lxd-group-privesc-report

LXD Root Local Privilege Escalation to root via default lxd group membership and the lxd-installer package on Ubuntu. Demo runs on AWS EC2 Ubuntu Server 26.04 The bug is that Ubuntu Server 26.04's default install silently grants the primary user membership in the lxd group, a group that by LXD's...

CVE-2024-34313

CVE-2024-34313 Description VPL Jail System up to v4.0.2 was discovered to contain a Path Traversal vulnerability allowing arbitrary file overrides and thereby privilege escalation to root user. This vulnerability can be chained with CVE-2024-34312 to take over a Moodle instance remotely without a...

telnet_scan

Telnet Vulnerability Scanner CVE-2026-24061 & CVE-2026-32746 A Python-based security assessment tool that detects and where applicable exploits two critical vulnerabilities in GNU InetUtils telnetd: CVE-2026-24061 – Authentication bypass via USER environment variable injection CVSS 9.8...

CVE-2025-27591-below-

CVE-2025-27591 – Privilege Escalation in Below 1 Introduction Below is a Linux tool for recording and displaying system data such as hardware utilization and cgroup metrics. In versions prior to v0.9.0 , Below’s systemd service runs with root privileges and creates world-writable log directories...

PSSRoot

One-Click-Root program based on CVE-2016-5195 or "DirtyCOW"; this should work with the PlayStation Certified devices, but it may come in handy for other old android devices too; Tested on : Xperia Play Android 2.3; Kernel 2.6.32.9 Xperia S Android 4.1.2; Kernel 3.4.0+1.0.21100-313065 Sony Tablet ...

root-sonim-xp3800

Root Sonim XP3800 Root access for the Sonim XP3800. Two methods are available — choose whichever fits your situation. Root Manager App The Root Manager app exploits CVE-2019-2215 a binder use-after-free kernel vulnerability to gain root directly on the device. No computer, no bootloader unlock, n...

CVE-2023-27216

CVE-2023-27216 - DLink Router This document is my personal experience of me - a newbie into firmware reversing and exploiting. Scope For demonstration, we will analyze and reproduce CVE-2023-27216. CVE number: CVE-2023-27216 Vulnerability description: An issue found in D-Link DSL-3782 v.1.03 allo...

ROOT-APP-MAVEN-CVE-2025-52999 CVE-2025-52999 in com.fasterxml.jackson.core:jackson-core - Patched by Root

Root has patched CVE-2025-52999 in the com.fasterxml.jackson.core:jackson-core package for Root:Maven. Multiple fixed versions available...

Make-and-Break

Make-and-Break Create and exploit a vulnerable Virtual Machine Description: Built a custom Virtual Machine, running Ubuntu 18.04.1 and Webmin 1.810. Using CVE-2019-15107 to exploit a backdoor in the Linux System Administration Interface PROOF of CONCEPT --- Linux OS Ubuntu 18.04.1 will be deploye...

CVE-2024-32019-Netdata-ndsudo-Privilege-Escalation-PoC

CVE-2024-32019 Netdata ndsudo Privilege Escalation PoC Summary CVE-2024-32019 is a local privilege-escalation flaw in Netdata’s SUID helper ndsudo that lets a local user execute arbitrary programs as root via an untrusted search path PATH hijacking. The issue exists because ndsudo restricts comma...

cve-2010-3847

CVE-2010-3847 script Meant to automate the exploit discussed in http://marc.info/?l=full-disclosure&m=128776663124692&w=2. Tested on CentOS 5 x86. The DSO it outputs is compiled from the following code: include include include void attributeconstructor init setuid0; system"/bin/bash"; Usage...

TerraMaster-TOS-CVE-2020-15568

TerraMaster TOS CVE-2020-15568 Repository for CVE-2020-15568 Metasploit module Vulnerable Application Description A dynamic class method invocation vulnerability exists in file include/exportUser.php which leads to executing remote commands on TerraMaster devices with root privileges. The...

CVE-2017-1000367

CVE-2017-1000367 We discovered a vulnerability in Sudo’s getprocessttyname for Linux: this function opens “/proc/pid/stat” man proc and reads the device number of the tty from field 7 ttynr. Unfortunately, these fields are space-separated and field 2 comm, the filename of the command can contain...

web-traffic-generator

web-traffic-generator A quick and dirty HTTP/S "organic" traffic generator. About Just a simple poorly written Python script that aimlessly "browses" the internet by starting at pre-defined ROOTURLS and randomly "clicking" links on pages until the pre-defined MAXDEPTH is met. I created this as a...

ROOT-APP-NPM-GHSA-W2VW-W76X-QR89 GHSA-w2vw-w76x-qr89 in nx - Patched by Root

Root has patched GHSA-w2vw-w76x-qr89 in the nx package for Root:npm. Multiple fixed versions available...

omae-wa-cheese-da

omae-wa-cheese-da Image GPU arbitrary physical R/W CVE-2025-21479 - KASLR leak - SELinux permissive - RKP-safe init-hook root server & DEFEX bypass custom binary exec LDPRELOAD It takes about 6 mins.. Be patient. I'll optimize it later. Tested devices Galaxy Z Flip 5 SM-F731N Firmware:...

ROOT-OS-DEBIAN-13-CVE-2026-66046 CVE-2026-66046 in expat - Patched by Root

Root has patched CVE-2026-66046 in the expat package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2026-56132 CVE-2026-56132 in expat - Patched by Root

Root has patched CVE-2026-56132 in the expat package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2026-41080 CVE-2026-41080 in expat - Patched by Root

Root has patched CVE-2026-41080 in the expat package for Root:Debian:12. Multiple fixed versions available...

cve-2021-4034

cve-2021-4034 PoC for cve-2021-4034 Based on the PoC by https://haxx.in: https://haxx.in/files/blasty-vs-pkexec.c. Probably he's https://github.com/blasty?! I don't know. With a little help from https://github.com/daimoniac How to use? Compile cve-2021-4034.c gcc -Wall cve-2021-4034.c -o...