cve-2025-21479_iqooneo8

CVE-2025-21479 — Qualcomm Adreno GPU 提权漏洞利用（SM8475 / iQOO Neo8） 针对 CVE-2025-21479 的本地提权实验代码，目标是 vivo V2301A（iQOO Neo8 / PD2301，Snapdragon 8+ Gen 1 / SM8475，Adreno A730，Android 14，GKI 内核 5.10）上的 Qualcomm Adreno GPU（KGSL）。 原理上，漏洞利用通过 KGSL 的 CPSMMUTABLEUPDATE 命令驱动 GPU 的 SMMU， 获得任意物理内存读写 能力，进而关闭...

CVE-2024-31969

📌 CVE-2024-31969 CVE-2024-31969 adalah kerentanan local privilege escalation pada sudo ketika menggunakan perintah sudoedit. Kerentanan ini diperkenalkan sejak sudo 1.9.0 karena cara sudoedit memvalidasi environment variable pengguna dan kepemilikan file yang kurang tepat. 📖 Deskripsi A flaw...

CVE-2021-4034

CVE-2021-4034 PoC for PwnKit: Local Privilege Escalation Vulnerability in polkit’s pkexec CVE-2021-4034 https://seclists.org/oss-sec/2022/q1/80...

CVE-2026-46300

CVE-KERNEL · Linux Kernel LPE Chain Multi-CVE Local Privilege Escalation chain for Linux kernel vulnerabilities uid=1000 → root via xfrm-ESP, RxRPC, or Fragnesia page-cache write Overview CVE-KERNEL is a Python-based Local Privilege Escalation LPE tool that chains multiple Linux kernel CVEs to...

CVE-2022-31262

CVE-2022-31262 GOG Galaxy 2.X LPE Exploit CVE-2022-31262 Tested Versions 2.0.46 - 2.0.51 latest at 11.08.2022, older versions may also be vulnerable Blog Post about the finding: https://secure77.de/gog-galaxy-cve-2022-31262/ LPE found via: https://github.com/secure-77/PSAccessFinder POC Demo Than...

CVE-2019-11932

CVE-2019-11932 The system address and the gadget must be replaced by the real address found by an information disclosure vulnerability. After replacing the system address and the gadget. Run the code to generate the malicious GIF file: notroot@osboxes:/Desktop/gif$ make...

CVE-2024-1086-Exploit

🔒 CVE-2024-1086 Exploit Project 🛡️ Polished educational Linux kernel exploit for security research This project provides a robust, non-functional template for studying CVE-2024-1086, a use-after-free vulnerability in the Linux kernel's netfilter: nftables component, enabling local privilege...

linux-kernel-exploits

linux-kernel-exploits Introduction linux-kernel-exploits Vulnerability List CVE Description Kernels CVE–2018–18955 mapwrite in kernel/usernamespace.c allows privilege escalation Linux kernel 4.15.x through 4.19.x before 4.19.2 CVE–2018–1000001 glibc glibc 2.6.22 released in 2007 CVE-2016-2384 a...

CVE-2021-33909

CVE-2021-33909 Sequoia Writeup gcc exploit.c -o exploit -lpthread -DBLOCKVIAUSERFAULTFD gcc exploit.hello.c -o exploit.hello -lpthread -lfuse -DFILEOFFSETBITS=64 $ mkdir dir $ ./exploit $pwd/dir id...

K50G-POCOF4GT-CVE-2026-43499-PoC

Redmi K50 Gaming ingres — CVE-2026-43499 GhostLock Temporary Root PoC One-click temporary Root without unlocking BL. Uses the GhostLock CVE-2026-43499, futex PI Use-After-Free local privilege escalation chain to obtain a root anchor, then mounts the kernelsu module into the running kernel via...

CVE-2026-31431-CopyFail-Linux-PrivEsc

CVE-2026-31431 CopyFail Linux Local Privilege Escalation A demonstration and explanation of CVE-2026-31431, the Linux Kernel Copy Fail Local Privilege Escalation vulnerability. The vulnerability allows for files opened with read permission to have data overwritten in the page cache. This reposito...

CallbackHell

CallbackHell Exploit for CVE-2021-40449 Win32k - LPE CallbackHell Description Technical Writeup PoC References Description CVE-2021-40449 is a use-after-free in Win32k that allows for local privilege escalation. The vulnerability was found in the wild by Kaspersky. The discovered exploit was...

SpoolFool

SpoolFool Exploit for CVE-2022-21999 - Windows Print Spooler Elevation of Privilege Vulnerability LPE Details The provided exploit should work by default on all Windows desktop versions. Please see the blog post for full technical details here. Usage PS C:\SpoolFool .\SpoolFool.exe SpoolFool By...

CVE-2026-46331-pedit-COW-detection

CVE-2026-46331 pedit COW – Linux LPE Validation and auditd/AppArmor Detection Defensive validation report for CVE-2026-46331, focused on Linux kernel actpedit, local privilege escalation behavior, auditd telemetry, AppArmor mitigation, and detection logic. Repository description This repository...

CVE-2015-8543_for_SLE12SP1

$cat /etc/-release PRETTYNAME="SUSE Linux Enterprise Server 12 SP1" $id uid=1000jeremysp1 gid=100users groups=100users $sudo sh disablesecurity.sh $gcc exp.c -o exp 2/dev/null $../nsjail/nsjail -Mo --user 0 --group 0 --keepcaps --chroot / -- /bin/sh -i sh-4.2 /home/jeremysp1/nullpointerderf/exp +...

SMBGhost-LPE-Metasploit-Module

SMBGhost-LPE-Metasploit-Module This is an implementation of the CVE-2020-0796 aka SMBGhost vulnerability, compatible with the Metasploit Framework Notes: This module made to be used when you have a valid shell to escalate your privileges. You can change the payload, if you want to have your custo...

CVE-2021-4034

CVE-2021-4034 This is a PoC for PwnKit Local Privilege Escalation Vulnerability that was discovered by Qualys Security Team. The Qualys Research Team has discovered a memory corruption vulnerability in polkit’s pkexec, a SUID-root program that is installed by default on every major Linux...

CVE-2024-22026

CVE-2024-22026 Exploit POC for CVE-2024-22026 affecting Ivanti EPMM "MobileIron Core" CVE-2024-22026 is a local privilege escalation vulnerability in Ivanti EPMM formerly MobileIron server versions prior to 12.1.0.0, 12.0.0.0, and 11.12.0.1. This vulnerability allows a local attacker to gain root...

CVE-2025-2502

Discovered by chance while learning about local privilege escalation. In any version of Lenovo PC Manager, the tools in Lenovo PC Manager have permission flaws. Any downloaded tool grants ordinary users F full control permissions. Since tools in all versions have permission issues, ordinary users...

CVE-2021-4034

Information Exploit Title: Local Privilege Escalation in polkit's pkexec CVE-2021-4034 Date: 01/25/2022 Exploit Author: Qualys Research Team Tested on: ubuntu 20.04.1 LTS CVE ID: CVE-2021-27928 How to Exploit Test Environment： Step 1：build the expFrom https://github.com/berdav/CVE-2021-4034 make...