Windows&Linux提权&RCE合集.md

说明

1.以下漏洞均为作者收集，请勿用于非法渠道，POC/EXP使用与作者本人无关

2.其中涉及的影响版本都是包含该版本(如1.0.1-2.0.0表示1.0.1和2.0.2版本都受影响)

3.里面的POC/EXP和利用脚本均为作者在网上查找，并没有一一进行验证，不能保证每一个POC/EXP或脚本都没有错误

项目列表

• 提权辅助工具
• 容器逃逸检测脚本
• Windows本地提权漏洞
• Linux本地提权漏洞
• Windows远程代码执行漏洞
• Linux远程代码执行漏洞

漏洞列表

提权辅助工具

• Windows/Linux辅助提权工具汇总:https://cloud.tencent.com/developer/article/1944250?from=15425
• Windows提权辅助工具:https://i.hacking8.com/tiquan
• Windows提权漏洞检测:https://github.com/brianwrf/WinSystemHelper
• Windwos自动提权脚本:https://github.com/carlospolop/PEASS-ng/tree/master/winPEAS
• Windows漏洞合集列表:https://github.com/SecWiki/windows-kernel-exploits
• Linux提权扫描脚本:https://github.com/mzet-/linux-exploit-suggester
• Linux提权命令一览表:https://gtfobins.github.io
• Linux自动提权脚本:https://github.com/liamg/traitor
• Linux提权枚举脚本:https://github.com/rebootuser/LinEnum
• Linux自动提权脚本:https://github.com/carlospolop/PEASS-ng/tree/master/linPEAS
• Linux自动提权脚本:https://github.com/liamg/traitor

容器逃逸检测脚本

• 容器逃逸检测脚本:https://github.com/teamssix/container-escape-check

Windows本地提权漏洞

• CVE-2022-26923 Active Directory 域服务特权提升漏洞

  • 漏洞影响版本:Windows 8.1 | Windows 10 Version 1607,1809,1909,2004,20H2,21H1,21H2 | Windows 11 | Windows Server 2012 | Windows Server 2016 | Windows Server 2019 | Windows Server 2022
  • 漏洞介绍及修复建议:https://cn-sec.com/archives/999736.html
  • POC/EXP:https://mp.weixin.qq.com/s/t0u_bObzUUWOnuJEEKGkxw

• CVE-2022-24521 Windows CLFS本地提权漏洞

  • 漏洞影响版本:Windows 7 ｜ Windows 8.1 ｜ Windows 10 ｜ Windows 11 ｜ Windows Server 2008 ｜ Windows Server 2012 ｜ Windows Server 2016 ｜ Windows Server 2019 ｜ Windows Server 2022
  • 漏洞介绍及修复建议:https://cn-sec.com/archives/998137.html
  • POC/EXP:暂无

• CVE-2022-21997 Windows 打印后台处理程序特权提升漏洞

  • 漏洞影响版本:Windows 7 | Windows 8 | Windows 10 | Windows 11 | Windows Server 2008 | Windows Server 2012 | Windows Server 2016 | Windows Server 2019 | Windows Server 2022
  • 漏洞介绍及修复建议:https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-21997
  • POC/EXP:暂无

• CVE-2021-42287/CVE-2021-42278Windows域提权漏洞

  • 漏洞影响版本:Windows Server 2008 ｜ Windows Server 2012 ｜ Windows Server 2016 ｜ Windows Server 2019(具体版本见漏洞介绍及修复建议中链接)
  • 漏洞介绍及修复建议:http://www.aqtd.com/nd.jsp?id=569
  • POC/EXP:https://github.com/WazeHell/sam-the-admin

• CVE-2021-40449 Win32k提权漏洞

  • 漏洞影响版本:Windows 7 ｜ Windows 8.1 ｜ Windows 10 | Windows 11(具体版本见漏洞介绍及修复建议中链接)
  • 漏洞介绍及修复建议:https://www.anquanke.com/post/id/260841
  • POC/EXP:https://github.com/ly4k/CallbackHell

• CVE-2021-36934 Windows权限提升漏洞

  • 漏洞影响版本:Windows 10 | Windows Server 2019(具体版本见漏洞介绍及修复建议中链接)
  • 漏洞介绍及修复建议:https://nsfocusglobal.com/windows-privilege-escalation-vulnerability-cve-2021-36934-threat-alert/
  • POC/EXP:https://github.com/cube0x0/CVE-2021-36934

