https://www.helpnetsecurity.com/2025/01/28/bloodyad-active-directory-privilege-escalation/
BloodyAD: Open-source Active Directory privilege escalation framework - Help Net Security
Jan 28, 2025 - BloodyAD is an open-source Active Directory privilege escalation framework, often called the Swiss Army knife for AD privilege escalation.
open sourceactive directoryprivilege escalationbloodyad
https://csirt.sk/posts/tag/privilege-escalation.html
Privilege-escalation | CSIRT.SK
privilege escalationcsirtsk
https://cronjob-manager.com/linux-privilege-escalation-techniques-cron-jobs-tryhackme-linux-privesc/
Linux Privilege Escalation Techniques: Cron Jobs - TryHackMe Linux Privesc
Nov 30, 2024 - The analysis progresses to scrutinizing a particular script designed to overwrite files, assessing its permissions and the user groups associated with it.
linux privilege escalationcron jobstechniquestryhackme
https://cvereports.com/reports/CVE-2026-39386
CVE-2026-39386: CVE-2026-39386: Mass Assignment Privilege Escalation in Neko WebRTC Browser |...
Apr 21, 2026 - Daily high-severity CVE reports defined by AI. Comprehensive vulnerability analysis, attack flow diagrams, and remediation steps for security professionals.
mass assignmentprivilege escalationcve
https://xmcyber.com/blog/new-privilege-escalation-techniques-are-compromising-your-google-cloud-platform/
New Privilege Escalation Techniques are Compromising your Google Cloud Platform | XM Cyber
May 23, 2022 - Learn more about New Privilege Escalation Techniques are Compromising your Google Cloud Platform . Read more on XM Cyber website.
google cloud platformprivilege escalation
https://cvefeed.io/vuln/detail/CVE-2016-3131
CVE-2016-3131 - Cloudera CDH Privilege Escalation Governor
Nov 21, 2024 - Cloudera CDH before 5.6.1 allows authorization bypass via direct internal API calls.
privilege escalationcveclouderacdhgovernor
https://control-plane.io/posts/ill-let-myself-in-kubernetes-privilege-escalation-tactics/
I'll Let Myself In: Kubernetes Privilege Escalation Tactics
Jul 24, 2024 - I'll Let Myself In: Kubernetes Privilege Escalation Tactics
privilege escalationletkubernetestactics
https://mondetech.fr/etiquettes/exploits-privilege-escalation/
exploits privilege escalation - MondeTech.fr
privilege escalationexploitsfr
https://cvefeed.io/vuln/detail/CVE-2012-0709
CVE-2012-0709 - IBM DB2 SQL CREATE VARIABLE Privilege Escalation Vulnerability
Apr 29, 2026 - IBM DB2 9.5 before FP9, 9.7 through FP5, and 9.8 through FP4 does not properly check variables, which allows remote authenticated users to bypass intended...
privilege escalationcveibm
https://niklas-heringer.com/skills-lab/windows-privilege-escalation-02-privesc-paths/
Windows Privilege Escalation 02: Running through PrivEsc Paths from Zero
May 3, 2026 - Working through HackTheBox's Windows Privilege Escalation module as a beginner. Every token abuse, group membership exploit, and real mistake documented....
windows privilege escalationrunning throughpathszero
https://deals.newatlas.com/sales/the-complete-pentesting-privilege-escalation-course
The Complete Pentesting & Privilege Escalation Course | New Atlas Deals
the completeprivilege escalationcourse newpentestingatlas
https://www.securityscientist.net/blog/12-questions-and-answers-about-local-privilege-escalation-lpe/
Local Privilege Escalation (LPE): 12 Questions and Answers
Mar 23, 2026 - Local privilege escalation (LPE) is how attackers gain root or SYSTEM after initial access. Learn the top Windows and Linux techniques, key CVEs like Dirty...
privilege escalationlocallpequestionsanswers
https://advisories.gitlab.com/composer/typo3/cms/GHSA-v5jp-4h2p-j2p4/
Privilege Escalation in TYPO3 CMS | GitLab Advisory Database (GLAD)
GHSA-v5jp-4h2p-j2p4 Privilege Escalation in TYPO3 CMS: The workspace/ version preview link created by a privileged (backend) user could be abused to obtain...
