local

Mach Race OSX – Local Privilege Escalation

Source: https://github.com/gdbinit/mach_race

Yasr Screen Reader 0.6.9 – Local Buffer Overflow

'''

Microsoft Windows 7 < 10 / 2008 < 2012 (x86/x64) - Local Privilege Escalation (MS16-032)

# Exploit Title: Microsoft Windows 7-10 & Server 2008-2012 - Local Privilege Escalation (x32/x64) (MS16-032) (C#)

CompuSource Systems Real Time Home Banking – Local Privilege Escalation

# Exploit Title: CompuSource Systems - Real Time Home Banking - Local

Sony Playstation 4 (PS4) < 2.50 - WebKit Code Execution (PoC)

CVE 2014-1303 Proof Of Concept for PS4

Microsoft Windows 7 < 10 / 2008 < 2012 R2 (x86/x64) - Local Privilege Escalation (MS16-032) (PowerShell)

function Invoke-MS16-032 {

Exim – ‘perl_startup’ Local Privilege Escalation (Metasploit)

##

Microsoft Excel – Out-of-Bounds Read Code Execution (MS16-042)

#######################################################################################

Texas Instrument Emulator 3.03 – Local Buffer Overflow

# Exploit Author: Juan Sacco - http://www.exploitpack.com -

CAM UnZip 5.1 – .’ZIP’ File Directory Traversal

[+] Credits: hyp3rlinx

Apple Intel HD 3000 Graphics Driver 10.0.0 – Local Privilege Escalation

░▀█▀░█▀█░█░░░█▀█░█▀▀░░░█░█░█░█░█░░░█▀█░█▀▄░█▀▀░█░█░

Express Zip 2.40 – Directory Traversal

#!/usr/bin/python -w

Mess Emulator 0.154-3.1 – Local Buffer Overflow

# Exploit Author: Juan Sacco - http://www.exploitpack.com -

Panda Endpoint Administration Agent < 7.50.00 - Local Privilege Escalation

Description:

Panda Security URL Filtering < 4.3.1.9 - Local Privilege Escalation

Description:

Microsoft Windows Kernel – ‘win32k.sys’ Local Privilege Escalation (MS14-058)

Sources:

Hexchat IRC Client 2.11.0 – Directory Traversal

#!/usr/bin/python

Cogent Datahub 7.3.9 Gamma Script – Local Privilege Escalation

# Exploit Title: Cogent Datahub

FireEye – Malware Input Processor Privilege Escalation

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=670

Apple Mac OSX / iOS – SUID Binary Logic Error Kernel Code Execution

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=676

CoolPlayer (Standalone) build 2.19 – ‘.m3u’ Local Stack Overflow

# Exploit Title: CoolPlayer (Standalone) build 2.19 - .m3u Stack Overflow

Internet Download Manager 6.25 Build 14 – ‘Find file’ Unicode (SEH)

#!/usr/bin/python

Microsoft Windows 8.1/10 (x86) – Secondary Logon Standard Handles Missing Sanitization Privilege Escalation (MS16-032)

Sources:

Exim < 4.86.2 - Local Privilege Escalation

=============================================

Exim 4.84-3 – Local Privilege Escalation

#!/bin/sh

McAfee VirusScan Enterprise 8.8 – Security Restrictions Bypass

Security Advisory @ Mediaservice.net Srl

Microsoft Windows 7 (x64) – ‘afd.sys’ Dangling Pointer Privilege Escalation (MS14-040)

# Exploit Title: MS14-040 - AFD.SYS Dangling Pointer

AppLocker – Execution Prevention Bypass (Metasploit)

##

Secret Net 7 and Secret Net Studio 8 – Local Privilege Escalation

Source: https://github.com/Cr4sh/secretnet_expl

Crouzet em4 soft 1.1.04 / M3 soft 3.1.2.0 – Insecure File Permissions

Crouzet em4 soft 1.1.04 and M3 soft 3.1.2.0 Insecure File Permissions

Comodo Anti-Virus – ‘SHFolder.dll’ Local Privilege Escalation

Linux Kernel 3.x (Ubuntu 14.04 / Mint 17.3 / Fedora 22) – Double-free usb-midi SMEP Privilege Escalation

Source: https://xairy.github.io/blog/2016/cve-2016-2384

Ubuntu < 15.10 - PT Chown Arbitrary PTs Access Via User Namespace Privilege Escalation

Source: http://www.halfdog.net/Security/2015/PtChownArbitraryPtsAccessViaUserNamespace/

Core FTP Server 1.2 – Local Buffer Overflow

#-*- coding: utf-8 -*-

AUFS (Ubuntu 15.10) – ‘allow_userns’ Fuse/Xattr User Namespaces Privilege Escalation

Source: http://www.halfdog.net/Security/2016/AufsPrivilegeEscalationInUserNamespaces/

Flash ActiveX 28.0.0.137 – Code Execution (1)

## CVE-2018-4878 (flash exploit)

Microsoft Windows 7 (x86) – ‘afd.sys’ Dangling Pointer Privilege Escalation (MS14-040)

# Exploit Title: MS14-040 - AFD.SYS Dangling Pointer

Delta Industrial Automation DCISoft 1.12.09 – Local Stack Buffer Overflow

#!/usr/bin/env python

Microsoft Windows – Kerberos Security Feature Bypass (MS16-014)

# Exploit Title: Windows Kerberos Security Feature Bypass

Flash ActiveX 28.0.0.137 – Code Execution (2)

## CVE-2018-4878

Wieland wieplan 4.1 – Document Parsing Java Code Execution Using XMLDecoder

Wieland wieplan 4.1 Document Parsing Java Code Execution Using XMLDecoder

Deepin Linux 15 – ‘lastore-daemon’ Local Privilege Escalation

#!/usr/bin/env python

Microsoft Windows 7 SP1 (x86) – ‘WebDAV’ Local Privilege Escalation (MS16-016) (1)

source: https://github.com/koczkatamas/CVE-2016-0051

FTPShell Client 5.24 – ‘Create NewFolder’ Local Buffer Overflow

#[+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+]

Microsoft Internet Explorer 11 – javascript Code Execution

Google Android – ‘sensord’ Local Privilege Escalation

#include

Microsoft Windows – Sandboxed Mount Reparse Point Creation Mitigation Bypass Redux (MS16-008) (1)

Source: https://code.google.com/p/google-security-research/issues/detail?id=573

Microsoft Windows – Sandboxed Mount Reparse Point Creation Mitigation Bypass Redux (MS16-008) (2)

Source: https://code.google.com/p/google-security-research/issues/detail?id=589

Huawei Mate 7 – ‘/dev/hifi_misc’ Privilege Escalation

#include

NTP – Local Privilege Escalation

Source: http://www.halfdog.net/Security/2015/NtpCronjobUserNtpToRootPrivilegeEscalation/