CVE-2024-48990-PoC

CVE-2024-48990-PoC What is needrestart and how does it work? Needrestart is a widely used utility on Linux systems default on many Ubuntu versions that checks after a software update whether any service or the system itself needs to be restarted. By analyzing running processes, it determines if...

CVE-2016-8655

chocoboroot.c exploit de condición de carrera en AFPACKET de Linux exploit para Ubuntu 16.04 x8664 user@ubuntu:$ gcc chocoboroot.c -o chocoboroot -lpthread user@ubuntu: $ ./chocoboroot haciendo la página vsyscall escribible.. nuevo intento de exploit comenzando, saltando a 0xffffffff8106f320,...

CVE-2026-14991

IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 is vulnerable to a buffer overflow, caused by improper bounds checking. A local user could overflow the buffer and execute arbitrary code on the system...

CVE-2026-107614

An integer underflow in WinCursorShapeUtils::trimTransparent in GlavSoft TightVNC Server for Windows before 2.8.88 allows a local authenticated user to crash the server, and potentially read out-of-bounds memory, by causing a cursor shape with a width or height of zero to be processed on the DXGI...

CVE-2025-32463-POC

CVE-2025-32463 – Escalada de Privilegios en Sudo chroot PoC Este repositorio contiene un exploit de prueba de concepto PoC para CVE-2025-32463, una vulnerabilidad de escalada de privilegios local en sudo versiones 1.9.14 a 1.9.17. La vulnerabilidad permite que un usuario local no privilegiado...

CVE-2021-3560-exploit

CVE-2021-3560 — Escalada de Privilegios en Polkit CVE-2021-3560 es una vulnerabilidad de escalada de privilegios local en Polkit anteriormente PolicyKit, el marco de autorización utilizado por los entornos de escritorio Linux. Un atacante local sin privilegios puede explotar una condición de...

CVE-2021-24084

WindowsMDMLPE Demostración : https://youtu.be/o5PyVhj3eMw https://blog.0patch.com/2021/11/micropatching-unpatched-local-privilege.html...

copy_fail

Notas de Investigación sobre copyfail CVE-2026-31431 Inglés 简体中文 Este repositorio es un espacio de trabajo de investigación defensiva para estudiar la vulnerabilidad copyfail de Linux, identificada como CVE-2026-31431. El objetivo de este repositorio es preservar notas de análisis, documentar el...

copy-fail-cve-2026-31431-linux-kernel-page-cache-lpe

Copy Fail CVE-2026-31431 - Comprobador de Vulnerabilidad Script de validación conceptual para CVE-2026-31431 «Copy Fail» — una escalada de privilegios local del kernel de Linux a través de la escritura en la caché de páginas de algifaead. Vulnerabilidad CVE-2026-31431 es un error lógico en la...

KINGSOFT-WPS-Office-LPE

JVN Advisory https://jvn.jp/en/vu/JVNVU90673830/ The following CVE number have been assigned: CVE-2022-25943 KINGSOFT WPS Office LPE WPS Office is an office suite for Microsoft Windows, macOS, Linux, iOS, Android, and HarmonyOS developed by Zhuhai-based Chinese software developer Kingsoft...

CVE-2022-0219

CVE-2022-0219 Jadx is vulnerable to Improper Restriction of XML External Entities CWE-611 when exporting a malicious APK file via the -e option containing a crafted AndroidManifest.xml / strings.xml to gradle. It can lead to local file disclosure when using it from the CLI. When used as a library...

CVE-2025-26240

CVE-2025-26240 This is proof of concept code for exploitation of the pdfkit fromstring method. It contains simple payload demonstrating both LFI and SSRF...

CVE-2020-1054

CVE-2020-1054 Windows 7 LPE...

CVE-2023-52654

Run file python3 CVE-2023-52654.py or sudo CVE-2023-52654.py latest kernel bypass root updated POC just run python file with root or without root ✅ Features Eleva automáticamente privilegios en sistemas Unix explotando binarios setuid/setgid mal configurados, capacidades y permisos sudo. Diseñado...

CVE-2024-25466

CVE-2024-25466 Descripción para CVE-2024-25466 Descripción sugerida La vulnerabilidad de Directory Traversal en React Native Document Picker anterior a v.9.1.1 y corregida en v.9.1.1 permite a un atacante local ejecutar código arbitrario mediante un script manipulado en el componente de la librer...

CVE-2026-14273

IBM DataPower Gateway versions 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 are vulnerable to an incorrect authorization flaw (CWE-863). This issue could allow a local attacker to obtain sensitive information . No specific root cause...

CVE-2026-14273 IBM DataPower Gateway Incorrect Authorization

IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a local attacker to obtain sensitive information due to improper authorization...

EUVD-2026-94999

IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a local attacker to obtain sensitive information due to improper authorization...

CVE-2026-14273 IBM DataPower Gateway Incorrect Authorization

IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a local attacker to obtain sensitive information due to improper authorization...

Reporte-de-Escalada-de-Privilegios-Local-Dirty-Frag

Reporte de Escalada de Privilegios Local — Dirty Frag Estudiante: Jonatan Claudio 1. Requerimientos Resumen de la metodología Se realizó una evaluación de vulnerabilidades sobre una máquina virtual con Kali Linux utilizando un script detector para la vulnerabilidad Dirty Frag, asociada a las...