mach_race

Mach Race OS X Local Privilege Escalation Exploit c fG! 2015, 2016, [email protected] - https://reverse.put.as A SUID, SIP, and binary entitlements universal OS X exploit CVE-2016-1757. Usage against a SUID binary: ./machraceserver /bin/ps compatmode for i in seq 0 1000000; do...

CVE-2024-10508

Unauthenticated Privilege Escalation via Password Recovery on RegistrationMagic = 6.0.2.6 Disclaimer : This information is provided for educational purposes only. This document aims to raise awareness of security vulnerabilities and should not be used for any unauthorized or malicious activities...

CVE-2021-36563

CVE-2021-36563 – Multiple Stored and Reflected XSS Application: CheckMK Management Web Console Software Revision: From 1.5.0 to 2.0.0p9 Attack type: Stored and Reflected XSS Solution: Update to Software Revision 2.0.0p10 or later Summary: The CheckMK management web console versions 1.5.0 to 2.0.0...

ovswrap-poc

ovswrap-poc CVE-2026-64531 OVSwrap PoC - Linux kernel Open vSwitch LPE; for patch validation and security research...

CVE-2026-87554

A flaw was found in Chromoting. This vulnerability, a race condition, allows a local attacker to execute arbitrary code outside of the sandbox environment. By exploiting this flaw with a local program, an attacker could gain unauthorized control over the affected system...

CVE-2017-1000367

CVE-2017-1000367 We discovered a vulnerability in Sudo’s getprocessttyname for Linux: this function opens “/proc/pid/stat” man proc and reads the device number of the tty from field 7 ttynr. Unfortunately, these fields are space-separated and field 2 comm, the filename of the command can contain...

CVE-2025-32463-PoC

CVE-2025-32463 – Privilege Escalation via Sudo chroot 📝 Overview CVE-2025-32463 is a local privilege escalation vulnerability affecting the sudo utility. It allows a regular user to escalate privileges to root by exploiting the -R option which sets a custom runtime root directory together with...

BloodHound-Tools

¿Qué es esto? Una colección de herramientas que se integran con BloodHound. Bloodhound es el estándar de facto que tanto los equipos de seguridad azules como rojos utilizan para encontrar rutas de movimiento lateral y escalado de privilegios que potencialmente podrían ser explotadas en un entorno...

CVE-2020-28874

This repository contains the description of the vulnerability found CVE-2020-28874 in ProjectSend r1270 release. Thank you to my colleagues from Entelgy Innotec Security for pushing me to improve! CVE-2020-28874: Privilege Escalation Description The vulnerability is in the reset password componen...

Important: Red Hat Security Advisory: kernel security, bug fix, and enhancement update

An update for kernel is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

kernel: Kernel: Privilege escalation via uninitialized data in vmci transport packet

A flaw was found in the Linux kernel's vsock/vmci component. A local attacker with low privileges could exploit a vulnerability where the vmcitransportpacket structure is not properly cleared during initialization. This can lead to the use of uninitialized data, potentially allowing for informati...

kernel: RDMA/mana: Validate rx_hash_key_len

A flaw was found in the Linux kernel's RDMA/mana component. A local user could exploit this vulnerability by providing an invalid rxhashkeylen value through a user-space API uAPI structure. This invalid value is then used in a memcpy operation without proper bounds checking, allowing the user to...

cve-2014-7912

cve-2014-7911 Exp for cve-2014-7911 which can get system privillage, based on most of the codes of others but different gadget 1. install the apk and click the button 2. system server will restart 3. will write system id100 into /data/1.txt...

CVE-2020-11493

CVE-2020-11492 Proof-of-Concept PoC for Docker Desktop for Windows privilege escalation vulnerability. This vulnerability was patched in Docker version 2.3.0.2 on May 11th, 2020. This PoC performs the following: creates a named pipe mimicking docker named pipe \.\pipe\dockerLifecycleServer, call...

RootPipe-Demo

RootPipe-Demo This is a Proof-of-Concept Mac Application that demonstrates the RootPipe Privilege Escalation Vulnerability CVE-2015-1130 identified by Emil Kvarnhammar from TrueSec This demo was written in Objective-C, ported from the Python PoC here: RootPipe Usage To use, simply give a path to ...

tools-for-CVE-2018-1000001

Tools for CVE-2018-1000001 Check vulnerability: root@kitploit: $ cat /proc/sys/kernel/unprivilegedusernsclone Output: root@kitploit: 1 If file "/proc/sys/kernel/unprivilegedusernsclone" does not exists: root@kitploit: $ unshare -mU /bin/sh -c "sleep 5" & /bin/sh -c "sleep 1; cd /proc/$!/cwd;...

CVE-2019-0803

CVE-2019-0803 Win32k Elevation of Privilege Poc Screenshot Reference steal Security token https://github.com/mwrlabs/CVE-2016-7255...

CVE-2025-48799

Description This is PoC for CVE-2025-48799, an elevation of privilege vulnerability in Windows Update service. This vulnability affects windows clients win11/win10 with at least 2 hard drives. When machine have multiple hard drives it is possible to change location where new content is saved usin...

CVE-2022-39959

CVE-2022-39959 Affected Vendor- Panini https://www.panini.com/en Affected Product - Panini Everest Engine Affected Version - 2.0.4 There is an Unquoted Service Path in Everest EngineEverestEngine.exe in version 2.0.4 on Windows. This allows an unauthorized local user to insert arbitrary code into...

CVE-2020-24030

CVE-2020-24030 Description ForLogic Qualiex v1 and v3 has weak token expiration. This allows remote unauthenticated privilege escalation and to access sensitive data via token reuse. Important Dates Announcement to Vendor: 2020-07-12 Public disclosure date: 2020-08-31 Vulnerability Type Incorrect...