privilege escalationcmsgitlabadvisorydatabase
https://aviatrix.ai/threat-research-center/windows-task-host-privilege-escalation-vulnerability-2025/
Windows Task Host Privilege Escalation Vulnerability (CVE-2025-60710) - 2025
CVE-2025-60710 is a privilege escalation vulnerability in Windows Task Host, allowing local attackers to gain SYSTEM privileges. Active exploitation reported...
privilege escalationwindowstaskhostvulnerability
https://www.cyberis.com/article/password-manager-privilege-escalation?from=/defence-law-enforcement
One Identity Secure Password Extension Privilege Escalation (CVE-2025-27582) | Cyberis Limited
Jul 14, 2025 - Cyberis has discovered a local privilege escalation (LPE) vulnerability - CVE-2025-27582 - in One Identity Secure Password Extension x64 v5.14.3.1, a component...
one identityprivilege escalation
https://rstforums.com/forum/tags/local%20privilege%20escalation/
Showing results for tags 'local privilege escalation'. - Romanian Security Team
privilege escalationshowingresultstagslocal
https://aviatrix.ai/threat-research-center/solarwinds-serv-u-2026-privilege-escalation-vulnerabilities/
SolarWinds Serv-U 2026 Privilege Escalation Vulnerabilities
Critical vulnerabilities in SolarWinds Serv-U could allow attackers to gain root access. Immediate patching is recommended to secure systems.
privilege escalationsolarwindsservu
https://attack.mitre.org/tactics/TA0004/
Privilege Escalation, Tactic TA0004 - Enterprise | MITRE ATT&CKĀ®
privilege escalationtacticenterprisemitreatt
https://support.lenovo.com/es/es/solutions/ps500076-lenovo-system-interface-foundation-privilege-escalation
Lenovo System Interface Foundation Privilege Escalation - Lenovo Support ES
Lenovo System Interface Foundation Privilege Escalation
system interfaceprivilege escalationlenovofoundationsupport
https://rewterz.com/threat-advisory/sonicwall-sma1000-zero-day-exploited-for-privilege-escalation
SonicWall SMA1000 Zero-Day Exploited for Privilege Escalation - Rewterz
Dec 19, 2025 - Proactive Defense: The Importance of Incident Response Planning in Cybersecurity
zero dayprivilege escalationsonicwallexploited
https://securityvulnerability.io/vulnerability/CVE-2026-24510
CVE-2026-24510 : Privilege Escalation Risk in Dell Alienware Command Center Software
Mar 11, 2026 - Learn about the privilege escalation vulnerability in Dell Alienware Command Center software and its implications. Explore CVE-2026-24510.
privilege escalation
https://www.sentinelone.com/vulnerability-database/cve-2025-57767/
CVE-2025-57767: Sangoma Asterisk Privilege Escalation Flaw
CVE-2025-57767 is a privilege escalation vulnerability in Sangoma Asterisk. Learn about its impact, affected versions, and mitigation methods.
privilege escalationcvesangomaasteriskflaw
https://www.cisco.com/c/en/us/support/docs/csa/cisco-sa-ucsm-afwae-mOgUfyLn.html
Cisco UCS Manager Software Privilege Escalation Vulnerability - Cisco
A vulnerability in the NX-OS CLI privilege levels of Cisco UCS Manager Software could allow an authenticated, local attacker with read-only privileges to...
cisco ucsprivilege escalationmanagersoftwarevulnerability
https://mailman.mit.edu/pipermail/krbdev/2006-August/004899.html
MITKRB-SA-2006-001: multiple local privilege escalation vulnerabilities
privilege escalationsamultiplelocalvulnerabilities
https://cvefeed.io/vuln/detail/CVE-2010-5274
CVE-2010-5274 - PKZIP Untrusted Search Path Privilege Escalation Vulnerability
Apr 29, 2026 - Untrusted search path vulnerability in PKZIP before 12.50.0014 allows local users to gain privileges via a Trojan horse dwmapi.dll file in the current working...
