207675 matches found
CVE-2019-17658
Unquoted Service Path exploit in FortiClient CVE-2019-17658 FortiClient for Windows prior to 6.2.3 is vulnerable to an unquoted service path vulnerability. That may allow an attacker to gain elevated privileges via the FortiClientConsole executable service path. Base Score: 9.8 Vector:...
SNP-Assignment
SNP-Assignment Exploit work Privilege Escalation CVE-2017-1000112 as the privilege escalation is the mile stone of an attakers view,i try to do a little research on loval privilege escalation which is the basic step of whole privilege escalation unit. while im reading some articles 2016 and 2017...
CVE-2022-0847-DirtyPipe-Exploit
CVE-2022-0847-DirtyPipe-Exploit What is this This is Max Kellermann's proof of concept for Dirty Pipe, but modified to overwrite root's password field in /etc/passwd and restore after popping a root shell. Side Note: I do not claim any credit for finding this vulnerability or writing the proof of...
CVE-2011-1485-pkexec-exploit
CVE-2011-1485 Linux pkexec and polkitd 0.96 race condition privilege escalation exploit. Developed in 2011 by Antonius ev1lut10n / w1sdom...
Ivanti-Pulse_VPN-Client_Exploit-CVE-2023-35080_Privilege-escalation
Ivanti/Pulse VPN Client Exploit of CVE-2023-35080 leading to a privilege escalation Code related to the exploitation of the CVE-2023-35080 which leverages a write primitive in the Ivanti/Pulse VPN client kernel driver in Windows. The write primitive conducts to a privilege escalation. The exploit...
CVE-2026-41651-analysis
CVE-2026-41651 — Pack2TheRoot Analysis PackageKit Local Privilege Escalation TOCTOU Race Condition CVSS v3.1: 8.8 HIGH | CWE-367 | Published: 2026-04-22 📌 Overview This repository compiles a personal analysis report and research material on the PackageKit local privilege escalation vulnerability...
MySQL-Fu.rb
MySQL-Fu.rb MySQL-Fu is a Ruby based MySQL Client Script I wrote. It does most of the stuff a normal MySQL client might do: SQL Shell, Update/Delete/Drop Database/Table, Add/Delete Users, Dump Databases/Table w/ option for gzip...... Plus a few extra options to make life a little easier for...
KINGSOFT-WPS-Office-LPE
JVN Advisory https://jvn.jp/en/vu/JVNVU90673830/ The following CVE number have been assigned: CVE-2022-25943 KINGSOFT WPS Office LPE WPS Office is an office suite for Microsoft Windows, macOS, Linux, iOS, Android, and HarmonyOS developed by Zhuhai-based Chinese software developer Kingsoft...
CVE-2024-57523.
CVE-2024-57523 - CSRF Vulnerability in Users.php - SourceCodester Packers and Movers Management System 1.0 Description This repository contains a Proof of Concept PoC for a Cross-Site Request Forgery CSRF vulnerability in the Packers and Movers Management System 1.0 by SourceCodester. The...
copyfail-rs
copyfail-rs Multi-vector PoC + paired detection for CVE-2026-31431 CopyFail. Includes a novel PAM auth-bypass vector that no other public PoC ships. Detection mode catches what AIDE / Wazuh / OSSEC / Tripwire structurally cannot. Single static binary. 108 KB. nostd musl. Demo root@kitploit:...
freebsd-CVE-2026-7270
Ref https://github.com/califio/publications/tree/main/MADBugs/freebsd-CVE-2026-7270 CVE-2026-7270 FreeBSD local privilege escalation viaexecargsadjustargs OOB memmove An operator-precedence bug in execargsadjustargs sys/kern/kernexec.c, present since 2013 lets any local user escalate to root on a...
CVE-2025-61228
CVE-2025-61228 Alert This issue appears to be worse than the developer suggests, so I don't want this part to be lost in the weeds. The developer noted on their blog: This can only happen if a program running on your system is looking for SuperDuper to perform an update, a real update is presente...
cve-2026-31431
CVE-2026-31431 — "Copy Fail": Linux Kernel algifaead Local Privilege Escalation CISA KEV | CVSS 7.8 HIGH | Affects Linux kernels 4.14 – early 2026 9 years Table of Contents 1. Executive Summary 2. Risk Assessment 3. Technical Deep Dive 4. Attack Methodology — Red Team 5. Detection & Incident...
Dirty-Pipe-Exploits
CVE-2022-0847 Exploits Dirty Pipe What is it ? Disclosed on March 7, 2022 by Max Kellerman2, CVE-2022-0847 is a vulnerability in the Linux kernel versions 5.8 to 5.16.11 that allows attackers to overwrite read-only or immutable files and escalate their privileges on the victim's system...
CVE-2026-68138
CVE-2026-68138: Linux qdisc rate-table race to local root This repository contains a proof-of-concept local privilege-escalation exploit for CVE-2026-68138 , a race in the Linux traffic-control rate-table code. In the tested QEMU environment, the PoC escalates from an ordinary process with outer...
CVE-2020-1054
CVE-2020-1054 Windows 7 LPE...
CVE-2022-26923
CVE-2022-26923 Description This vulnerability allowed a low-privileged user to escalate privileges to domain administrator in a default Active Directory environment with the Active Directory Certificate Services AD CS server role installed. It is mainly related to the Active Directory Certificate...
CVE-2024-48197
CVE-2024-48197 Reflected XSS in AudioCodes MP-202b Description Cross Site Scripting vulnerability in Audiocodes MP-202b v.4.4.3 allows a remote attacker to escalate privileges via the login page of the web interface. Additional Information N/A Vulnerability Type Cross Site Scripting XSS Reflected...
CVE-2020-11108-PoC
CVE-2020-11108-PoC Two PoCs are in this repo. cve-2020-11108-rce.py will give you a shell as the www-data user. root-cve-2020-11108-rce.py will give you a shell and escalate privileges to root. Note: This is destructive as we must overwrite teleporter.php. For a full explanation/writeup please se...