CVE-2026-15419

The silabser.sys driver for Silicon Labs CP210x devices (v11.5.0 and earlier) is vulnerable to kernel pool memory corruption caused by malformed packets from a malicious device. A local unprivileged user with physical access can trigger the flaw to achieve arbitrary code execution with escalated ...

CVE-2026-15419 CP210x Driver Memory Corruption results in Arbitrary Code Execution

In the silabser.sys driver for CP210x devices v11.5.0 and earlier, a local unprivileged user with a malicious device can use malformed packets to corrupt kernel pool memory, resulting in arbitrary code execution with escalated privileges...

CVE-2025-13390

CVE-2025-13390 WP Directory Kit The WP Directory Kit plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 1.4.4 due to incorrect implementation of the authentication algorithm in thewdkgenerateautologinlink function. This is due to the feature using a...

CVE-2026-2631

CVE-2026-2631 Datalogics Ecommerce Delivery – Datalogics PoC / Exploit Script: CVE-2026-2631.py Author: Khaled Alenazi Nxploited – Nxploited ZeroDay Hub Contact: Telegram: @Kxploit 🧬 Vulnerability Overview Plugin: Datalogics Ecommerce Delivery – Datalogics WordPress Affected Versions: 2.6.60...

CVE-2003-0358

CVE-2003-0358 Posting for historical reasons. snowcrash [email protected] https://github.com/snowcra5h/ Description Buffer overflow in 1 nethack 3.4.0 and earlier, and 2 falconseye 1.9.3 and earlier, which is based on nethack, allows local users to gain privileges via a long -s command line...

CVE-2023-49978

CVE-2023-49978 Customer Support System 1.0 - Incorrect Access Control Description : Incorrect access control in Customer Support System v1 allows non-administrator users to access administrative pages and execute actions reserved for administrators. Vulnerable Product Version : Customer Support...

climber

Climber Herramienta de auditoría automatizada para verificar configuraciones incorrectas en sistemas UNIX/Linux que pueden permitir la escalada local de privilegios. Dependencias python = 2.7 python-crypto python-mako python-paramiko Nota Climber necesita Exscript, un módulo de Python y un...

Active-Directory-Exploitation-Cheat-Sheet

Hoja de referencia de explotación de Active Directory Esta hoja de referencia contiene métodos comunes de enumeración y ataque para Active Directory de Windows. ℹ️ Este repositorio fue creado por Nikos Katsiopis y Nikos Vourdas. Esta hoja de referencia está inspirada en el repositorio...

CVE-2026-58635-PoC

CVE-2026-58635: Escalada de Privilegios Local mediante Braille del Narrador de Windows Prueba de concepto para CVE-2026-58635 , una vulnerabilidad de inyección de comandos en Braille del Narrador de Windows. Un usuario local autenticado puede abusar de un parámetro BrlAPI escribible para hacer qu...

vss-fr2system

vss-fr2system Two small tools that turn an arbitrary file read bug on Windows into a SYSTEM shell. vssfreeze/ — creates a Volume Shadow Copy as a standard user , then holds it open so you have time to read the SAM/SECURITY/SYSTEM hives out of it fr2system/ — takes the hives you copied out, decryp...

postenum

Postenum facilita la vida a los profesionales de seguridad al automatizar el proceso de recopilación de información crítica del sistema después de obtener un punto de apoyo. Ayuda a detectar rápidamente configuraciones incorrectas y oportunidades de escalada de privilegios, agilizando el camino...

CVE-2026-29923

CVE-2026-29923 - Ataque de Escalada de Privilegio Local a través de pstrip64.sys Descargo de responsabilidad: Este código se proporciona únicamente con fines educativos y de investigación defensiva. Fue escrito para profundizar en la comprensión de la explotación del kernel y ayudar a los...

CVE-2023-36723

CVE-2023-36723 This is PoC for arbitrary directory creation bug in Container Manager service. This PoC is not thoroughly tested so it may not even work most of the time it was enough for msrc to confirm vulnerability. In order to exploit this vulnerability a Windows Sandbox feature have to be...

iam-vulnerable

IAM Vulnerable Use Terraform para crear tu propio campo de pruebas de escalada de privilegios en AWS IAM vulnerable por diseño. IAM Vulnerable utiliza el binario de Terraform y tus credenciales de AWS para desplegar más de 250 recursos IAM en la cuenta de AWS que selecciones. En cuestión de...

CVE-2026-41651

🚨 CVE-2026-41651 — Pack2TheRoot Privilege Escalation Vulnerability in PackageKit TOCTOU Race Condition 📌 Overview CVE-2026-41651 is a local privilege escalation vulnerability affecting the PackageKit system service used in various Linux distributions. The vulnerability is caused by a Time-of-Chec...

CVE-2021-34486

CVE-2021-34486 Windows Etw LPE olny tested on windwos 20H2 x64 ed2k://|file|cnwindows10businesseditionsversion20h2updatedmarch2021x64dvdca61aaaa.iso|6074574848|B6741C4E4B09337471B02DC95E953992|/ thanks @yongchuank https://www.pixiepointsecurity.com/blog/advisory-cve-2021-34486.html...

badPods

Bad Pods A collection of manifests that create pods with different elevated privileges. Quickly demonstrate the impact of allowing security sensitive pod attributes like hostNetwork, hostPID, hostPath, hostIPC, and privileged. For additional background, see our blog post: Bad Pods: Kubernetes Pod...

CVE-2026-2005

CVE-2026-2005 - PostgreSQL pgcrypto Heap Overflow Exploit PoC exploit for a heap-based buffer overflow in the PostgreSQL pgcrypto extension's PGP session key parsing, leading to arbitrary memory read/write and privilege escalation to superuser. For full technical details, see the Zeroday Cloud...

CVE-2022-0847-DirtyPipe-Exploits

CVE-2022-0847-DirtyPipe-Exploits This repository offers a comprehensive collection of exploits and documentation specifically designed for penetration testers and red team professionals. It serves as a valuable resource for those aiming to exploit the Linux Dirty Pipe vulnerability effectively...

powerob

Powerob An on-the-fly Powershell script obfuscator meant for red team engagements. Built out of necessity. This only obfuscates functions and removes found in PowerShell scripts. Roadmap includes bfuscating variables. Pull requests and collaborative welcomed. About This was built out of the need ...