privilege escalationcveuntrustedsearchpath
https://malware.expert/vulnerability/wordpress-gdpr-compliance-plug-in-exploited-privilege-escalation-flaw/
Wordpress GDPR Compliance Plug-in exploited (Privilege Escalation Flaw)
Nov 18, 2018 - WordPress - WP GDPR Compliance plugin, was found to contain harmful vulnerabilities for privilege escalation that could allow for arbitrary code execution.
wordpress gdpr complianceplug inprivilege escalationexploitedflaw
https://academy.mydfir.com/courses/soc/lectures/53255686
Lab: MITRE ATT&CK - Privilege Escalation | MyDFIR Academy
With 8 chapters and 30+ hands-on labs tailored to security operations, I am focused on transforming you into a standout SOC analyst. Beyond tools, you'll...
privilege escalationlabmitreattck
https://www.linenum.sh/
LinEnum.sh - Scripted Local Linux Enumeration & Privilege Escalation Checks
Automated Linux enumeration and privilege escalation checks for penetration testers and security researchers. Quick identification of privilege escalation...
privilege escalationshscriptedlocallinux
https://cvefeed.io/vuln/detail/CVE-2019-19697
CVE-2019-19697 - Trend Micro Security 2019: Privilege Escalation Remote Code Execution
Nov 21, 2024 - An arbitrary code execution vulnerability exists in the Trend Micro Security 2019 (v15) consumer family of products which could allow an attacker to gain...
trend micro securityprivilege escalationremote codecve
https://research.averlon.ai/vulnerability-intelligence/cve/CVE-2026-6388
CVE-2026-6388: argocd-image-updater: ArgoCD Image Updater: Cross-Namespace Privilege Escalation via...
A flaw was found in ArgoCD Image Updater. This vulnerability allows an attacker, with permissions to create or modify an ImageUpdater resource in a...
privilege escalationcveargocdimage
https://docs.cloud.google.com/security-command-center/docs/findings/threats/yl2-suspicious-token-generation-cross-project-openid
Privilege Escalation: Suspicious Token Generation (cross-project OpenID token) | Security Command...
Learn more about 'Privilege Escalation: Suspicious Token Generation' threat findings.
privilege escalationsuspicioustokengenerationcross
https://docs.cloud.google.com/security-command-center/docs/findings/threats/cloud-run-abuse-sudo-for-privilege-escalation
Privilege Escalation: Abuse of Sudo For Privilege Escalation (CVE-2019-14287) | Security Command...
Learn more about 'Privilege Escalation: Abuse of Sudo For Privilege Escalation (CVE-2019-14287)' threat findings.
privilege escalationabusesudo
https://docs.stellarcyber.ai/6.5.x/Using/ML/Alert-Rule-Based-Suspicious_Azure_Kubernetes_Activity_Privilege_Escalation.htm
Rules Contributing to Suspicious Azure Kubernetes Activity: Privilege Escalation Alert
azure kubernetesprivilege escalationrulescontributingsuspicious
https://www.cloudvulndb.org/power-platform-privilege-escalation
Power Platform Privilege Escalation in Azure AD | cloudvulndb.org
Cloud vulnerabilities database - an open project to list all known cloud vulnerabilities and Cloud Service Provider security issues
power platformprivilege escalationazure ad
https://cybersec.th4ntis.com/courses/pnpt/windows-privilege-escalation
Windows Privilege Escalation | Th4ntis CyberSec
windows privilege escalationcybersec
https://www.miggo.io/vulnerability-database/cve/CVE-2023-26269
CVE-2023-26269: James JMX Privilege Escalation | Miggo
Apache James server privilege escalation in its default configuration grants local users administrative control via an unauthenticated JMX management service.
privilege escalationcvejamesjmx
https://kalilinuxtutorials.com/tag/local-privilege-escalation/
Local Privilege Escalation Archives - Kali Linux Tutorials
privilege escalationkali linuxlocalarchivestutorials
https://blog.0patch.com/2021/01/windows-installer-local-privilege.html
0patch Blog: Windows Installer Local Privilege Escalation 0day Gets a Micropatch
by Mitja Kolsek, the 0patch Team [Update 2/9/2021: February 2021 Windows Updates included an official fix for this vulnerability and ass...
