PoC Archive PoC Archive

tag

SYSTEM-Shell

  • CVE-2026-50656 binary HIGH 7.8 EPSS 11%

    RoguePlanet — Windows Defender LPE via ISO Mount + Task Scheduler Race Condition

    RoguePlanet is a local privilege escalation exploit for Windows 10 and 11 that abuses a race condition in Windows Defender's scan pipeline. The exploit mounts an attacker-controlled ISO image via the VirtualDisk API, plants an EICAR-like trigger file inside…

    Unpatched 2026-06-10
  • CVE-2020-17103 binary HIGH 7.8 EPSS 27%

    MiniPlasma - Windows Cloud Files Mini Filter Driver LPE (CVE-2020-17103)

    MiniPlasma is a fully weaponized Windows LPE that exploits a race condition in cldflrt!HsmOsBlockPlaceholderAccess inside cldflt.sys — the same vulnerability originally discovered by James Forshaw (Google Project Zero) and reported as CVE-2020-17103 in 2020.…

    Patched 2026-05-15