• CVE-2021-34486 Windows Event Tracing权限提升漏洞

  • 漏洞影响版本:Windows 10 ｜ Windows Server 2019(具体版本见漏洞介绍及修复建议中链接)
  • 漏洞介绍及修复建议:https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-34486
  • POC/EXP:https://github.com/KaLendsi/CVE-2021-34486

• CVE-2021-33739 DWM Core Library权限提升漏洞

  • 漏洞影响版本:Windows10(具体版本见漏洞介绍及修复建议中链接)
  • 漏洞介绍及修复建议:https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-33739
  • POC/EXP:https://github.com/freeide2017/CVE-2021-33739-POC

• CVE-2021-26868 Windows Graphics Component权限提升漏洞

  • 漏洞影响版本:Windows 8 | Windows 10 | Windows 2012 | Windows 2016(具体版本见漏洞介绍及修复建议中链接)
  • 漏洞介绍及修复建议:https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-26868
  • POC/EXP:https://github.com/KangD1W2/CVE-2021-26868

• CVE-2021-1732 Windows Win32k权限提升漏洞

  • 漏洞影响版本:Windows 10 | Windows 2019
  • 漏洞介绍及修复建议:https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-1732
  • POC/EXP:https://github.com/KaLendsi/CVE-2021-1732-Exploit

• CVE-2020-1472 Netlogon权限提升漏洞

  • 漏洞影响版本:Windows Server 2008 | Windows Server 2012 | Windows Server 2016 | Windows Server 2019(具体版本见漏洞介绍及修复建议中链接)
  • 漏洞介绍及修复建议:https://msrc.microsoft.com/update-guide/vulnerability/CVE-2020-1472
  • POC/EXP:https://github.com/SecuraBV/CVE-2020-1472

• CVE-2020-1337 Windows Print Spooler权限提升漏洞

  • 漏洞影响版本:Windows 7 | Windows 10 | Windows Server 2008 | Windows Server 2012 | Windows Server 2016 | Windows Server 2019(具体版本见漏洞介绍及修复建议中链接)
  • 漏洞介绍及修复建议:https://msrc.microsoft.com/update-guide/vulnerability/CVE-2020-1337
  • POC/EXP:https://github.com/sailay1996/cve-2020-1337-poc

• CVE-2020-1313 Windows Update Orchestrator Service权限提升漏洞

  • 漏洞影响版本:Windows 10(具体版本见漏洞介绍及修复建议中链接)
  • 漏洞介绍及修复建议:https://msrc.microsoft.com/update-guide/vulnerability/CVE-2020-1313
  • POC/EXP:https://github.com/irsl/CVE-2020-1313

• CVE-2020-1066 .NET Framework权限提升漏洞

  • 漏洞影响版本:Windows 7 | Windows Server 2008(具体版本见漏洞介绍及修复建议中链接)
  • 漏洞介绍及修复建议:https://msrc.microsoft.com/update-guide/vulnerability/CVE-2020-1066
  • POC/EXP:https://github.com/cbwang505/CVE-2020-1066-EXP

• CVE-2020-1054 Win32k权限提升漏洞

  • 漏洞影响版本:Windows 7 | Windows 8 | Windows 10 | Windows Server 2008 | Windows Server 2012 | Windows Server 2016 | Windows Server 2019(具体版本见漏洞介绍及修复建议中链接)
  • 漏洞介绍及修复建议:https://msrc.microsoft.com/update-guide/vulnerability/CVE-2020-1054
  • POC/EXP:https://github.com/0xeb-bp/cve-2020-1054

• CVE-2020-1034 Windows Kernel权限提升漏洞

  • 漏洞影响版本:Windows 8 | Windows 10 | Windows Server 2012 | Windows Server 2016 | Windows Server 2019(具体版本见漏洞介绍及修复建议中链接)
  • 漏洞介绍及修复建议:https://msrc.microsoft.com/update-guide/zh-CN/vulnerability/CVE-2020-1034
  • POC/EXP:https://github.com/yardenshafir/CVE-2020-1034