windows installerprivilege escalationbloglocal
https://juggernaut-sec.com/category/windows-privilege-escalation/
Windows Privilege Escalation - Juggernaut Pentesting Blog
windows privilege escalationjuggernautpentestingblog
https://docs.cloud.google.com/security-command-center/docs/findings/threats/ai-anomalous-sa-delegation-impersonator-data-access
Privilege Escalation: Anomalous Service Account Impersonator for AI Data Access | Security Command...
Learn more about 'Privilege Escalation: Anomalous Service Account Impersonator for AI Data Access' threat findings.
privilege escalationservice account
https://advisories.gitlab.com/golang/github.com/kubernetes-csi/csi-proxy/CVE-2023-3893/
Kubernetes csi-proxy vulnerable to privilege escalation due to improper input validation | GitLab...
CVE-2023-3893 Kubernetes csi-proxy vulnerable to privilege escalation due to improper input validation: Kubernetes is vulnerable to privilege escalation when a...
privilege escalation
https://aardwolfsecurity.com/tag/windows-privilege-escalation/
Windows privilege escalation Archives - Aardwolf Security
windows privilege escalationarchivesaardwolfsecurity
https://securityvulnerability.io/vulnerability/CVE-2026-25770
CVE-2026-25770 : Privilege Escalation Vulnerability in Wazuh Manager by Wazuh
Mar 17, 2026 - Discover CVE-2026-25770, a vulnerability in Wazuh's cluster synchronization leading to privilege escalation and potential code execution.
privilege escalationcvevulnerabilitywazuhmanager
https://www.focusedhunts.com/blog/hunting/PhantomRPC-Windows-RPC-Privilege-Escalation
PhantomRPC: Privilege Escalation Detection | Focused Hunts
privilege escalationdetectionfocusedhunts
https://initblog.com/2019/dirty-sock/
Linux Privilege Escalation via snapd (dirty_sock exploit) | initblog.com
Feb 13, 2019 - In January 2019, I discovered a privilege escalation vulnerability in default installations of Ubuntu Linux. This was due to a bug in the snapd API, a default...
linux privilege escalationviasnapddirtysock
https://nyambush.app/en/blog/wp-acfe-privesc
CVE-2025-14533: ACF Extended Privilege Escalation (100K Sites)
Feb 17, 2026 - Unrestricted role assignment via form registration. Public PoC increases exploitation risk
privilege escalationcveacfextendedsites
https://hackingthe.cloud/gcp/exploitation/gcp_iam_privilege_escalation/
Privilege Escalation in Google Cloud Platform - Hacking The Cloud
Privilege escalation techniques for Google Cloud Platform (GCP)
google cloud platformprivilege escalationhacking
https://trixdxb.com/privilege-escalation-alert-0x3436cf21128b3f94c7b06e14f064baf9654eb7c6-administrative-vulnerability-debug-entry-exposed
PRIVILEGE ESCALATION ALERT: 0x3436cf21128b3f94c7b06e14f064baf9654eb7c6 :: Administrative...
May 6, 2026 - Verify ADMIN Terminal :: Triada Ethereum Auditor v2.5 AUDIT_ID: TRD-F9830EBB9CB1 Infrastructure Scan ADDRESS: 0x3436cf21128b3f94c7b06e14f064baf9654eb7c6...
privilege escalationalertadministrative
https://unit42.paloaltonetworks.com/privilege-escalation-llm-model-exfil-vertex-ai/
ModeLeak: Privilege Escalation to LLM Model Exfiltration in Vertex AI
New research reveals two vulnerabilities in Google's Vertex AI that may lead to privilege escalation or data theft through custom jobs or malicious models. New...
privilege escalationllmmodelexfiltrationvertex
https://www.wallarm.com/what/what-is-privilege-escalation-attack
What is Privilege Escalation Attack?
