CVE-2022-29063

CVE-2022-29063: Java Deserialization via RMI Connection in Apache OfBiz The OfBiz Solr plugin is configured by default to automatically make a RMI request on localhost, port 1099. By hosting a malicious RMI server on localhost, an attacker may exploit this behavior, at server start-up or on a...

CVE-2022-23862

CVE-2022-23862: Local Privilege Escalation via Unauthenticated JMX in YSoft SafeQ The SafeQ JMX service running on port 9696 is vulnerable to JMX MLet attacks. Because the service did not enforce authentication and was running under the “NT Authority\System” user, we were able to use the...

CVE-2021-20253

CVE-2021-20253: Privilege Escalation via Job Isolation Escape in Ansible Tower A flaw was found in ansible-tower. The default installation is vulnerable to Job Isolation escape allowing an attacker to elevate the privilege from a low privileged user to the awx user from outside the isolated...

Juicy-Potato-x86

Juicy-Potato-x86 Juicy Potato para Windows x86 Esta es una versión del Juicy Potato de ohpe, exploit de escalada de privilegios, modificada para Windows x86. Conservé la mayor parte del código posible, haciendo los pequeños cambios necesarios para compilar para Windows x86. Probado con éxito en...

CVE-2021-27965

CVE-2021-27965 Simple PoC for exploiting CVE-2021-27965 for LPE by spawning system cmd. https://vulners.com/cve/CVE-2021-27965 An issue was discovered in signed MICSYS windows driver MsIo64.sys which may lead to compromisation of whole local system. Driver's ioctl dispatch routine suffers from...

rootkit

Rootkit de Linux Un rootkit simple para el kernel de Linux, escrito por diversión, no por maldad. Funcionalidad El rootkit puede hacer lo siguiente: Otorgar privilegios de root a un proceso en espacio de usuario Ocultar procesos por PID Revelar un proceso previamente oculto por PID Ocultar archiv...

CVE-2021-3560-Polkit-Privilege-Escalation

CVE-2021-3560-Polkit-Privilege-Escalation by Mark, Qingchen Yu To build the container with root@kitploit: docker build -t . To run the container root@kitploit: docker run -it 1. start with start.sh 2. Measura Execution Time: Note the 'real' time and calculate half of it. root@kitploit: time...

CVE-2026-43494-PinTheft-PoC

SLEY — PinTheft PoC CVE-2026-43494 Proof of concept — uid=1000raken → uid=0root after ./sley on WSL2 6.6.87.2-microsoft-standard-WSL2 Single-file proof-of-concept for CVE-2026-43494 PinTheft: a Linux kernel local privilege escalation that chains an RDS zerocopy reference-count bug with iouring...

CVE-2025-27237

CVE-2025-27237 Local privilege escalation vulnerability in Zabbix Agent/Agent2 for Windows via OpenSSL configuration file hijacking. Overview Field| Value ---|--- CVE ID| CVE-2025-27237 CVSS v4.0| 7.3 HIGH CWE| CWE-427: Uncontrolled Search Path Element Type| Local Privilege Escalation Vendor|...

CVE-2024-25277

CVE-2024-25277 discovered on MW45APT02.0002 Resources and PoCs This repo serves as collection of scripts and PoCs gathered during analysis and discovery of CVE-2024-25277. You can read more about the finding on:...

CVE-2026-20245

🚨 CVE-2026-20245 - Cisco Catalyst SD-WAN Manager Privilege Escalation Authenticated Privilege Escalation via Crafted File Upload A vulnerability affecting Cisco Catalyst SD-WAN Manager that allows authenticated attackers with administrative privileges to execute arbitrary commands as root. 📖...

Mailcow-CVE-2022-31245

Mailcow CVE-2022-31245 CVE-2022-31245: RCE and Domain Admin privilege escalation for Mailcow. Including POC. Reported and fixed: 2022-05 Patched Version: https://github.com/mailcow/mailcow-dockerized/releases/tag/2022-05d CVE: https://vulners.com/cve/CVE-2022-31245 CVE-2022-31245: Command...

CVE-Writeups

CVE-Writeups Security vulnerability research writeups. CVE-2026-50402: Windows NTFS Elevation of Privilege CVSS 7.8...

GameOverlayFS

This script exploit the CVE-2023-2640 and CVE-2023-32629 for vulnerability on OverlayFS that affected some versions of Ubuntu. Tested on Ubuntu 20.04 with kernel 5.4.0. How to Use Download the file Gameoverlay.sh and, using a regular user not root, change the permissions for execution: chmod +x...

CVE-2022-0847

CVE-2022-0847 Original link https://dirtypipe.cm4all.com/ Usage gcc exploit.cpp -o exploit ./exploitIt will spawn a root shell Vulnerability description This is CVE-2022-0847, a vulnerability in the Linux kernel since version 5.8 that allows overwriting data in arbitrary read-only files. This lea...

CVE-2025-2304

Camaleon CMS 2.9.0 – Authenticated Privilege Escalation Role Change + Optional S3 Config Leak Target: Camaleon CMS v2.9.0 Type: Authenticated privilege escalation via mass-assignment in updatedajax role field Extras: Optional extraction of S3 configuration from the admin settings page if the...

CVE-2025-6019

CVE-2025-6019 PoC Simple proof-of-concept for a UDisks2 XFS resize privilege escalation. Files createpayload.sh: Builds an XFS image with a SUID rootbash payload. exploit.sh: Triggers the resize path and launches the SUID shell. Requirements mkfs.xfs, udisksctl, gdbus, loginctl An allowactive...

copyfail-rs

copyfail-rs Multi-vector PoC + paired detection for CVE-2026-31431 CopyFail. Includes a novel PAM auth-bypass vector that no other public PoC ships. Detection mode catches what AIDE / Wazuh / OSSEC / Tripwire structurally cannot. Single static binary. 108 KB. nostd musl. Demo root@kitploit:...

CVE-2025-27591

CVE-2025-27591 introduction below versions v0.9.0 are vulnerable to a local privilege escalation vulnerability duo to the fact that the program creates a world-writable log file, an a world writable log file instead, the attacker can replace the log file with a symblink to any system-critical fil...

EUVD-2026-78161

Concrete CMS 9.0.0 through 9.5.3 is vulnerable to stored XSS via the custom page alias name customAliasName because the Edit Alias dialog applied only trim to the submitted value and performed no input neutralization. An authenticated user holding canWrite editor permission on a page could store ...