• CVE-2020-1015 Windows内核权限提升漏洞

  • 漏洞影响版本:Windows 7 | Windows 8 | Windows 10 | Windows Server 2012 | Windows Server 2016 | Windows Server 2019(具体版本见漏洞介绍及修复建议中链接)
  • 漏洞介绍及修复建议:https://msrc.microsoft.com/update-guide/vulnerability/CVE-2020-1015
  • POC/EXP:https://github.com/0xeb-bp/cve-2020-1015

• CVE-2020-0787 Windows Background Intelligent Transfer服务权限提升漏洞

  • 漏洞影响版本:Windows 7 | Windows 8 | Windows 10 | Windows Server 2008 | Windows Server 2012 | Windows Server 2016 | Windows Server 2019(具体版本见漏洞介绍及修复建议中链接)
  • 漏洞介绍及修复建议:https://msrc.microsoft.com/update-guide/vulnerability/CVE-2020-0787
  • POC/EXP:https://github.com/cbwang505/CVE-2020-0787-EXP-ALL-WINDOWS-VERSION

• CVE-2020-0683 Windows Installer权限提升漏洞

  • 漏洞影响版本:Windows 7 | Windows 8 | Windows 10 | Windows Server 2008 | Windows Server 2012 | Windows Server 2016 | Windows Server 2019(具体版本见漏洞介绍及修复建议中链接)
  • 漏洞介绍及修复建议:https://msrc.microsoft.com/update-guide/vulnerability/CVE-2020-0683
  • POC/EXP:https://github.com/padovah4ck/CVE-2020-0683

• CVE-2020-0668 Windows内核权限提升漏洞

  • 漏洞影响版本:Windows 7 | Windows 8 | Windows 10 | Windows Server 2008 | Windows Server 2012 | Windows Server 2016 | Windows Server 2019(具体版本见漏洞介绍及修复建议中链接)
  • 漏洞介绍及修复建议:https://msrc.microsoft.com/update-guide/vulnerability/CVE-2020-0668
  • POC/EXP:https://github.com/RedCursorSecurityConsulting/CVE-2020-0668

• CVE-2019-1458 Win32k权限提升漏洞

  • 漏洞影响版本:Windows 7 | Windows 8 | Windows 10 | Windows Server 2008 | Windows Server 2012 | Windows Server 2016(具体版本见漏洞介绍及修复建议中链接)
  • 漏洞介绍及修复建议:https://msrc.microsoft.com/update-guide/vulnerability/CVE-2019-1458
  • POC/EXP:https://github.com/piotrflorczyk/cve-2019-1458_POC

• CVE-2019-1388 Windows证书对话框权限提升漏洞

  • 漏洞影响版本:Windows 7 | Windows 8 | Windows 10 | Windows Server 2008 | Windows Server 2012 | Windows Server 2016 | Windows Server 2019(具体版本见漏洞介绍及修复建议中链接)
  • 漏洞介绍及修复建议:https://msrc.microsoft.com/update-guide/vulnerability/CVE-2019-1388
  • POC/EXP:https://github.com/jas502n/CVE-2019-1388

• CVE-2019-1132 Win32k权限提升漏洞

  • 漏洞影响版本:Windowss 7 | Windows Server 2008(具体版本见漏洞介绍及修复建议中链接)
  • 漏洞介绍及修复建议:https://msrc.microsoft.com/update-guide/vulnerability/CVE-2019-1132
  • POC/EXP:https://github.com/Vlad-tri/CVE-2019-1132

• CVE-2019-0808 Win32k权限提升漏洞

  • 漏洞影响版本:Windows 7 | Windows Server 2008(具体版本见漏洞介绍及修复建议中链接)
  • 漏洞介绍及修复建议:https://msrc.microsoft.com/update-guide/vulnerability/CVE-2019-0808
  • POC/EXP:https://github.com/ze0r/cve-2019-0808-poc

• CVE-2019-0803 Win32k权限提升漏洞

  • 漏洞影响版本:Windows 7 | Windows 8 | Windows 10 | Windows Server 2008 | Windows Server 2012 | Windows Server 2016 | Windows Server 2019(具体版本见漏洞介绍及修复建议中链接)
  • 漏洞介绍及修复建议:https://msrc.microsoft.com/update-guide/vulnerability/CVE-2019-0803
  • POC/EXP:https://github.com/ExpLife0011/CVE-2019-0803

