CVE-2024-26229-BOF

CVE-2024-26229 BOF Beacon Object File implementation of CVE-2024-26229 — Windows CSC driver local privilege escalation via DKOM token theft. Based on RalfHacker/CVE-2024-26229-exploit, converted to BOF with Dynamic Function Resolution DFR for use with C2 frameworks that support the Cobalt Strike...

needrestart-privesc-cve-2024-48990

needrestart Privilege Escalation CVE-2024-48990 This repository contains a minimal local privilege escalation exploit targeting a vulnerability in needrestart CVE-2024-48990. The vulnerability allows arbitrary Perl code execution as root by abusing the -c configuration option, which is parsed and...

CVE-2021-4034

CVE-2021-4034 This contains single-file exploit for cve-2021-4034 which is a Polkit Local Privilege Escalation. Use it wisely! Vulnerability Description CVE-2021-4034, commonly referred to as Pwnkit , is a memory corruption vulnerability in the pkexec component of Polkit, a toolkit used for...

CVE-2025-27591-Meta-below-LPE

CVE-2025-27591 — Meta below Symlink Local Privilege Escalation Overview Field| Details ---|--- CVE| CVE-2025-27591 Software| Meta below system resource monitor Affected Versions| 0.9.0 Vulnerability| Symlink following → arbitrary file overwrite as root Authentication| Local user with sudo access ...

bazad5

bazad5 Local privilege escalation for OS X 10.10.5 via CVE-2016-1828...

CVE-2025-32463

CVE-2025-32463 Is a local privilege escalation vulnerability affecting vulnerable versions of sudo. The flaw abuses the sudo -R chroot feature together with the Linux Name Service Switch NSS mechanism to force sudo into loading an attacker-controlled shared library as root. By manipulating...

CVE-2017-5487

CVE-2017-5487 is a vulnerability in the Linux kernel that was discovered and disclosed in 2017. The vulnerability allows a local attacker to gain root access to a system by exploiting a race condition in the key management subsystem of the kernel. The vulnerability can be exploited by a user with...

FortiLPE

Description Local privilege escalation PoC exploit for CVE-2025-62676 / EUVD-2025-206993 that targets FortiClient VPN running on Windows. Executes a payload in the context of SYSTEM from a normal user context via an arbitrary XML file write. The PoC has been tested against FortiClient version 7.4...

CVE-2017-7184

CVE-2017-7184 – Linux Kernel XFRM Privilege Escalation No Sudo Overview This repository contains a proof-of-concept local privilege escalation exploit for CVE-2017-7184 , a Linux kernel vulnerability in the XFRM IPsec netlink subsystem. The exploit demonstrates how an unprivileged user can gain...

CVE-2025-32463

🚨 CVE-2025-32463 — “Chwoot” Critical Local Privilege Escalation in the Most Widely Used Linux Privilege Manager Any local user even without sudoers permissions could become root in seconds usingsudo -R ⚠️ Overview CVE-2025-32463 also known as "chroot-to-root " is a critical local privilege...

COWSlip

COWSlip: XFS reflink stale-mapping LPE originally RefluXFS or CVE-2026-64600 The name describes the mechanism: COW identifies XFS copy-on-write/reflink handling. Slip describes the stale data-fork mapping slipping to the wrong physical block after the ILOCK cycle. However, official credits belong...

CVE-2022-0486

Fidelis Network and Deception - CVE-2022-0486 - Insecure File Permissions Privilege Escalation - Multiple Releasability and Acknowledgements All exploits were approved for public release by the United States Government. Special thanks to the servicemen and government liaisons tasked with approvin...

CVE-2022-0435

CVE-2022-0435 LPE PoC for CVE-2022-0435 PoC was written assuming that kaslr was disabled...

CVE-2022-36162

CVE-2022-36162 Suggested description pdftoroff hovacui 1.1.0 is affected by: Command execution. The impact is: execute arbitrary code local. The component is: hovacui.c, line 1574. The attack vector is: To exploit the vulnerability, you just have to change HOME environment variable, put some...

CVE-2025-47810

PunkBuster LPI CVE-2025-47810 Background PunkBuster installs itself as two services, and an optional? kernel driver. PnkBstrA: Service that runs constantly in the background, and in charge of managing PunkBuster as a whole PnkBstrB: Service that starts when a protected game starts. Comes with mor...

CVE-2023-52927

CVE-2023-52927 LPE exploit for CVE-2023-52927 - a Use-After-Free vulnerability in netfilter. My write-up of the vulnerability: CVE-2023-52927 - Turning a Forgotten Syzkaller Report into kCTF Exploit Reproducer: KASAN trigger poc Building Install dependencies: make prerequisites Build exploit: mak...

CVE-2021-22555

CVE-2021-22555 Linux Kernel 2.6.19 5.9 - 'Netfilter Local Privilege Escalation'...

CVE-2026-36213

CVE-2026-36213 CVE-2026-36213 | Local Privilege Escalation in MEmu Android Emulator 9.2.7.0 via Insecure Service Binary Permissions | Patched in 9.3.2 CVE-2026-36213 — MEmu Android Emulator 9.2.7.0 LPE Summary A Local Privilege Escalation LPE vulnerability in MEmu Android Emulator 9.2.7.0. The...

metasploitable2-privilege-escalation

Task 05 — Privilege Escalation Zyroo Cybersecurity Internsh...

CVE-2018-8120

CVE-2018-8120 CVE-2018-8120 Windows LPE exploit Supported systems: Win7 x32, Win7 x64, Win2008 x32, Win2008 R2 x32, Win2008 R2 Datacenter x64, Win2008 Enterprise x64 WinXP x32, Win2003 x32,Win2003 x64 The original exp did not support XP and 2003. The current code adds support for these two system...