PwnKit-Exploit

PwnKit-Exploit CVE-2021-4034 @c0br40x ayudó a hacer esta sección en el README!! Prueba de Concepto debian@debian:/PwnKit-Exploit$ make cc -Wall exploit.c -o exploit debian@debian:/PwnKit-Exploit$ whoami debian debian@debian:/PwnKit-Exploit$ ./exploit Current User before execute exploit...

looney-tunables-CVE-2023-4911

PoC de CVE-2023-4911 Looney Tunables Este es un PoC de CVE-2023-4911 también conocido como "Looney Tunables" que explota un error en la función de análisis de la variable de entorno GLIBCTUNABLES del cargador dinámico de glibc, parsetunables. Comenzando Ejecutando el programa Podemos comprobar si...

Poison-HTB-Report

Poison-HTB-Report Escalación de privilegios en HTB "Poison" usando PwnKit CVE-2021-4034 HTB "Poison" - Informe de escalación de privilegios BugVex Este repositorio contiene un informe de vulnerabilidad completo sobre la máquina Hack The Box Poison. 🔍 Resumen del exploit CVE: CVE-2021-4034 PwnKit...

CVE-2024-48990

Exploit CVE-2024-48990 Escalada de Privilegios Local en needrestart 3.8 mediante inyección de PYTHONPATH. Cómo Funciona 1. needrestart se ejecuta como root y escanea todos los procesos 2. Encuentra nuestro proceso Python, lee PYTHONPATH=/tmp/.m desde /proc/pid/environ 3. Ejecuta Python como root...

CVE-2022-22947

Entorno RCE de Spring Cloud Gateway CVE-2022-22947 CVE-2022-22947 fue identificado en el jar del servidor Spring Cloud Gateway. Después de compilar la aplicación, debería poder ver las rutas existentes visitando: http://127.0.0.1:9000/actuator/gateway/routes Compilar $ mvn package -DskipTests...

fix-CVE-2020-15228

Arreglar CVE-2020-15228 set-env, add-path en Github-Actions Este script cambia líneas en tu archivo de acción de github. Le das un nombre de directorio, y busca todos los archivos con la extensión ".sh" o ".yml". Reconoce estas líneas: echo ::set-env name=FOOBAR::$FOOBAR echo ::set-env...

CVE-2026-96512

abraxaslabs.tech · github.com/abraxas · @abraxasnull · CVE-2026-96512 CVE-2026-96512 sudo 1.9.13p3 Debian bookworm — Sudo Project A flaw was found in sudo. When sudoers rules use NOTBEFORE or NOTAFTER time-based access restrictions with timestamps that omit the trailing Z timezone indicator, the...

CVE-2024-32019-PoC

CVE-2024-32019-PoC Script Bash para escalada de privilegios mediante "ndsudo" Exploit Local de Netdata Versiones afectadas de Netdata = v1.45.0, = v1.44.0-60, v1.45.0-169 Descripción de la vulnerabilidad La herramienta "ndsudo" ejecuta un conjunto restringido de comandos externos, pero las rutas ...

CVE-2026-24061

Telnet Vulnerability Scanner & Exploiter This Python script main.py is a multi-threaded tool designed to scan a list of target IPs/hostnames and attempt to exploit a specific vulnerability over Telnet. !WARNING This tool is intended for educational purposes and authorized penetration testing only...

CVE-2026-69263

CVE 2026-69263 What CVE 2026-69263 is a patch bypass of the old RCE vulnerability patched back in August of 2025. The patch introduced a Denylist that blocked installation of arbitrary packages. How Since npm reads config from environment variables, setting the npmconfigyes=true environment...

Juniper-exploit-CVE-2023-36845

CVE-2023-36845 Descripción CVE-2023-36845 representa una vulnerabilidad notable de manipulación de variables de entorno PHP que afecta a los firewalls Juniper SRX y switches EX. Aunque Juniper ha categorizado esta vulnerabilidad como de gravedad media, en este artículo explicaremos cómo esta únic...

rubygem-hammer_cli: command injection via insecure editor invocation

A flaw was found in rubygem-hammercli. A command injection vulnerability exists in Hammer CLI and the Railties Ruby on Rails component distributed with Satellite due to the insecure interpolation of the $EDITOR environment variable into the Ruby system method. By passing a single interpolated...

Terrminus-CVE-2026-2406

Terminus - CVE-2026-24061 Scanner & Exploitation Framework A security analysis engine for CVE-2026-24061 Telnet NEWENVIRON authentication bypass and privilege escalation vulnerability. Overview Terminus is a professional security research tool designed for authorized penetration testing and...

CVE-2021-4034

CVE-2021-4034 One day for the polkit privilege escalation exploit Just execute make, ./cve-2021-4034 and enjoy your root shell. The original advisory by the real authors is here PoC If the exploit is working you'll get a root shell immediately: localuser@ubuntu-poc:/CVE-2021-4034$ make cc -Wall...

CVE-2026-24061

CVE-2026-24061 Vulnerability Batch Detection Tool ⚠️ Note : CVE-2026-24061 GNU Inetutils is a classic set of network tools provided by the GNU project, which includes the telnetd service, i.e., the Telnet server daemon. In versions 1.9.3 through 2.7, the telnetd service has a fatal flaw in the use...

CVE-2026-27574-OneUptime-RCE

CVE-2026-27574-OneUptime-RCE Overview Proof-of-Concept exploit for CVE-2026-27574 – a critical code injection vulnerability CWE-94 in OneUptime BOpen Registration B -- CRegister New Accou...

CVE-2026-28372-GNU-inetutils-telnetd-Privilege-Escalation

CVE-2026-28372 — GNU inetutils telnetd Privilege Escalation PoC 👤 Author Mohammed Idrees Banyamer Jordan 🇯🇴 Instagram: @banyamersecurity Security Researcher | Offensive Security | Exploit Development 🧨 Exploit Title CVE‑2026‑28372 — GNU inetutils telnetd Privilege Escalation via...

CVE-2026-24061-GNU-Inetutils-telnetd-Remote-Authentication-Bypass-Root-Shell-

🧨 Overview This repository contains a Proof‑of‑Concept exploit for GNU Inetutils telnetd remote authentication bypass vulnerability. The issue arises because telnetd improperly sanitizes the USER environment variable received via Telnet NEW‑ENVIRON negotiation before invoking /bin/login. By...

CVE-2021-4034_POC

CVE-2021-4034 - Proof Of Concept This POC exploits GLib 's gprinterr to leverage code execution through the injection of the GCONVPATH environmental variable. Running the exploit Make a tarball file of the exploit: make tar Then somehow transfer the generated tar to the target machine, compile, a...

CVE-2026-24061-PoC-Telnetd

CVE-2026-24061 Proof of Concept PoC ⚠️ DISCLAIMER: EDUCATIONAL PURPOSES ONLY ⚠️ This repository contains a Proof-of-Concept PoC exploit for CVE-2026-24061. It is intended strictly for educational purposes and for testing systems in a controlled lab environment. The author takes no responsibility...