CVE-2024-48990-Automatic-Exploit

CVE-2024-48990 PYTHONPATH Hijack - Privilege Escalation Exploit This tool automates the exploitation of a privilege escalation vulnerability in needrestart version 3.7, identified as CVE-2024-48990. It achieves root execution by leveraging the insecure use of the PYTHONPATH environment variable...

CVE-2026-96512

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · CVE-2026-96512 CVE-2026-96512 sudo 1.9.13p3 Debian bookworm - Sudo Project I am @abraxasnull. Local lab, not HTTP. The client is CVE-2026-96512-Abraxas-Labs.py. NOTBEFORE / NOTAFTER timestamps without a trailing Z go...

CVE-2023-36845

CVE-2023-36845 Description CVE-2023-36845 represents a notable PHP environment variable manipulation vulnerability that impacts Juniper SRX firewalls and EX switches. While Juniper has categorized this vulnerability as being of medium severity, in this article, we will elucidate how this singular...

CVE-2026-11115-Database-Connection-String-Injection-via-Env-Variable

CVE-2026-11115 – Database Connection String Injection via Env Variable Program Code Python dbconnector.py - Constructs DB connection string from environment import os, psycopg2 def connect: Reads DBURL; attacker can override via environment injection if they control an env var dburl =...

CVE-2026-24061-Telnetd

CVE-2026-24061 GNU Inetutils Telnetd Authentication Bypass CVE: CVE-2026-24061 Severity: Critical CVSS: 9.8 Critical CWE: CWE-88 — Improper Neutralization of Argument Delimiters in a Command Affected Component: GNU Inetutils telnetd Affected Versions: 1.9.3 through 2.7 Overview CVE-2026-24061 is ...

-CVE-2014-6271

/ || | | | | | | | / || | | |/ \ / | |/ / \ | || | | | | | | \ | || | | | | | | ' / | | || || | | | || | || . \ |/|| |||||/|| ||/ ||\ CVE-2014-6271 — Shellshock Remote Code Execution via Bash Environment Variable Injection "A flaw hidden in Bash for decades that shook the foundations of the...

CVE-2023-22809

Linux Privilege Escalation Exploit for CVE-2021-3560 Sudoedit a.k.a -e - Local Privilege Escalation For educational and authorized security research purposes only Original Exploit Authors n3m1dotsys Vulnerability Description In Sudo before 1.9.12p2, the sudoedit aka -e feature mishandles extra...

CVE-2026-69263

CVE 2026-69263 What CVE 2026-69263 is a patch bypass of the old RCE vulnerability patched back in August of 2025. The patch introduced a Denylist that blocked installation of arbitrary packages. How Since npm reads config from environment variables, setting the npmconfigyes=true environment...

CVE-2026-24061

CVE-2026-24061 Telnet RCE Exploit - By SafeBreach Labs This script exploits the CVE-2026-24061 vulnerability in Telnet servers using a malformed USER environment variable. Usage Run the script with a target host: python telnetrce.py -p Arguments host: Target IP address or hostname required -p,...

Out-FINcodedCommand

Out-FINcodedCommand v1.0 Introduction Out-FINcodedCommand is a PowerShell v2.0+ compatible PowerShell POC script designed to highlight several obfuscation techniques used by FIN threat actors. The primary obfuscation techniques highlighted in this tool are: 1. cmd.exe's variable char/string...

CVE-2024-50340

CVE-2024-50340 POC Requirements The registerargcargv option must be enabled in the PHP configuration file php.ini. This setting loads command-line arguments and query params into $SERVER'argv'. https://www.php.net/manual/en/ini.core.phpini.register-argc-argv Explanation of Vulnerable Code This...

CVE-2026-24061

GNU InetUtils telnetd Authentication Bypass via Argument Injection - CVE-2026-24061 📚 Introduction A recently identified argument injection vulnerability in GNU InetUtils telnetd allows attackers to circumvent authentication by setting the USER environment variable to the value “-f root”. As a...

CVE-2021-4034-PwnKit-

CVE-2021-4034 PwnKit - Analysis and Exploitation This repository contains the source code to demonstrate the exploitation of the CVE-2021-4034 vulnerability, also known as PwnKit , discovered in pkexec part of the Polkit package. This flaw allows local privilege escalation to root through the use...

fix-CVE-2020-15228

Fix CVE-2020-15228 set-env, add-path in Github-Actions This script changes lines in your github action file. You give it a directory name, and it searches for all files with the ".sh" or ".yml" extension. It recognizes these lines: echo ::set-env name=FOOBAR::$FOOBAR echo ::set-env...

CVE-2024-48990

CVE-2024-48990 !WARNING These files and informations are intended for educational purpose only. The author is not responsible for any malicious behavior. All informations provided are not intended to incite any type of crime or abuse. Description Qualys discovered that needrestart, before version...

hack

💀 PwnKit CVE-2021-4034 & Reverse Shell Toolkit ⚠️ DISCLAIMER: This repository has been created solely for educational and security research purposes. The author is not responsible for the misuse of these tools. Use it only in controlled environments or where you have explicit permission. 📜...

CVE-2014-6271

CVE-2014-6271 An automated way to fix bash Testing for the Vulnerability You can determine if you are vulnerable by executing this test: env x=' :;; echo vulnerable' bash -c 'echo hello' Fixing Vulnerability Run this on the command line. You may be prompted to enter your password. bash curl -s...

CVE-2024-48990-PoC

CVE-2024-48990-PoC What is needrestart and how does it work? Needrestart is a widely used utility on Linux systems default on many Ubuntu versions that checks after a software update whether any service or the system itself needs to be restarted. By analyzing running processes, it determines if...

lk_scraper

LinkedIn Scraper Scrapes Any LinkedIn Data Installation $ pip install git+git://github.com/jqueguiner/lkscraper Setup Using Docker compose $ docker-compose up -d $ docker-compose run lkscraper python3 Using Docker only for Selenium server First, you need to run a Selenium server $ docker run -d -...

CVE-2021-4034

Exploit for CVE-2021-4034 Pkexec - Local Privilege Escalation For educational and authorized security research purposes only. Original Exploit Authors @arthepsy Vulnerability Description A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a...