CVE-2023-20198

CVE-2023-20198 CVE-2023-20198 PoC ! Description perform actions on a target web server. The script demonstrates how to create a local user account, install an implant, restart the web server, check for the presence of the implant, and finally, clean up by deleting the created user account...

CVE-2023-3897

CVE-2023-3897 Username enumeration is possible through Bypassing CAPTCHA in On-premise SureMDM Solution on Windows deployment allows attacker to enumerate local user information via error message. This issue affects SureMDM On-premise: 6.31 and below version...

CVE-2020-13884

Exploit Title: Citrix Workspace app before 1912 for Windows - Privilege Escalation 2 Date: 2020-06-07 Author: Andrew Hess Software Link: https://www.citrix.com/downloads/workspace-app/legacy-workspace-app-for-windows/workspace-app-for-windows-1911.html/ Bulletin:...

CVE-2015-1328-GoldenEye

CVE-2015-1328-GoldenEye about exploit: The overlayfs implementation in the linux aka Linux kernel package before 3.19.0-21.21 in Ubuntu through 15.04 does not properly check permissions for file creation in the upper filesystem directory, which allows local users to obtain root access by leveragi...

CVE-2017-7472

CVE-2017-7472 The KEYS subsystem in the Linux kernel before 4.10.13 allows local users to cause a denial of service memory consumption via a series of KEYREQKEYDEFLTHREADKEYRING keyctlsetreqkeykeyring calls. Shortcut Vulnerable kernel 4.10.13...

CVE-2023-20198

CVE-2023-20198 - PoC SCRIPT /!\ Aviso legal: Este script se proporciona 'tal cual' y exclusivamente con fines educativos. Se recomienda encarecidamente a los usuarios que actúen con precaución y lo utilicen dentro de los límites de las consideraciones legales y éticas. Descripción Ejecuta varias...

CVE-2017-2671

Linux kernel CVE-2017-2671 Local Denial of Service Vulnerability what !! CVE-2017-2671 1 Linux kernel CVE-2017-2671 Local Denial of Service consequently cannot ensure that disconnect function calls are safe, which allows local users to cause a denial of service panic by leveraging access to the...

CVE-2019-18634

CVE-2019-18634 This is a basic reproduction of CVE-2019-18634, a privilege escalation exploit in sudo with pwfeedback enabled. This was created as part of a project for NTU SC3010 to demonstrate a security vulnerability. To reproduce the exploit, a Docker image of Ubuntu 20.04 was used. A...

CVE-2025-27591-PoC

CVE-2025-27591 PoC: Local Privilege Escalation in Below v0.9.0 Proof of Concept for CVE-2025-27591, a vulnerability that allows to local unprivileged users to escalate their privileges to root through symlink attacks. 🕵️‍♂️ Technical Details The vulnerability affects the Below service versions...

CVE-2003-0358

CVE-2003-0358 Posting for historical reasons. snowcrash [email protected] https://github.com/snowcra5h/ Description Buffer overflow in 1 nethack 3.4.0 and earlier, and 2 falconseye 1.9.3 and earlier, which is based on nethack, allows local users to gain privileges via a long -s command line...

CVE-2018-19788

Prueba de concepto para el CVE-2018-19788 Rol de Ansible para verificar la vulnerabilidad rastreada como CVE-2018-19788 que afecta a PolicyKit versión 0.115, la cual viene preinstalada en una amplia gama de distribuciones de Linux como Ubuntu, Red Hat, CentOs, por mencionar algunas. Requisitos...

CVE-2020-9470

What's this Wing FTP Server 6.2.5 - Privilege Escalation Introduction A weakness in the handling of HTTP sessions within Wing FTP Server allows any local user to escalate privileges to root on Linux, MacOS, and Solaris. Exploitation is contingent on an already-established administrative session. ...

OverlayFS---CVE-2021-3493

TL;DR Find out how a vulnerability in OverlayFS allows local users under Ubuntu to gain root privileges. Vulnerability Summary An Ubuntu specific issue in the overlayfs file system in the Linux kernel where it did not properly validate the application of file system capabilities with respect to...

CVE-2010-0426

CVE-2010-0426 https://www.cvedetails.com/cve/CVE-2010-0426/ sudo 1.6.x anterior a 1.6.9p21 y 1.7.x anterior a 1.7.2p4, cuando un pseudo-comando está habilitado, permite una coincidencia entre el nombre del pseudo-comando y el nombre de un archivo ejecutable en un directorio arbitrario, lo que...

ansible_CVE-2016-5195_check

Description Playbook for testing the dirty cow vulnerability CVE-2016-5195. Dependencies local user on the system with sudo priveleges Run root@kitploit: ansible-playbook -i host, check.yml -u jondoe -k -K Links http://dirtycow.ninja...

CVE-2026-89483

A flaw was found in the Linux kernel's Non-Volatile Memory Express NVMe subsystem. Under specific memory pressure conditions, a local user could trigger a scenario where uninitialized kernel memory is used and potentially exposed. This could lead to information disclosure, revealing sensitive dat...

CVE-2026-89604

A flaw was found in the Linux kernel's efivarfs component. An unprivileged local user can exploit this by repeatedly calling the statfs handler on the efivarfs mount point. This action triggers a flood of calls to the QueryVariableInfo runtime service, which is particularly costly on x86 systems...

CVE-2026-89460

A flaw was found in the Linux kernel. A local user can trigger a kernel panic by running the perf stat command while CPUs are being hotplugged. This occurs because the system fails to properly allocate CPU event structures for newly online CPUs, leading to a null pointer dereference. Successful...

CVE-2026-81013

A flaw was found in the hp-bioscfg component of the Linux kernel. A local user could trigger a heap out-of-bounds read by writing an empty string to the currentpassword or newpassword fields. This occurs because the validatepasswordinput function attempts to access memory before the allocated...

CVE-2026-80964

A flaw was found in the Linux kernel's ALSA Advanced Linux Sound Architecture virmidi driver. This vulnerability allows a local user to trigger an out-of-bounds access by manually binding a device via the sysfs interface with an invalid card index. This can lead to system instability or potential...