CVE-2026-31431---Copy-Fail-PoC

Description This repository contains an analysis of CVE-2026-31431 Copy Fail in the Linux kernel. It targets local privilege escalation LPE through page cache manipulation. Legal Notice This project is for educational and testing purposes only. Any unauthorized use is the sole responsibility of t...

CVE-2024-48990_needrestart

CVE-2024-48990 - Needrestart 3.7-3 Privilege Escalation Exploit Overview This repository contains an exploit for CVE-2024-48990, a privilege escalation vulnerability in Needrestart 3.7-3. The exploit leverages improper input handling to execute arbitrary code with elevated privileges. Affected...

Reproducing-CVE-2023-36802

Analysis of CVE-2023-36802 Welcome to my write‑up & walkthrough of CVE‑2023‑36802, a local privilege escalation vulnerability in the Microsoft Kernel Streaming Server mskssrv.sys. What was this CVE about? The bug lived in mskssrv.sys, a driver that helps Windows handle multimedia streaming e.g.,...

CVE_2022_0847

CVE20220847 CVE-2022-0847: Linux Kernel Privilege Escalation Vulnerability POC A Simple Proof of concept to get root shell. root@kitploit: $ gcc cve20220847.c -o exploit $ ./exploit /etc/passwd 1 ootz: $ su rootz id uid=0root gid=0root groups=0root...

CVE-2025-45467

CVE-2025-45467: Insecure Firmware Verification in Unitree Go1 Summary A critical vulnerability CVE-2025-45467 has been discovered in Unitree Go1 robotic dog all firmware versions ≤ Go120220511, where the firmware update mechanism relies solely on insecure MD5 hash checks for integrity verificatio...

CVE-2025-32463_POC

CVE-2025-32463 – sudo chroot "chwoot" PoC This repository provides a minimal, reproducible environment to demonstrate the CVE‑2025‑32463 privilege‑escalation flaw in sudo’s chroot feature. Contents File| Purpose ---|--- Dockerfile| Builds an Ubuntu 24.04 image with vulnerable sudo 1.9.16p2 and...

Ubuntu-Gnome-privilege-escalation

Ubuntu-Gnome-privilege-escalation A bash script exploit of CVE-2020-16126/CVE-2020-16127 to achieve privilege escalation. 一个可以方便实现Ubuntu本地提权的bash脚本（利用CVE-2020-16126/CVE-2020-16127漏洞），要求处于Gnome环境。 Affect version Ubuntu 20.04.1\20.10\18.04\16.04 LTS and so on Usage curl...

CVE-2025-28062

CVE-2025-28062 — CSRF Vulnerability to Account Takeover in ERPNext 14.82.1 , 14.74.3 📌 Summary A Cross-Site Request Forgery CSRF vulnerability was discovered in ERPNext 14.82.1 and 14.74.3 , allowing attackers to perform unauthorized actions such as: User enumeration Account takeover password res...

CVE-2023-7261

CVE-2023-7261 Google Chrome Updater DosDevices Local Privilege Escalation Vulnerability Details: This vulnerability allows local attackers to escalate privileges on affected installations of Google Chrome. An attacker must first obtain the ability to execute low-privileged code on the target syst...

CVE-2022-0847-DirtyPipe-Exploits

CVE-2022-0847-DirtyPipe-Exploits A collection of exploits and documentation for penetration testers and red teamers that can be used to aid the exploitation of the Linux Dirty Pipe vulnerability. About The Vulnerability Dirty Pipe CVE-2022-0847 is a local privilege escalation vulnerability in the...

CVE-2026-21017-LDAP-Anonymous-Bind-Privilege-Escalation

CVE-2026-21017 – LDAP Anonymous Bind Privilege Escalation Program Code Python ldap3 sim root@kitploit: ldapanonsim.py - LDAP server allowing anonymous bind with write access from ldap3 import Server, Connection, ALL Simulated: real server would be misconfigured server =...

LPE---CVE-2020-0796

Usage: Make sure Python is installed, then run poc.py. Windows Kernel Write-What-Where CVE-2020-0796 Exploit Intended only for educational and testing in corporate environments. MasterSpl0it takes no responsibility for the code, use at your own risk. Rewritten CVE-2020-0796 Local Privilege...

CVE-2020-16125-Reproduction

CVE-2020-16125-Reproduction This repository is aimed at reproducing the attack . Description : Its original name is “Ubuntu gdm3 privilege escalation” , and it is found by a Github security researcher named Kevin Backhouse . Its CVSS score is 4.6/10 medium and the affected environment is Ubuntu...

cve-2022-0847dirtypipe-exploit

cve-2022-0847dirtypipe-exploit...

CVE-2025-48595-Android-Framework-Integer-Overflow-

CVE-2025-48595 - Android Framework Integer Overflow Vulnerability Description CVE-2025-48595 is an integer overflow vulnerability in multiple locations of the Android Framework. This flaw allows code execution leading to local privilege escalation without requiring additional execution privileges...

CVE-2021-33909

CVE-2021-33909 Sequoia Writeup root@kitploit: gcc exploit.c -o exploit -lpthread -DBLOCKVIAUSERFAULTFD gcc exploit.hello.c -o exploit.hello -lpthread -lfuse -DFILEOFFSETBITS=64 root@kitploit: $ mkdir dir $ ./exploit $pwd/dir id...

page-table-exploitation

page-table-exploitation A demonstration of how page tables can be used to run arbitrary code in ring-0 and lead to a privesc. Uses CVE-2016-7255 as an example...

CVE-2026-19945

The WP Crowdfunding plugin for WordPress is vulnerable to stored cross-site scripting (XSS) via the first_name parameter in all versions up to and including 2.2.1 , caused by insufficient input sanitization and output escaping. An authenticated attacker with subscriber-level access or above can i...

CVE-2026-19945 WP Crowdfunding <= 2.2.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'first_name' Parameter

The WP Crowdfunding plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'firstname' parameter in all versions up to, and including, 2.2.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with subscriber-level...

CVE-2020-0796

CVE-2020-0796 Integer Overflow Vulnerability By inserting a value larger than what can be stored in the OriginalCompressedSegmentSize field, the variable cannot handle this value and unintentionally interprets it as a very small number or a negative value. This can cause unexpected behavior in th...