15855 matches found
cve-2021-4034
cve-2021-4034 PoC for cve-2021-4034 Based on the PoC by https://haxx.in: https://haxx.in/files/blasty-vs-pkexec.c. Probably he's https://github.com/blasty?! I don't know. With a little help from https://github.com/daimoniac How to use? Compile cve-2021-4034.c gcc -Wall cve-2021-4034.c -o...
opace6-cve-2026-64560
OnePlus Ace 6 Temporary Root Tool Obtain temporary root privileges for the current boot session on OnePlus Ace 6 via CVE-2026-64560 Linux kernel POSIX CPU timer UAF vulnerability. Invalidated after reboot, does not modify system partitions. !WARNING May cause device reboot or data loss. Use only ...
CVE-2021-3560
Polkit D-Bus Authentication Bypass Exploit A vulnerability exists within the polkit system service that can be leveraged by a local, unprivileged attacker to perform privileged operations. In order to leverage the vulnerability, the attacker invokes a method over D-Bus and kills the client proces...
MySQL-Remote-Root-Code-Execution
MySQL-Remote-Root-Code-Execution Usage python rcemysql.py -dbuser -dbpass -dbname -dbhost -mycnf...
CVE-2024-3400-Palo-Alto-OS-Command-Injection
Steps : 1. Check whether file 0xr2r.txt is present on device by running below get request or We can verify same by openinig https://domain.com/global-protect/portal/images/0xr2r.txt Url in browser if you get 404 response that means file is not present. POST /ssl-vpn/hipreport.esp HTTP/1.1 Host:...
vsftpd2.3.4PyExploit
vsftpd2.3.4PyExploit An exploit to get root in vsftpd 2.3.4 CVE-2011-2523 written in python Usage: ./exploit.py $VictimIPaddress Attention! The exploit open a shell that it is not reverse. I recommend to open a reverse shell after the exploit. I didnt do it here because i didnt want to assume wha...
gameoverlay
Gameoverlay shell code for privilege escalation root on UBUNTU. Ubuntu: 23.04 22.10 22.04 not v5.15.0 20.04 v.5.4.0 for 32629 18.04 v.5.4.0 for 32629 run with ./overlay.sh...
CVE-2021-3560
Polkit Vulnerability - CVE-2021-3560 📕 Introduction In 2021, a researcher named Kevin BackHouse discovered a privilege escalation vulnerability in the polkit utility. however, not all linux versions are vulnerable to polkit. Below is an example of a vulnerable version; Red Hat Enterprise Linux 8...
SUDO-privilege-escalation
SUDO Privilege Escalation Overview: This project demonstrates the exploitation of the Sudo privilege escalation vulnerability CVE-2023-22809. The objective is to simulate how an attacker can gain unauthorized root access by exploiting this vulnerability in a controlled environment. Technologies...
CVE-2020-9470
What's this Wing FTP Server 6.2.5 - Privilege Escalation Introduction A weakness in the handling of HTTP sessions within Wing FTP Server allows any local user to escalate privileges to root on Linux, MacOS, and Solaris. Exploitation is contingent on an already-established administrative session. ...
CVE-2024-33775
CVE Discovered by: K. Wahab NeoX Vulnerability Details: Product: Nagios XI Version 2024R1.01 Vulnerability: Privilege Escalation from Users "NAGIOS" or "APACHE" Result: Full root access on the target system CVE: https://vulners.com/cve/CVE-2024-33775 Exploit: RSS Dashlet is used in this example...
CVE-2019-14287-demo
CVE-2019-14287 Demo Container This is a container built for demonstration purposes that has a version of the sudo command which is vulnerable to CVE-2019-14287 https://www.sudo.ws/alerts/minus1uid.html. This container can be run with: docker run -ti cashwilliams/cve-2019-14287-demo Configuration...
CVE-2019-5736-PoC
CVE-2019-5736-PoC PoC for CVE-2019-5736 Created with help from @singe, @cablethief, and @feexd Tested on Ubuntu 18.04, Debian 9, and Arch Linux. Docker versions 18.09.1-ce and 18.03.1-ce. This PoC does not currently work with Ubuntu 16.04 and CentOS. Go checkout the exploit code from Dragon Secto...
CVE-2021-4034
CVE-2021-4034 pkexec The use of this python script exploits the vulnerability in the pkexec file to gain root access without providing credentials · Detects if the binary has SUID privileges, in which case it is vulnerable usuario@gatogamer $ ls -la /usr/bin/pkexec .rwsr-xr-x 1 root root...
CVE-2019-18634
SUDO VULNERABILITY CVE-2019-18634 Exploit developed in Python for Sudo vulnerability BSS overflow CVE-2019-18634. For studying reasons USE python run.py Credits https://github.com/Plazmaz/CVE-2019-18634 https://bestwing.me/CVE-2019-18634-analysis.html...
CVE-2025-32463_chwoot
🛠️ CVE-2025-32463chwoot - Securely Handle Privileges in Linux 📋 Overview CVE-2025-32463chwoot helps you understand and deal with a specific security vulnerability related to privilege escalation in Linux systems. This tool allows users to explore and test the escalation of privilege to the root...
cve-2026-41940-PoC
CVE-2026-41940 ⚠ This tool is created solely for educational or bug bounty purpose only. Unauthorized use outside of controlled environments is strictly prohibited. Description A tool for exploiting CVE-2026-41940, a critical authentication bypass in cPanel & WHM CVSS 10.0, allowing unauthenticat...
YeaLink DM 3.6.0.20 - Remote Command Injection
Yealink Device Management DM 3.6.0.20 allows command injection as root via the /sm/api/v1/firewall/zone/services URI, without authentication. id: CVE-2021-27561 info: name: YeaLink DM 3.6.0.20 - Remote Command Injection author: shifacyclewala,hackergautam severity: critical description: Yealink...
CyberSecurity-Pentest-Lab
CyberSecurity Pentest Lab Personal penetration testing lab notes — hands-on exploitation, post-exploitation, and remediation write-ups against intentionally vulnerable machines Metasploitable 2, DockerLabs, done in isolated local environments as part of ongoing cybersecurity training...