• CVE-2019-0623 Win32k权限提升漏洞

  • 漏洞影响版本:Windows 7 | Windows 8 | Windows 10 | Windows Server 2008 | Windows Server 2012 | Windows Server 2016(具体版本见漏洞介绍及修复建议中链接)
  • 漏洞介绍及修复建议:https://msrc.microsoft.com/update-guide/vulnerability/CVE-2019-0623
  • POC/EXP:https://github.com/DreamoneOnly/CVE-2019-0623-32-exp

• CVE-2018-8639 Win32k权限提升漏洞

  • 漏洞影响版本:Windows 7 | Windows 8 | Windows 10 | Windows Server 2008 | Windows Server 2012 | Windows Server 2016 | Windows Server 2019(具体版本见漏洞介绍及修复建议中链接)
  • 漏洞介绍及修复建议:https://msrc.microsoft.com/update-guide/vulnerability/CVE-2018-8639
  • POC/EXP:https://github.com/ze0r/CVE-2018-8639-exp

• CVE-2018-8453 Win32k权限提升漏洞

  • 漏洞影响版本:Windows 7 | Windows 8 | Windows 10 | Windows Server 2008 | Windows Server 2012 | Windows Server 2016 | Windows Server 2019(具体版本见漏洞介绍及修复建议中链接)
  • 漏洞介绍及修复建议:https://msrc.microsoft.com/update-guide/vulnerability/CVE-2018-8453
  • POC/EXP:https://github.com/ze0r/cve-2018-8453-exp

• CVE-2018-8120 Win32k权限提升漏洞

  • 漏洞影响版本:Windows 7 | Windows Server 2008(具体版本见漏洞介绍及修复建议中链接)
  • 漏洞介绍及修复建议:https://msrc.microsoft.com/update-guide/vulnerability/CVE-2018-8120
  • POC/EXP:https://github.com/unamer/CVE-2018-8120

• CVE-2017-0213 Windows COM权限提升漏洞

  • 漏洞影响版本:Windows 7 | Windows 8 | Windows 10 | Windows Server 2008 | Windows Server 2012 | Windows Server 2016(具体版本见漏洞介绍及修复建议中链接)
  • 漏洞介绍及修复建议:https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0213
  • POC/EXP:https://github.com/zcgonvh/CVE-2017-0213

• CVE-2017-0101 Windows 事务管理器权限提升漏洞

  • 漏洞影响版本:Windows Vista ｜ Windows 7 ｜ Windows Server 2008(具体版本见漏洞介绍及修复建议中链接)
  • 漏洞介绍及修复建议:https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0101
  • POC/EXP:暂无

• CVE-2016-7255 Win32k权限提升漏洞

  • 漏洞影响版本:Windows Vista ｜ Windows 7 | Windows 8 | Windows 10 | Windows Server 2008 | Windows Server 2012 | Windows Server 2016(具体版本见漏洞介绍及修复建议中链接)
  • 漏洞介绍及修复建议:https://msrc.microsoft.com/update-guide/vulnerability/CVE-2016-7255
  • POC/EXP:https://github.com/FSecureLABS/CVE-2016-7255

• CVE-2016-3371 Windows权限提升漏洞

  • 漏洞影响版本:Windows Vista ｜ Windows 7 | Windows 8 | Windows 10 | Windows Server 2008 | Windows Server 2012(具体版本见漏洞介绍及修复建议中链接)
  • 漏洞介绍及修复建议:https://msrc.microsoft.com/update-guide/vulnerability/CVE-2016-3371
  • POC/EXP:暂无

• CVE-2016-3225 Windows SMB服务器权限提升漏洞

  • 漏洞影响版本:Windows Vista ｜ Windows 7 | Windows 8 | Windows 10 | Windows Server 2008 | Windows Server 2012(具体版本见漏洞介绍及修复建议中链接)
  • 漏洞介绍及修复建议:https://msrc.microsoft.com/update-guide/vulnerability/CVE-2016-3225
  • POC/EXP:暂无

Linux本地提权漏洞

• CVE-2023-0179 Linux 本地内核提权漏洞

  • 漏洞影响版本:all Linux versions from 5.5 to 6.2-rc3
  • 漏洞介绍及修复建议:https://www.ctfiot.com/100156.html
  • POC/EXP:https://github.com/H4K6/CVE-2023-0179-PoC

