the ability to execute low-privileged code on the target syst...