CVE-2024-32019-PoC

CVE-2024-32019-PoC Bash script for Privilege Escalation via "ndsudo" Netdata Local Exploit Netdata Affected Versions = v1.45.0, = v1.44.0-60, v1.45.0-169 Vulnerability Description The "ndsudo" tool runs a restricted set of external commands, but the search paths are supplied by the "PATH"...

CVE-2026-24061

CVE-2026-24061 Telnet RCE Exploit - By SafeBreach Labs This script exploits the CVE-2026-24061 vulnerability in Telnet servers using a malformed USER environment variable. Usage Run the script with a target host: python telnetrce.py -p Arguments host: Target IP address or hostname required -p,...

CVE-2024-48990

CVE-2024-48990 Exploit Local Privilege Escalation in needrestart 3.8 via PYTHONPATH injection. How It Works 1. needrestart runs as root and scans all processes 2. Finds our Python process, reads PYTHONPATH=/tmp/.m from /proc/pid/environ 3. Executes Python as root with our malicious PYTHONPATH 4...

CVE-2024-48990

======================================================================== CVE-2024-48990 and CVE-2024-48992 To determine whether a Python process a process that is running the Python interpreter needs to be restarted, needrestart extracts the PYTHONPATH environment variable from this process's...

CVE-2026-24061

Telnet Vulnerability Scanner & Exploiter This Python script main.py is a multi-threaded tool designed to scan a list of target IPs/hostnames and attempt to exploit a specific vulnerability over Telnet. !WARNING This tool is intended for educational purposes and authorized penetration testing only...

CVE-2022-0337-PoC-Google-Chrome-Microsoft-Edge-Opera

🤝 Show your support - give a ⭐️ if you liked the content | SHARE on Twitter | Follow me on CVE-2022-0337 System environment variables leak on Google Chrome, Microsoft Edge and Opera 📝 Description Successful exploitation of this vulnerability can lead to the leak of user's secrets stored inside a...

CVE-2021-4034

Exploit for CVE-2021-4034 Pkexec - Local Privilege Escalation For educational and authorized security research purposes only. Original Exploit Authors @arthepsy Vulnerability Description A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a...

goahead-webserver-pre-5.1.5-RCE-PoC-CVE-2021-42342-

Goahead webserver pre v5.1.5 RCE PoC CVE-2021-42342 A recent bug in Goahead Webserver was discovered by William Bowling which leads to RCE on the exploited server. The issue exists prior to version 5.1.5 which, according to Shodan covers around 2.8mio servers on the internet. A CVS is available n...

telnet_scan

Telnet Vulnerability Scanner CVE-2026-24061 & CVE-2026-32746 A Python-based security assessment tool that detects and where applicable exploits two critical vulnerabilities in GNU InetUtils telnetd: CVE-2026-24061 – Authentication bypass via USER environment variable injection CVSS 9.8...

PwnKit-Exploit

PwnKit-Exploit CVE-2021-4034 @c0br40x help to make this section in README!! Proof of Concept debian@debian:/PwnKit-Exploit$ make cc -Wall exploit.c -o exploit debian@debian:/PwnKit-Exploit$ whoami debian debian@debian:/PwnKit-Exploit$ ./exploit Current User before execute exploit...

CVE-2026-27574-OneUptime-RCE

CVE-2026-27574-OneUptime-RCE Overview Proof-of-Concept exploit for CVE-2026-27574 – a critical code injection vulnerability CWE-94 in OneUptime BOpen Registration B -- CRegister New Accou...

CVE-2023-4911

PoC of CVE-2023-4911 "Looney Tunables" This is a PoC of CVE-2023-4911 a.k.a. "Looney Tunables" exploiting a bug in glibc dynamic loader's GLIBCTUNABLES environment variable parsing function parsetunables. Code has been tested on Ubuntu 22.04.3 with glibc version 2.35-0ubuntu3.3. No attempts have...

CVE-2026-24061

CVE-2026-24061: telnetd Authentication Bypass Vulnerability CVE-2026-24061 is an authentication bypass vulnerability in telnetd that allows attackers to bypass identity verification through specific combinations of environment variables and directly obtain a root-privileged shell. There is a flaw...

CVE-2023-36845

CVE-2023-36845 Description CVE-2023-36845 represents a notable PHP environment variable manipulation vulnerability that impacts Juniper SRX firewalls and EX switches. While Juniper has categorized this vulnerability as being of medium severity, in this article, we will elucidate how this singular...

credactor

Credactor Find the secret. Fix it. Commit clean. Most secret scanners stop at the alert: you get a list of leaked credentials and the cleanup is yours. Credactor finds hardcoded secrets and rewrites them in place, so a leak in your working tree goes from found to fixed in one command. It runs on...

GNU-Inetutils-telnet-CVE-2026-24061-

CVE-2026-24061 GNU Inetutils Telnetd Authentication Bypass Vulnerability Detection Tool 📋 Project Overview This is an advanced detection tool for the GNU Inetutils Telnetd authentication bypass vulnerability CVE-2026-24061. This vulnerability has a CVSS score of 9.8, allowing attackers to obtain...

CVE-2026-24061-GNU-Inetutils-telnetd-Remote-Authentication-Bypass-Root-Shell-

🧨 Overview This repository contains a Proof‑of‑Concept exploit for GNU Inetutils telnetd remote authentication bypass vulnerability. The issue arises because telnetd improperly sanitizes the USER environment variable received via Telnet NEW‑ENVIRON negotiation before invoking /bin/login. By...

CVE-2024-31969

📌 CVE-2024-31969 CVE-2024-31969 is a local privilege escalation vulnerability in sudo when using the sudoedit command. This vulnerability was introduced since sudo 1.9.0 due to how sudoedit validates user environment variables and file ownership improperly. 📖 Description A flaw introduced in sudo...

lk_scraper

LinkedIn Scraper Scrapes Any LinkedIn Data Installation $ pip install git+git://github.com/jqueguiner/lkscraper Setup Using Docker compose $ docker-compose up -d $ docker-compose run lkscraper python3 Using Docker only for Selenium server First, you need to run a Selenium server $ docker run -d -...

CVE-2026-28372-GNU-inetutils-telnetd-Privilege-Escalation

CVE-2026-28372 — GNU inetutils telnetd Privilege Escalation PoC 👤 Author Mohammed Idrees Banyamer Jordan 🇯🇴 Instagram: @banyamersecurity Security Researcher | Offensive Security | Exploit Development 🧨 Exploit Title CVE‑2026‑28372 — GNU inetutils telnetd Privilege Escalation via...