• CVE-2022-34918 Linux Kernel本地权限提升漏洞

  • 漏洞影响版本:5.8 <= Linux Kernel <= 5.18.9
  • 漏洞介绍及修复建议:https://mp.weixin.qq.com/s/Qon1AU2GG992J6-nFGZjnA
  • POC/EXP:https://github.com/randorisec/CVE-2022-34918-LPE-PoC

• CVE-2022-32250 Linux 本地权限提升漏洞

  • 漏洞影响版本:Linux kernel <= 5.18.1
  • 漏洞介绍及修复建议:http://www.nsfocus.net/vulndb/65587
  • POC/EXP:https://github.com/theori-io/CVE-2022-32250-exploit

• CVE-2022-29799/CVE-2022-29800 Linux Nimbuspwn本地提权漏洞

  • 漏洞影响版本:networkd-dispatcher < 2.2.1-0
  • 漏洞介绍及修复建议:https://mp.weixin.qq.com/s/yKFLsWB8r5UGZlLi6k6IuQ
  • POC/EXP:https://github.com/Maksim-venus/Nimbuspwn

• CVE-2022-23222 Linux kernel本地提权漏洞

  • 漏洞影响版本:Linux 内核版本 <= 5.15.14
  • 漏洞介绍及修复建议:https://www.cve.org/CVERecord?id=CVE-2022-23222
  • POC/EXP:https://github.com/tr3ee/CVE-2022-23222

• CVE-2022-2639 Linux Kernel openvswitch模块权限提升漏洞

  • 漏洞影响版本:v3.13 <= Linux Kernel < v5.18
  • 漏洞介绍及修复建议:https://nvd.nist.gov/vuln/detail/CVE-2022-2639
  • POC/EXP:https://github.com/veritas501/CVE-2022-2639-PipeVersion

• CVE-2022-2588 Linux kernel DirtyCred提权漏洞

  • 漏洞影响版本:Linux kernel 内核版本 < 5.8
  • 漏洞介绍及修复建议:https://cn-sec.com/archives/1258478.html
  • POC/EXP:https://github.com/Markakd/CVE-2022-2588

• CVE-2022-0995 Linux kernel内核提权漏洞

  • 漏洞影响版本:Linux 内核版本 <= 5.17-rc7
  • 漏洞介绍及修复建议:http://vul.tidesec.com/index/view?type=new&id=264279
  • POC/EXP:https://github.com/google/security-research/tree/master/pocs/linux/cve-2021-22555

• CVE-2022-0847 Linux Dirty Pipe本地提权漏洞

  • 漏洞影响版本5.8 <= Linux 内核版本 < 5.16.11 / 5.15.25 / 5.10.102
  • 漏洞介绍及修复建议:https://mp.weixin.qq.com/s/b8DmtIerXuoC7f3nqaOVIw
  • POC/EXP:https://github.com/Arinerron/CVE-2022-0847-DirtyPipe-Exploit

• CVE-2021-43267 Linux kernel TIPC任意代码执行权限提升漏洞

  • 漏洞影响版本:5.10 < Linux Kernel < 5.15
  • 漏洞介绍及修复建议:https://www.secrss.com/articles/36572
  • POC/EXP:https://github.com/ohnonoyesyes/CVE-2021-43267

• CVE-2021-42008 Linux kernel越界写入权限提升漏洞

  • 漏洞影响版本:2.1.94 <= Linux kernel <= 5.13.3
  • 漏洞介绍及修复建议:https://www.jianshu.com/p/d4d2874ed356
  • POC/EXP:https://github.com/0xdevil/CVE-2021-42008

• CVE-2021-33909 Linux kernel本地提权漏洞

  • 漏洞影响版本:3.16 <= Linux kernel <= 5.13.3
  • 漏洞介绍及修复建议:https://www.4hou.com/posts/lXGJ
  • POC/EXP:https://github.com/Liang2580/CVE-2021-33909

• CVE-2021-31440 Linux内核eBPF提权漏洞

  • 漏洞影响版本:Linux kernel >= 5.7
  • 漏洞介绍及修复建议:https://www.anquanke.com/post/id/242567
  • POC/EXP:暂无

• CVE-2021-22555 Linux Netfilter越界写提权漏洞

  • 漏洞影响版本:2.6.19-rc1 <= Linux Kernel
  • 漏洞介绍及修复建议:https://www.anquanke.com/post/id/251515
  • POC/EXP:https://github.com/google/security-research/blob/master/pocs/linux/cve-2021-22555/exploit.c