There is a range of different sql injection attacks that can occur and we will be discussing them in this article. Explore a vulnerability such as A1:Injection
what isprivilege escalationattack
https://www.sentinelone.com/vulnerability-database/cve-2026-39374/
CVE-2026-39374: Plane Privilege Escalation Vulnerability
CVE-2026-39374 is a privilege escalation vulnerability in Plane. Learn about its impact, affected versions, and mitigation methods.
privilege escalationcveplanevulnerability
https://advisories.gitlab.com/pypi/aws_advanced_python_wrapper/CVE-2025-12967/
AWS Advanced Python Wrapper: Privilege Escalation in Aurora PostgreSQL instance | GitLab Advisory...
CVE-2025-12967 AWS Advanced Python Wrapper: Privilege Escalation in Aurora PostgreSQL instance : Description of Vulnerability: An issue in AWS Wrappers for...
advanced pythonprivilege escalation
https://kashz.gitbook.io/kashz-jewels/os-linux/linux-privilege-escalation
linux-privilege-escalation | kashz-jewels
linux privilege escalationjewels
https://www.aldeid.com/wiki/Special:WhatLinksHere/Backtrack/Privilege-escalation/Spoofing
Pages that link to "Backtrack/Privilege-escalation/Spoofing" - aldeid
link toprivilege escalationpagesbacktrackspoofing
https://www.windows-active-directory.com/tracking-privilege-escalation-in-azure-ad.html
Tracking Privilege Escalation in Azure AD (Microsoft Entra ID)
Feb 17, 2026 - Tracking Privilege Escalation in Azure AD (Microsoft Entra ID) Privilege escalation in Microsoft Entra ID (formerly Azure AD) rarely looks like a single...
privilege escalationazure admicrosoft entratrackingid
https://www.adamcouch.co.uk/linux-privilege-escalation-setuid-nmap/
Linux Privilege Escalation with Setuid and Nmap
Dec 31, 2017 - In this post we learn how to find executable files that run in the context of root through the setuid flag and how we can abuse nmap to escalate privileges in...
linux privilege escalationnmap
https://www.sentinelone.com/vulnerability-database/cve-2025-6042/
CVE-2025-6042: Lisfinity Core Privilege Escalation Flaw
CVE-2025-6042 is a privilege escalation vulnerability in Lisfinity Core plugin for WordPress. Learn about its impact, affected versions, and mitigation methods.
privilege escalationcvecoreflaw
https://www.justus.pw/tags/privilege-escalation.html
Tag: Privilege Escalation - Justus Perlwitz
privilege escalationtagjustus
https://www.sentinelone.com/vulnerability-database/cve-2025-7326/
CVE-2025-7326: ASP.NET Core Privilege Escalation Flaw
CVE-2025-7326 is a privilege escalation vulnerability in EOL ASP.NET Core. Learn about its impact, affected versions, and mitigation methods.
asp net coreprivilege escalationcveflaw
https://hacktricks.xsx.tw/windows-hardening/windows-local-privilege-escalation
Windows Local Privilege Escalation | hacktricks
privilege escalationwindowslocal
https://hacking-kurse.de/tools/wpscan-privilege-escalation
wpscan-privilege-escalation.php
Privilege Escalation in WordPress-Pentest-Workflows mit WPScan: realistische Anwendung, typische Fehlannahmen, technische Grenzen, Auswertung von Funden und...
privilege escalationwpscanphp
https://www.exploit-db.com/exploits/46988
Pronestor Health Monitoring 8.1.11.0 - Privilege Escalation - Windows local Exploit
health monitoring
https://lists.debian.org/debian-security-announce/2010/msg00077.html
[SECURITY] [DSA 2037-1] New kdm packages fix privilege escalation
securitydsanewkdmpackages
https://advisories.gitlab.com/composer/ci4-cms-erp/ci4ms/CVE-2026-34564/
CI4MS: Menu Management (Pages) Full Account Takeover for All-Roles & Privilege-Escalation via...
https://www.incendium.rocks/posts/Windows-Privilege-Escalation-without-CA,-LDAPS-and-SPN-using-NTLMRelay2Self-with-RBCD/
Windows Privilege Escalation without CA, LDAPS and SPN using NTLMRelay2Self with RBCD | Remco van...
