
cve-2026-43499
Kernel exploit for Redmi Pad Pro (dizi) / POCO Pad 5G with browser-based upload and execution interface, admin panel for log management, and…

Kernel exploit for Redmi Pad Pro (dizi) / POCO Pad 5G with browser-based upload and execution interface, admin panel for log management, and…

Achieve arbitrary kernel read/writes/function calling in Hypervisor-Protected Code Integrity (HVCI) protected environments calling without admin…

Local Privilege Escalation from Admin to Kernel vulnerability on Windows 10 and Windows 11 operating systems with HVCI enabled.

PowerShell script for local privilege escalation via PrintNightmare (CVE-2021-34527). Injects a custom DLL payload to add a local admin user,…

Python exploit for CVE-2025-11001/11002 targeting 7-Zip on Windows, leveraging symlink creation to achieve code execution when 7-Zip runs with admin…

Proof-of-concept for arbitrary code injection in Zemana amsdk.sys kernel driver, enabling local privilege escalation from admin to kernel mode on…

Local Privilege Escalation from Admin to Kernel vulnerability on Windows 10 and Windows 11 operating systems with HVCI enabled.

CVE-2025-26633 (CVSS 7.8) – Zero-day MMC .msc EvilTwin LPE actively exploited by Water Gamayun APT. PoC creates local admin via malicious MSC file on…

PowerShell exploit for CVE-2021-1675 (PrintNightmare) performing local privilege escalation via Print Spooler, with custom DLL payload injection to…

Proof-of-concept exploit for CVE-2025-0282, a remote unauthenticated stack buffer overflow in Ivanti Connect Secure, Policy Secure, and Neurons for…

Proof-of-concept for CVE-2024-21338, a local privilege escalation from Admin to Kernel on Windows 10/11 with HVCI enabled. Includes source code and…

Python exploit for CVE-2025-11001 targeting 7-Zip on Windows, leveraging symlink creation to achieve code execution when 7-Zip runs with Admin…

PowerShell local privilege escalation exploit for PrintNightmare (CVE-2021-34527) targeting Windows Print Spooler. Embeds custom DLL payload to add…

Python exploit for CVE-2025-11001 targeting 7-Zip symlink vulnerability on Windows. Requires admin privileges; creates malicious archives to trigger…

PowerShell exploit for PrintNightmare (CVE-2021-1675) performing local privilege escalation via Print Spooler, with custom DLL payload injection to…

PS5 homebrew enabler payload offering post-exploitation features: custom plugin/payload loading, unsigned fself/fpkg support, debug settings, FTP…

Linux Bluetooth - Run arbitrary management commands as an unprivileged user

Detailed analysis and proof-of-concept exploit for CVE-2022-0185, a Linux kernel heap buffer overflow in the fsconfig syscall enabling local…