• CVE-2021-4204 Linux kernel权限提升漏洞

  • 漏洞影响版本:5.8 <= Linux Kernel <= 5.16
  • 漏洞介绍及修复建议:http://www.cnnvd.org.cn/web/xxk/ldxqById.tag?CNNVD=CNNVD-202201-897
  • POC/EXP:https://github.com/tr3ee/CVE-2021-4204

• CVE-2021-4034 pkexec本地提权漏洞

  • 漏洞影响版本:大多数主流linux系统均受影响
  • 漏洞介绍及修复建议:https://cert.360.cn/warning/detail?id=25d7a6ec96c91ca4e4238fd10da2c778
  • POC/EXP:https://github.com/EstamelGG/CVE-2021-4032-NoGCC/releases/tag/v1.0

• CVE-2021-3560 Polkit权限提升漏洞

  • 漏洞影响版本:RHEL8 ｜ Fedora21及更高版本 ｜ Debiantesting("bullseye") ｜ Ubuntu20.04
  • 漏洞介绍及修复建议:https://www.freebuf.com/vuls/281081.html
  • POC/EXP:https://github.com/Almorabea/Polkit-exploit

• CVE-2021-3493 Linux kernel本地提权漏洞

  • 漏洞影响版本:Ubuntu 20.10 | Ubuntu 20.04 LTS | Ubuntu 18.04 LTS | Ubuntu 16.04 LTS | Ubuntu 14.04 ESM
  • 漏洞介绍及修复建议:https://mp.weixin.qq.com/s/D2LM7OUvbiNYXfPG-peU3A
  • POC/EXP:https://github.com/briskets/CVE-2021-3493

• CVE-2021-3490 Linux_LPE_eBPF本地提权漏洞

  • 漏洞影响版本:Ubuntu 20.10(Groovy Gorilla)kernels 5.8.0(25.26)-5.8.0(52.58) | Ubuntu 21.04(Hirsute Hippo)5.11.0(16.17)
  • 漏洞介绍及修复建议:https://www.graplsecurity.com/post/kernel-pwning-with-ebpf-a-love-story
  • POC/EXP:https://github.com/chompie1337/Linux_LPE_eBPF_CVE-2021-3490

• CVE-2021-3156 Sudo堆缓冲区溢出提权漏洞

  • 漏洞影响版本:Sudo 1.8.2-1.8.31p2 | Sudo 1.9.0-1.9.5p1
  • 漏洞介绍及修复建议:https://www.freebuf.com/vuls/270839.html
  • POC/EXP:https://github.com/mohinparamasivam/Sudo-1.8.31-Root-Exploit

• CVE-2020-27194 Linux内核eBPF权限提升漏洞

  • 漏洞影响版本:5.7 <= Linux kernel <= 5.8.14
  • 漏洞介绍及修复建议:http://official.hnyongxu.com:417/mobile/SecurityIncidents/124.html
  • POC/EXP:https://github.com/xmzyshypnc/CVE-2020-27194

• CVE-2020-8835 eBPF任意读写提权漏洞

  • 漏洞影响版本:5.4.7 <= Linux Kernel < 5.4.x | 5.5.0 <= Linux Kernel
  • 漏洞介绍及修复建议:https://nvd.nist.gov/vuln/detail/CVE-2020-8835
  • POC/EXP:https://github.com/zilong3033/CVE-2020-8835

• CVE-2019-15666 xfrm UAF 8字节写NULL提权漏洞

  • 漏洞影响版本:Linux Kernel < 5.0.19
  • 漏洞介绍及修复建议:https://www.anquanke.com/post/id/253234
  • POC/EXP:https://github.com/bsauce/kernel-exploit-factory/blob/main/CVE-2019-15666/exp.c

• CVE-2019-14287 sudo权限绕过提权漏洞

  • 漏洞影响版本:sudo < 1.8.28
  • 漏洞介绍及修复建议:https://cloud.tencent.com/developer/article/1553933
  • POC/EXP:https://github.com/n0w4n/CVE-2019-14287

• CVE-2019-13272 Linux本地内核提权漏洞

  • 漏洞影响版本:Linux Kernel < 5.1.17
  • 漏洞介绍及修复建议:https://cloud.tencent.com/developer/article/1528508
  • POC/EXP:https://github.com/bcoles/kernel-exploits/tree/master/CVE-2019-13272