Dec 4, 2024 - Using NTLMRelay2self with RBCD and BloodyAD to escalate privileges on a Windows system with LDAPS being blocked on the domain controller.
windows privilege escalation
https://cvefeed.io/vuln/detail/CVE-2013-5987
CVE-2013-5987 - NVIDIA Graphics Driver Local Privilege Escalation
Apr 29, 2026 - Unspecified vulnerability in NVIDIA graphics driver Release 331, 325, 319, 310, and 304 allows local users to bypass intended access restrictions for the GPU...
cvenvidiagraphicsdriverlocal
https://thesheryar.com/how-to-audit-a-wordpress-plugin-for-xss-csrf-and-privilege-escalation-vulnerabilities/
How to audit a WordPress plugin for XSS, CSRF, and privilege escalation vulnerabilities? -...
May 5, 2026 - So, you want to audit a WordPress plugin for some serious security flaws like XSS, CSRF, and privilege escalation. Good call. In a nutshell, you're going to be...
how to audit
https://securityaffairs.com/191130/security/microsoft-out-of-band-updates-fixed-critical-asp-net-core-privilege-escalation-flaw.html
Microsoft out-of-band updates fixed critical ASP.NET Core privilege escalation flaw
Apr 22, 2026 - Microsoft fixed critical ASP.NET Core vulnerability, tracked as CVE-2026-40372 (CVSS score of 9.1), that lets attackers escalate privileges.
asp net core
https://advisories.gitlab.com/golang/github.com/rancher/rancher/CVE-2023-32197/
Rancher allows privilege escalation in Windows nodes due to Insecure Access Control Lists | GitLab...
CVE-2023-32197 Rancher allows privilege escalation in Windows nodes due to Insecure Access Control Lists: A vulnerability has been identified whereby Rancher...
https://cybernoz.com/new-voidstealer-variant-bypasses-chrome-abe-without-injection-or-privilege-escalation/
New VoidStealer Variant Bypasses Chrome ABE Without Injection or Privilege Escalation - Cybernoz
Mar 22, 2026 - A newly identified variant of the VoidStealer infostealer has drawn serious attention from the security community after it became the first malware known to...
https://tech-now.io/en/it-support-issues/security/how-to-stop-privilege-escalation-step-by-step-guide-to-limiting-unauthorized-access
How to Stop Privilege Escalation
Limit unauthorized access by stopping privilege escalation. Apply strict permissions and monitoring to ensure users cannot gain higher-level access beyond...
how to stopprivilegeescalation
https://www.nlcyber.com/all/news/microsoft-patches-critical-aspnet-core-cve-2026-40372-privilege-escalation-bug
Microsoft Patches Critical ASP.NET Core CVE-2026-40372 Privilege Escalation Bug
Microsoft has released out-of-band updates to address a security vulnerability in ASP.NET Core that could allow an attacker to escalate privileges. The vulnerab
asp net core
https://www.herodevs.com/blog-posts/cve-2026-5795-jetty-authentication-bypass-and-privilege-escalation-jaspiauthenticator
HeroDevs Blog | CVE-2026-5795: Jetty Authentication Bypass and Privilege Escalation...
CVE-2026-5795 is a CVSS 7.4 authentication bypass and privilege escalation vulnerability in Jetty's JASPIAuthenticator. Learn which versions are affected, how...
authentication bypassherodevsblogcve
https://www.resecurity.com/advisories/vulnerability/fortiwan-os-command-injection-leads-to-privilege-escalation
Resecurity | FortiWAN - OS command injection leads to privilege escalation
os command injectionresecurityfortiwanleadsprivilege
https://www.fairwinds.com/blog/fairwinds-insights-basics-tutorial-check-kubernetes-configuration-for-privilege-escalation
Fairwinds Insights Basics Tutorial: Check Kubernetes Configuration for Privilege Escalation
Fairwinds Insights identifies workloads in your clusters that have privilege escalation allowed and provides steps to remediate this issue.
fairwinds insightsbasicstutorialcheckkubernetes