• CVE-2019-7304 Ubuntu Linux权限提升漏洞

  • 漏洞影响版本:Ubuntu 18.10 | Ubuntu 18.04 LTS | Ubuntu 16.04 LTS | Ubuntu 14.04 LTS
  • 漏洞介绍及修复建议:https://cloud.tencent.com/developer/article/1512126
  • POC/EXP:https://github.com/initstring/dirty_sock

• CVE-2018-1000001 Glibc本地提权漏洞

  • 漏洞影响版本:glibc <= 2.26
  • 漏洞介绍及修复建议:https://www.anquanke.com/post/id/205197
  • POC/EXP:https://github.com/5H311-1NJ3C706/local-root-exploits/tree/master/linux/CVE-2018-1000001

• CVE-2018-18955 Linux内核提权漏洞

  • 漏洞影响版本:4.15.x < Linux Kernel < 4.19.2
  • 漏洞介绍及修复建议:https://www.freebuf.com/vuls/197122.html
  • POC/EXP:https://www.exploit-db.com/exploits/45886

• CVE-2018-17182 Linux 内核VMA-UAF提权漏洞

  • 漏洞影响版本:Linux kernel <= 4.18.8
  • 漏洞介绍及修复建议:https://www.cnblogs.com/backlion/p/9729914.html
  • POC/EXP:https://github.com/backlion/CVE-2018-17182

• CVE-2018-5333 kernel exploit空指针引用提权漏洞

  • 漏洞影响版本:Linux kernel <= 4.14.13
  • 漏洞介绍及修复建议:https://blog.csdn.net/panhewu9919/article/details/119153052
  • POC/EXP:https://github.com/bcoles/kernel-exploits/blob/master/CVE-2018-5333/cve-2018-5333.c

• CVE-2017-1000405 Huge Dirty COW本地提权漏洞

  • 漏洞影响版本:2.6.38 <= Linux kernel <= 4.14
  • 漏洞介绍及修复建议:https://www.freebuf.com/column/203162.html
  • POC/EXP:https://github.com/bindecy/HugeDirtyCowPOC

• CVE-2017-1000367 Sudo本地提权漏洞

  • 漏洞影响版本:1.8.6p7 <= Sudo <= 1.8.20
  • 漏洞介绍及修复建议:https://help.aliyun.com/document_detail/54251.html
  • POC/EXP:https://github.com/lexfo/cve-2017-11176/blob/master/cve-2017-11176.c

• CVE–2017–1000253 Linux PIE/stack内存破坏本地提权漏洞

  • 漏洞影响版本:CentOS < CentOS 7(1708版本) ｜ Red Hat < Red Hat Enterprise Linux 7(7.4) | CentOS 6.x | Red Hat 7.x
  • 漏洞介绍及修复建议:https://www.anquanke.com/post/id/86939
  • POC/EXP:暂无

• CVE-2017-1000112 UDP报文处理不一致导致堆溢出提权漏洞

  • 漏洞影响版本:**Linux kernel <= 4.12.6
  • 漏洞介绍及修复建议:https://cloud.tencent.com/developer/article/1396155
  • POC/EXP:https://github.com/ol0273st-s/CVE-2017-1000112-Adpated/blob/master/Exploit.c

• CVE-2017-16995 Linux Kernel本地提权漏洞

  • 漏洞影响版本:4.14 <= Linux Kernel <= 4.4
  • 漏洞介绍及修复建议:https://zhuanlan.zhihu.com/p/35247850
  • POC/EXP:https://github.com/Al1ex/CVE-2017-16995

• CVE-2017-16939 Linux Kernel本地权限提升漏洞

  • 漏洞影响版本:2.6.28 < Linux kernel < 4.14
  • 漏洞介绍及修复建议:https://www.anquanke.com/post/id/87327
  • POC/EXP:https://github.com/SecWiki/linux-kernel-exploits/tree/master/2017/CVE-2017-16939

• CVE-2017-11176 Linux kernel UAF本地权限提升漏洞

  • 漏洞影响版本:Linux kernel < 4.11.9
  • 漏洞介绍及修复建议:https://www.anquanke.com/post/id/247073
  • POC/EXP:https://github.com/lexfo/cve-2017-11176/blob/master/cve-2017-11176.c

• CVE-2017-7308 Linux内核提权漏洞

  • 漏洞影响版本:Linux kernel < 4.10.6
  • 漏洞介绍及修复建议:https://www.77169.net/html/161809.html
  • POC/EXP:https://www.exploit-db.com/exploits/41994

• CVE-2017-6074 Linux kernel DCCP double-free权限提升漏洞

  • 漏洞影响版本:Linux kernel > 2.6.18
  • 漏洞介绍及修复建议:https://www.anquanke.com/post/id/253478
  • POC/EXP:https://www.exploit-db.com/exploits/41458

• CVE-2017-5123 null任意地址写权限提升漏洞

  • 漏洞影响版本:Linux v4.14-rc5
  • 漏洞介绍及修复建议:https://bsauce.github.io/2021/05/31/CVE-2017-5123/#kernel-exploitcve-2017-5123-null%E4%BB%BB%E6%84%8F%E5%9C%B0%E5%9D%80%E5%86%99%E6%BC%8F%E6%B4%9E
  • POC/EXP:https://github.com/nongiach/CVE/tree/master/CVE-2017-5123/exploit

• CVE-2016-9793 本地提权漏洞

  • 漏洞影响版本:3.11 <= Linux kernel <= 4.8.13
  • 漏洞介绍及修复建议:http://cn-sec.com/archives/278454.html
  • POC/EXP:https://www.exploit-db.com/exploits/41995

• CVE-2016-5195 Linux脏牛本地提权漏洞

  • 漏洞影响版本:Linux kernel >= 2.6.22
  • 漏洞介绍及修复建议:https://www.jianshu.com/p/df72d1ee1e3e
  • POC/EXP:https://github.com/firefart/dirtycow/blob/master/dirty.c

• CVE-2016-4557 Linux-raspi2本地提权漏洞

  • 漏洞影响版本:Linux kernel <= 4.5.4
  • 漏洞介绍及修复建议:https://vuldb.com/zh/?id.87604
  • POC/EXP:https://www.exploit-db.com/exploits/39772

• CVE-2016-0728 Linux内核提权漏洞

  • 漏洞影响版本:Linux kernel >= 3.8.x
  • 漏洞介绍及修复建议:https://www.anquanke.com/post/id/83342
  • POC/EXP:https://github.com/SecWiki/linux-kernel-exploits/blob/master/2016/CVE-2016-0728/cve-2016-0728.c

• Linux Suid提权漏洞

  • 漏洞影响版本:配置了特殊权限的系统
  • 漏洞介绍及修复建议:https://www.freebuf.com/articles/web/272617.html
  • POC/EXP:https://jlkl.github.io/2020/01/27/Web_15/
  • 批量利用工具:https://github.com/Jewel591/suidcheck

• Linux Sudo提权漏洞

  • 漏洞影响版本:配置了sudoer文件特殊权限的系统
  • 漏洞介绍及修复建议:https://cloud.tencent.com/developer/article/1708368
  • POC/EXP:https://developer.aliyun.com/article/654362

Windows远程代码执行漏洞

• CVE-2022-34715 Windows Network File System 远程代码执行漏洞

  • 漏洞影响版本:Windows Server 2022(Server Core installation) ｜ Windows Server 2022
  • 漏洞介绍及修复建议:https://ti.qianxin.com/vulnerability/detail/251737
  • POC/EXP:暂无

• CVE-2022-34713 Microsoft Windows 支持诊断工具(MSDT)远程代码执行漏洞

  • 漏洞影响版本:Windows Server 2008 R2 | Windows RT 8.1 | Windows 8.1 | Windows 7 | Windows Server 2016 | Windows 10 | Windows 11 | Windows Server 2022 | Windows Server 2019 | Windows Server 2012 R2
  • 漏洞介绍及修复建议:https://ti.qianxin.com/vulnerability/detail/251679
  • POC/EXP:暂无

• CVE-2022-26809 Remote Procedure Call Runtime远程代码执行漏洞

  • 漏洞影响版本:Windows 7 | Windows 8.1 | Windows 10 | Windows 11 | Windows Server 2008 | Windows Server 2012 | Windows Server 2016 | Windows Server 2019 | Windows Server 2022
  • 漏洞介绍及修复建议:https://bbs.huaweicloud.com/forum/thread-184862-1-1.html
  • POC/EXP:https://github.com/genieyou/CVE-2022-26809-RCE